Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: o43w6T2haj9rR9jVnA7reLm9uxHP3I7TJVxlSMO+Sqw=
Subject key identifier: 19:74:A2:9A:6C:B3:88:9E:F3:B2:09:6D:7C:1C:D5:AC:24:7F:16:3B
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019D3A54126795073D8D9F2AB68A6E6F15BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 16:01:20 +0000
Manifest this update: Sun 29 Mar 2026 16:01:20 +0000
Manifest next update: Mon 30 Mar 2026 16:01:20 +0000
Files and hashes: 1: kEStRgFFvUE-F5ouVzsvLSOaSko.roa (hash: CPss/SLu7PEcptxsMsF+R9khBX0xPafGY3ozU4mC0YU=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: ec8fV++amAXWX/dSkeFFVIfAYEZ9OLMgWy2zo4ycEvM=)
3: ybcCspNcqCQ33fBea-dujuXdvYA.roa (hash: VgxSvwLJO5sqIYu59D65/gIjVJTVHdASRnQ/3xkt0AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:12:67:95:07:3d:8d:9f:2a:b6:8a:6e:6f:15:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Mar 29 16:01:20 2026 GMT
Not After : Mar 30 16:01:20 2026 GMT
Subject: CN=1974a29a6cb3889ef3b2096d7c1cd5ac247f163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:65:0d:bb:61:c8:f7:b4:19:58:3e:97:b3:
17:65:7e:3a:a0:bc:fa:5f:d4:ef:e0:4d:ae:02:84:
7e:b0:5f:1a:9e:75:09:55:7f:f7:da:82:e1:2c:bd:
f8:2f:bf:47:46:c0:74:dc:c9:43:c7:8d:c9:20:09:
3f:f1:0f:74:fd:57:c4:92:40:1d:48:d3:41:10:56:
04:33:bc:14:54:ea:ab:8d:7c:3a:29:d4:8d:8f:7d:
0e:bc:d1:70:93:59:aa:5f:13:22:3f:b6:a1:b1:38:
cf:f2:f0:1a:d3:3e:cd:c8:a1:ce:ca:23:65:31:f6:
3d:0e:0b:24:d4:0b:ca:0b:ae:ed:2a:ac:2b:80:68:
e5:71:1e:ec:73:3e:66:74:bd:e6:2a:7f:35:82:6f:
a5:d5:9d:97:c5:89:35:a8:19:da:63:49:df:7b:7e:
eb:f2:f1:c7:e8:59:98:5b:2f:b2:3f:7c:e4:56:b9:
75:a3:a3:56:37:b2:b9:7c:e9:c4:b1:54:15:15:91:
fb:cc:c6:7a:81:c8:6f:f6:d4:a9:46:dd:cc:df:62:
6d:67:fc:6a:71:df:8f:3a:58:60:77:83:ed:ec:23:
45:99:71:1c:73:d0:5d:e8:4d:3d:a0:a8:09:0b:83:
c9:ea:7c:9d:63:d8:b1:64:cb:1d:be:f8:fb:56:3d:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:A2:9A:6C:B3:88:9E:F3:B2:09:6D:7C:1C:D5:AC:24:7F:16:3B
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5d:54:79:64:ee:ee:fe:2d:ba:7a:13:ac:dd:47:aa:77:4d:
f4:39:a7:7e:bb:29:86:1e:5b:5a:14:fb:b7:f3:1b:2f:ca:7d:
39:1a:e4:75:4e:a5:b0:50:1f:c7:ad:75:b6:9a:21:38:8a:2f:
a2:ea:b2:41:f8:03:bb:8f:05:0a:dd:9e:39:8a:a7:e5:68:11:
80:a3:6d:76:d0:d8:4f:92:55:09:c8:98:ac:50:0e:5f:1e:60:
c1:c3:b9:81:5b:fa:31:cd:59:0d:49:ae:f0:6f:57:c8:3c:a5:
db:e6:11:5c:6a:d5:0b:71:28:e5:d7:02:3e:0e:1b:6b:39:11:
f6:54:dc:53:03:3d:1f:2e:cf:a7:1b:06:0f:66:87:96:ad:1b:
2d:4f:56:0e:99:f0:92:3a:f0:4d:16:5b:04:2c:5f:04:8b:c4:
af:5a:00:5c:72:80:1d:3c:78:28:90:dd:4a:20:17:7f:4d:7d:
d9:6d:99:4d:1c:ee:70:17:0d:de:25:12:16:1c:85:42:71:a2:
69:11:2e:de:df:61:7f:db:e6:25:c6:e4:ae:bb:77:89:e2:f6:
f7:83:b1:20:23:67:6e:bb:58:88:68:7d:29:9c:73:8a:29:28:
86:fb:46:1a:0c:87:44:8f:af:f1:2a:69:dd:8a:89:9f:d2:a2:
9b:41:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:43 2026 by rpki-client