Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: 6ekFyCWG86PWsEjw4spHRTBqubC51QtI/QPaJ2l7zsI=
Subject key identifier: EA:75:B0:D0:D1:24:7B:AC:3E:0F:43:A3:B4:69:31:52:33:71:15:FA
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 019D3A1C42E80A67CECD1ED9D061D026D606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 10F8
Signing time: Sun 29 Mar 2026 15:00:23 +0000
Manifest this update: Sun 29 Mar 2026 15:00:23 +0000
Manifest next update: Mon 30 Mar 2026 15:00:23 +0000
Files and hashes: 1: a8dxxiPCuafVW1pqgQGmv3vqh6s.roa (hash: rc0rV/NjxsPC/BhNPsXHclt7GZGOVjNNBw3HxehbP5Y=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: z4vWKzvtt66UWbm/dXQ3cQy5ZruyJTPlrpTK/H1RUQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:42:e8:0a:67:ce:cd:1e:d9:d0:61:d0:26:d6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Mar 29 15:00:23 2026 GMT
Not After : Mar 30 15:00:23 2026 GMT
Subject: CN=ea75b0d0d1247bac3e0f43a3b4693152337115fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:03:2e:0d:a9:77:61:49:b7:18:18:04:8f:
27:e1:aa:e5:4b:1c:62:c5:0b:8f:6e:81:dd:63:34:
b4:76:61:09:7a:16:a5:7a:60:a1:dc:c6:7a:45:3e:
8e:ae:5f:b2:f1:f2:f7:df:83:59:da:a5:00:0c:07:
c7:25:62:35:a3:e0:77:a5:2f:19:89:bb:a0:81:0d:
23:35:e1:e5:16:9a:9f:a1:48:bb:cf:ea:93:af:c8:
bf:22:4c:39:65:dd:91:bb:40:20:90:a1:ad:37:cb:
fa:4f:73:af:60:d3:0a:6b:d5:6d:fa:e9:d3:5a:d1:
5b:5d:9a:ee:39:a7:40:8c:8f:b4:fb:3e:5c:e1:1d:
b4:2f:d3:d5:a1:10:71:07:e0:11:d2:c6:84:d1:d4:
1f:34:c4:79:fe:8f:9f:cc:25:ec:12:be:e7:e2:52:
1c:e7:d2:a1:a0:61:5c:27:2c:dc:28:8b:0f:81:32:
55:f7:a1:0a:c8:17:1d:5b:6f:48:18:dd:dd:4b:4b:
41:85:08:19:93:6f:b0:0a:bf:7a:4d:c7:5a:d7:b2:
44:ea:73:ab:2c:78:87:f1:a9:82:86:ae:d8:88:b5:
b2:ed:8c:1a:6c:cb:9c:34:2d:c5:e6:c1:31:d6:99:
8e:b1:0e:e2:92:12:04:d9:71:5c:f3:7c:0d:ed:e3:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:B0:D0:D1:24:7B:AC:3E:0F:43:A3:B4:69:31:52:33:71:15:FA
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:50:63:95:ae:9d:99:31:45:3b:bd:f7:38:38:ae:68:31:33:
46:fb:ea:cb:95:7e:87:79:b5:d1:20:39:e9:d9:69:9f:66:52:
7e:e4:8e:6a:e6:72:c4:3b:fc:07:99:f0:ed:3e:46:33:23:ad:
24:5c:8f:fb:1d:c9:ba:bd:97:bf:93:85:4b:3f:e1:9d:f1:4e:
43:5d:57:cb:49:0f:37:8d:d1:dc:31:91:25:2a:d8:52:a9:7d:
b4:1b:c5:f4:c1:33:62:ff:0a:64:8f:34:33:b0:3f:21:35:29:
1d:6e:18:c0:52:db:74:1d:c0:3b:d8:10:3f:35:5c:c4:f2:fd:
e3:68:50:f2:28:b4:92:55:d3:28:d9:69:6a:f0:91:d0:41:bb:
4e:5f:24:cd:32:44:b8:56:95:00:fa:59:55:ea:81:51:ee:a3:
ff:d1:c2:bc:ec:e2:f9:ec:3b:58:52:76:03:e8:fe:ae:ad:fb:
62:ba:33:54:56:a2:0d:31:cc:38:7f:84:89:af:25:d3:28:45:
31:95:e8:98:96:2f:5b:7b:53:3a:7d:8f:ff:4b:85:e9:28:1b:
fd:18:95:65:8f:cb:d3:0c:e2:57:8c:a9:c5:f5:63:bd:aa:c2:
ca:a2:79:43:b6:fd:c7:ab:8a:41:8d:85:ea:a7:fb:67:83:03:
eb:4a:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:49 2026 by rpki-client