Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
File: q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json)
Hash identifier: s1fwsxUn9Nr2bH1A8/rUZS9wQ3Q6zcP0AxyqOyuVQsk=
Subject key identifier: 8A:AE:A0:86:61:2B:C0:2F:D4:8E:19:42:C6:3A:8F:8D:99:1E:4F:64
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial: 019D3909A15DF86B29A9C30E9EB0E79852B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 10:00:25 +0000
Manifest this update: Sun 29 Mar 2026 10:00:25 +0000
Manifest next update: Mon 30 Mar 2026 10:00:25 +0000
Files and hashes: 1: OKR_E7TefcL1oDsyJAxJw_cLgPU.roa (hash: ss0bijG8zBZLgt7sSgduTwK4b0hk2Jl8W8BVKFPs9e8=)
2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: a2UpJZVfnF0XulXqNOGAISDX6pzueIlMw/ciTPDl8as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a1:5d:f8:6b:29:a9:c3:0e:9e:b0:e7:98:52:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Validity
Not Before: Mar 29 10:00:25 2026 GMT
Not After : Mar 30 10:00:25 2026 GMT
Subject: CN=8aaea086612bc02fd48e1942c63a8f8d991e4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:b6:4a:ef:b1:31:b5:d6:d1:a0:8a:4c:ef:
a2:ba:b3:f9:52:75:41:62:b5:24:22:03:48:ba:b1:
8a:cf:10:ba:92:4f:7e:0e:3a:3f:b3:82:d3:ef:c8:
11:d8:a9:55:54:32:ce:6f:98:b2:cf:33:7b:40:20:
14:60:7e:09:32:55:b6:64:4d:3f:c1:b0:be:8d:38:
af:42:14:52:1a:25:cb:17:3c:3b:d0:ea:2b:18:1d:
7e:2f:03:c9:45:5f:17:8a:71:58:f7:ab:7b:10:61:
39:62:49:bf:3d:79:ac:0f:8f:b4:55:f4:83:f9:f0:
72:43:ea:33:59:83:18:32:69:9a:b9:7c:52:65:9e:
bc:57:ed:88:98:5f:9e:42:c9:a8:fb:f2:a9:52:64:
32:25:f9:d4:a6:05:53:e9:8b:34:cb:92:86:09:b0:
93:70:2c:ef:e7:c7:a3:55:0f:43:2f:06:09:f2:f1:
25:a9:e7:1d:69:73:e4:d3:ab:e1:d5:d3:af:0d:ba:
bd:bc:cb:1f:e6:c9:2b:19:94:7b:1c:12:42:23:ce:
74:9b:fe:26:3e:62:55:83:60:95:c6:71:a1:e3:47:
09:15:b7:70:52:11:4c:55:62:db:55:df:82:35:b9:
08:21:65:35:50:63:e7:47:0d:ff:91:a1:68:19:b5:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:A0:86:61:2B:C0:2F:D4:8E:19:42:C6:3A:8F:8D:99:1E:4F:64
X509v3 Authority Key Identifier:
keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a2:30:41:7f:04:0b:a3:a1:9b:37:49:38:99:9b:77:e3:6b:
05:19:0e:9a:dd:79:71:4b:11:f7:33:09:a0:0b:42:62:3c:15:
70:64:d4:5a:37:d9:6a:b8:c0:90:b8:7f:ca:03:a5:30:b7:7c:
cf:d5:21:2f:ff:40:e1:aa:a3:bb:6f:83:55:a8:4c:0f:f7:9b:
21:f3:36:3b:2d:39:89:4f:6b:3e:d7:ee:c3:1b:90:8e:98:f7:
c8:63:bb:d8:76:04:69:c5:1f:1b:a6:dd:47:27:17:16:34:b2:
5e:6d:86:fd:a6:44:46:a1:04:8b:b8:b9:97:fe:30:39:5a:c0:
5e:68:b8:5e:90:b6:ff:eb:d7:37:0b:f5:40:9b:38:2a:11:d9:
88:f0:22:db:35:a2:9d:c3:1c:91:d3:47:80:7a:c6:3d:8e:c1:
a3:85:eb:14:b2:98:d2:fa:36:e4:3e:04:1c:5d:b0:4b:7a:c4:
11:25:aa:16:f0:c6:db:c7:02:14:de:7c:9d:13:a2:9c:24:9e:
ec:a1:e4:d4:12:97:54:db:f8:c5:28:03:1a:f3:86:c6:68:c6:
b6:d4:e5:7b:ce:ad:34:a3:a9:bd:0e:9b:49:41:5a:bd:70:32:
22:4c:4f:b8:5c:3b:42:ee:76:55:7a:c4:66:25:66:25:58:3d:
8e:e9:dc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:19 2026 by rpki-client