Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: PCXcgJnRDKxzDbBm2WtF/cD6Ct9WJBcMbka1pn30KuY=
Subject key identifier: 50:C7:CF:3D:30:13:92:6A:4C:15:B5:2E:AE:E0:87:F0:A8:D1:62:78
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019D39AF56E07F3BFF6477CB66FB2FAD067C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 08BF
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: TZAcRkxGx0P1Kss4W1JLP/4C8dC9BYdNthqSyKImwBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:56:e0:7f:3b:ff:64:77:cb:66:fb:2f:ad:06:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=50c7cf3d3013926a4c15b52eaee087f0a8d16278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:34:45:89:0c:02:56:04:73:1b:59:42:81:9f:
e1:96:c3:16:a0:a5:de:c0:b5:45:66:e1:5d:34:7b:
ac:a8:21:75:66:5f:59:9e:c2:10:cc:b8:7a:e7:30:
5e:01:1e:44:fa:62:34:38:75:f1:a5:ac:6f:51:5f:
60:6b:19:af:8e:b9:e4:75:52:a2:02:35:15:98:a6:
44:46:1d:03:7e:e8:a7:3c:fd:1d:cd:5d:67:d7:df:
87:c6:ed:6f:e5:a4:22:90:56:2b:ee:8f:c3:eb:90:
4e:34:12:75:92:02:fb:bb:3d:18:4a:6f:46:7b:1e:
ed:18:c9:3b:f7:5e:dc:8f:e3:fa:9a:0b:ce:88:a9:
e9:35:2f:f5:28:81:5c:bf:d7:80:b9:d5:1f:ba:7e:
df:22:b8:3f:a7:83:fa:cb:32:0a:98:d3:bc:d9:8d:
3f:f4:eb:b6:a7:09:c4:a9:22:86:dc:af:52:b8:81:
56:18:60:e9:ac:26:93:5e:3d:f8:54:55:f0:16:65:
dd:0b:3e:46:3f:16:e0:56:aa:77:4c:d8:b1:26:34:
06:9e:94:9f:fb:52:96:c1:0d:bf:a5:ab:e4:ac:ca:
a5:74:1a:01:c8:81:f8:d6:04:e3:4a:4f:b3:80:78:
07:c4:21:97:92:23:8e:b0:ef:68:05:c0:af:ad:eb:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:CF:3D:30:13:92:6A:4C:15:B5:2E:AE:E0:87:F0:A8:D1:62:78
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:18:28:6c:5b:72:d2:89:f2:d0:9b:2a:e0:60:a6:4f:6d:ce:
9c:62:3d:bd:9d:88:f6:8b:3e:6b:89:4a:b1:d6:b6:3a:b6:e5:
95:c4:d2:a8:f1:fa:cf:7d:40:ce:b6:3a:4d:c2:f9:16:39:bb:
fb:aa:5b:00:10:6b:6a:12:c2:7b:d1:a5:97:b3:94:a7:54:89:
ab:de:bc:00:fc:20:a3:73:91:50:9e:85:e9:f7:14:c0:3a:b6:
f1:49:3a:eb:fd:80:6a:29:ec:05:42:85:0c:cc:ea:7d:35:a3:
1e:33:fe:46:bd:d3:00:08:5f:34:89:75:39:d1:55:90:73:7a:
8a:6b:f7:f7:9a:1d:8c:ce:32:64:1e:c7:4c:da:0e:bf:07:ca:
53:60:39:7b:ee:84:5d:c5:45:59:59:f2:52:fa:d9:96:c7:d1:
d2:de:2b:44:ed:ff:10:7a:6e:4e:84:68:de:ca:99:03:fc:91:
ec:1b:0f:25:52:de:ce:26:d0:08:65:5b:80:3a:bd:6f:32:d0:
ba:d1:a8:60:5e:39:be:db:52:67:a2:de:bf:18:7e:3a:12:bd:
82:b7:2d:b3:5b:25:67:c6:44:ae:2a:ea:25:11:5a:83:76:a0:
f0:2e:ae:17:02:9a:9a:44:c6:90:25:e4:9a:11:70:8c:05:18:
e6:ea:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:36 2026 by rpki-client