Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: ed6BFGno9IP8FswP08E38clLPrk+YKwcdeUZz2TgL1I=
Subject key identifier: EE:EE:3E:7B:3B:07:76:29:5E:13:57:5E:E0:37:01:D4:92:81:B3:52
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019D37520F19D800458F73DD32CE4F0F7AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:17 +0000
Manifest this update: Sun 29 Mar 2026 02:00:17 +0000
Manifest next update: Mon 30 Mar 2026 02:00:17 +0000
Files and hashes: 1: E3Abz8c2x25X2p1IuNZFKekLDzE.roa (hash: DciKvL6unAo5I4YBQh4SUA/jwjzYuA3QTOA40FWqmwU=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: rLDG2tKAjAj7mGFxFoamMn43Bu7lwqfD6UE9Z6dlwgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:0f:19:d8:00:45:8f:73:dd:32:ce:4f:0f:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Mar 29 02:00:17 2026 GMT
Not After : Mar 30 02:00:17 2026 GMT
Subject: CN=eeee3e7b3b0776295e13575ee03701d49281b352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:68:05:fe:28:87:fb:2c:d6:f8:9d:fd:07:
c3:49:21:5b:71:08:81:ee:d0:68:f1:db:2d:fe:1e:
02:c7:15:4c:75:92:1f:ef:93:75:a0:38:d4:fd:77:
61:f8:31:56:f1:5c:29:c0:78:fd:b7:10:5e:60:ba:
19:35:57:ae:15:f7:95:a2:8f:da:c2:65:19:76:0b:
83:fe:91:f9:a2:85:18:bd:b5:ef:da:31:f5:6e:df:
75:0f:c7:9c:c3:11:02:68:29:32:f8:9f:66:87:8a:
01:e3:66:e7:99:cf:b8:dc:47:8e:94:6f:ec:72:79:
6d:ab:6c:51:69:46:77:55:0c:d7:2b:09:7c:f2:ae:
3e:b5:09:af:aa:b5:4e:eb:8f:d6:6e:6f:e5:18:7f:
d2:b8:6e:2b:37:29:51:07:e3:2b:fe:87:ac:91:7a:
e1:a3:a4:cf:f3:24:c3:fd:18:88:65:c4:9d:97:a3:
16:93:2a:71:b7:d0:15:e7:f8:e3:73:fa:38:d8:20:
fc:a1:6d:24:29:ce:35:5b:6c:92:f3:e9:22:61:23:
a4:1d:b8:aa:9a:51:1b:93:9c:ad:fc:84:c9:c4:c5:
2c:b9:92:33:53:df:42:b9:6f:4f:14:16:d6:3d:1c:
77:92:e6:6f:52:7c:e2:37:ca:fa:1a:76:a3:a7:1a:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:3E:7B:3B:07:76:29:5E:13:57:5E:E0:37:01:D4:92:81:B3:52
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:69:a5:16:71:33:99:3a:d5:3a:80:30:f7:2b:d4:59:e7:
d9:9d:57:a3:a3:f5:55:9b:a7:95:ea:44:1d:82:a0:7b:62:81:
14:e4:db:09:74:2f:4a:10:01:e1:34:fd:cf:53:82:49:1b:31:
91:2d:ef:c4:7a:53:c2:6e:b7:c7:70:22:b0:69:d4:51:3c:89:
4a:b8:9d:31:9f:71:73:5b:11:39:f3:8f:48:dd:52:45:af:03:
0c:47:02:75:0c:d3:7c:6f:1b:d2:51:36:53:4d:03:6c:e2:02:
da:78:9d:04:8e:65:59:13:10:23:fa:fe:52:1c:da:df:93:7e:
79:5e:34:27:1f:02:93:0f:da:52:51:98:38:81:4f:3e:f2:22:
39:3a:82:f0:f5:51:8b:2a:f6:5a:85:fe:e1:2d:82:26:ec:c4:
73:8a:38:e2:67:e8:8d:47:f1:c3:b7:01:5d:d6:a5:bd:4c:8f:
86:4b:14:f3:b6:4c:60:bb:24:28:5a:be:6e:e4:b1:0f:2f:36:
ef:b4:fe:04:31:45:2f:28:76:6c:46:44:65:f9:25:eb:03:77:
79:57:fc:e1:44:98:33:14:17:98:9a:0b:06:f5:10:32:ac:e8:
33:10:44:d3:60:c9:f7:44:6b:c9:69:b5:5c:50:06:8d:63:da:
08:53:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:56 2026 by rpki-client