Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: taV4X9x2Vx1CrgGYh2PK3tyi/xixuwGKiFfwFgmk0T4=
Subject key identifier: 14:E3:CB:BE:A5:5D:2B:73:8E:88:F6:96:88:A9:54:89:73:E8:96:96
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 019D382E8BD8F2E458CF84FC9F9C4A7BC46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:01:07 +0000
Manifest this update: Sun 29 Mar 2026 06:01:07 +0000
Manifest next update: Mon 30 Mar 2026 06:01:07 +0000
Files and hashes: 1: T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa (hash: zcRDL/MU2cEJIkxNEFip0E/KypuWn835uLEU6Antv/M=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: qtkPSBOJ+dOzcuEovBM2JfQvSV/ELXBfuMkEoN5rV84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8b:d8:f2:e4:58:cf:84:fc:9f:9c:4a:7b:c4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Mar 29 06:01:07 2026 GMT
Not After : Mar 30 06:01:07 2026 GMT
Subject: CN=14e3cbbea55d2b738e88f69688a9548973e89696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:b6:ab:ea:f3:1a:8a:71:ff:f4:8f:14:cb:
9c:ad:1f:c4:b6:08:d2:22:fa:1c:26:d9:8c:08:7f:
42:d1:cc:9b:33:02:9d:f0:42:7b:da:24:76:e8:ed:
93:8b:59:fb:c1:af:5e:98:01:28:c9:67:55:11:78:
77:10:08:67:41:4a:c7:67:ac:b1:ab:bf:45:be:61:
e1:ee:28:06:06:30:d0:cf:73:11:47:9a:3c:7e:48:
29:76:58:ec:30:d0:83:88:3c:5c:74:84:19:d4:2a:
a8:10:21:5a:b5:d1:6b:63:7e:26:c3:b2:1a:ca:c1:
8f:4f:0f:7b:b2:b8:65:ce:a2:a6:7b:47:c1:74:c8:
0e:48:80:e9:dd:39:0e:f3:9d:ad:04:ba:d2:b1:9e:
9f:7c:86:ee:49:f6:c2:af:47:af:a0:c6:1a:6d:a1:
9f:da:04:0a:b2:08:2c:06:d3:9f:44:34:b5:ff:eb:
3e:c9:0a:e2:82:34:60:81:5a:ce:03:53:84:e0:fe:
3f:93:ea:c6:6e:db:09:b1:ba:6d:fe:a8:2e:40:b9:
9b:5a:24:1a:6e:7d:fe:17:be:22:cb:e0:b8:4f:0a:
06:04:99:30:ef:08:6a:05:e4:25:fa:84:ee:db:92:
f9:40:5b:07:aa:77:a8:de:cb:11:b4:b5:b6:29:88:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:CB:BE:A5:5D:2B:73:8E:88:F6:96:88:A9:54:89:73:E8:96:96
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a5:94:49:93:2a:f6:82:41:20:8a:cb:ce:bf:a1:37:ca:3b:
83:6c:0e:a6:7d:29:52:64:80:19:94:38:e6:b7:fd:00:6b:0e:
88:45:c2:b8:70:1d:92:fe:2a:c6:83:d6:59:2b:f5:2e:bf:15:
e6:39:5e:d9:4e:08:2a:ae:0a:5f:f3:29:4e:fa:51:bf:5c:35:
5d:e5:ed:70:59:72:75:47:82:8e:88:d0:ae:3d:92:17:d5:f9:
57:ea:ba:f2:94:62:06:87:4c:47:b5:46:65:56:4e:59:62:60:
8e:0b:4c:e4:90:f2:17:f0:92:92:94:89:da:04:f1:01:1a:51:
f3:3a:c2:9b:9a:f4:8f:56:3b:f8:4a:e7:61:44:0c:af:a5:82:
9a:39:f1:30:9f:ab:33:4d:7d:6c:bd:87:3d:9b:1d:af:65:e6:
96:f2:28:6c:c8:13:87:f6:20:22:35:0d:f5:23:57:5c:a2:5f:
05:4f:1c:f8:e1:0a:69:a9:5c:fc:46:f9:8a:8d:66:8d:43:1b:
b6:6e:9f:fd:94:91:04:60:e6:33:17:9e:91:83:0e:94:e3:56:
45:3c:d5:f3:30:09:72:cb:ac:04:e5:09:74:b7:6a:12:a8:51:
86:22:97:f7:ac:4b:82:c3:db:8a:cb:ae:6f:0a:30:dd:88:0f:
1e:c8:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:11 2026 by rpki-client