Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier: e2HUbyDt9FJEhXGnLlyAjpYXDBuU6x5tYGQ5gOuDFmc=
Subject key identifier: 8E:E1:E3:1F:E0:32:CE:66:7F:36:3F:D6:99:E5:B6:65:ED:65:9B:47
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 019D38D2A5231B84402F492EF2A54698B034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number: 1851
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: IkjRDZvjoet-DMCFuA1SVxVn9z0.roa (hash: KDG2SPZXlzy1qLYoQcv1WkPT39XYjh45It7qEUlD6Rw=)
2: Zw6KU8Yaubyr6fTeBrasGVyasWI.roa (hash: YUUSHoIMxT31bL5DTGnNTWMiRlkifirHreIPqG9BiZo=)
3: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: WKXICCu/65JUSR7hE4mDE+asaNdbi9ca+sD+OS2NCRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a5:23:1b:84:40:2f:49:2e:f2:a5:46:98:b0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=8ee1e31fe032ce667f363fd699e5b665ed659b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:aa:2f:17:40:4a:f0:d6:89:67:15:dc:59:
20:0c:5d:f4:15:43:0c:f3:96:25:cb:45:80:07:d0:
6a:96:cf:6e:c6:d7:3e:13:a7:02:44:79:ab:34:d5:
74:0e:a5:42:d2:61:f8:a2:3e:c5:92:38:8a:85:aa:
e9:c8:3e:de:b4:dc:bb:3b:cd:5c:48:e9:89:fc:c6:
66:5c:1b:da:de:4e:c1:69:b9:a6:3b:c1:cd:62:b8:
1a:65:fc:d4:60:19:59:3e:7e:ae:49:9b:c7:5b:a0:
28:7d:07:bb:91:63:e4:34:ef:47:07:92:74:ea:cc:
e6:bd:03:a0:73:d2:5a:78:18:e0:b9:6d:f1:aa:59:
87:a1:92:73:27:69:99:1d:a8:4f:9d:76:c2:f8:e6:
5e:38:c4:1d:b0:7d:1b:21:59:fc:24:d7:a8:91:df:
1a:27:5a:1e:34:3e:9b:33:3f:5d:94:9b:66:11:88:
ab:e5:96:16:bf:dc:31:64:98:75:2f:b9:a5:74:d1:
84:3d:cb:1c:39:4f:a4:43:a6:3a:bc:6e:55:70:b4:
74:8f:55:19:e0:eb:fb:da:a1:da:d7:27:e1:24:34:
e0:e5:59:a2:d1:38:95:65:94:95:e7:d1:b5:45:5b:
52:aa:20:6a:a1:74:d8:26:54:2f:42:9f:5c:5e:4a:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:E3:1F:E0:32:CE:66:7F:36:3F:D6:99:E5:B6:65:ED:65:9B:47
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b6:6b:19:0b:53:81:e0:2a:8b:f2:73:d7:72:de:d4:4f:b4:
a6:06:6b:0a:d0:43:2f:bf:85:7c:b1:ff:22:84:10:48:1e:16:
a4:fd:97:6f:15:d1:23:d8:8e:e1:30:e0:3a:06:ba:33:2a:97:
54:11:cb:0d:d7:e8:4f:bd:d6:3b:43:5c:5c:2d:db:04:78:d9:
8f:33:70:9c:3c:e6:58:4e:f9:f6:2a:ed:4f:19:c9:a0:ff:7b:
1f:0f:7a:84:31:27:0f:08:35:7c:7c:5b:58:b7:e7:98:67:91:
c0:c8:84:ad:76:23:9d:b0:c5:32:73:da:f8:fa:07:4b:de:e7:
4d:96:be:ac:19:2f:aa:0f:cf:ba:f0:5c:f1:b7:77:32:ab:94:
34:0d:29:02:86:d0:a7:4b:af:d8:14:f0:02:70:de:ed:da:c0:
c3:82:58:ec:82:23:6d:ca:d9:f6:1b:07:4b:d6:af:15:30:7c:
f0:b8:6f:45:90:9d:3c:43:e7:5c:de:32:7b:01:b4:66:8d:17:
7c:fb:b5:e2:86:7a:92:21:12:8c:22:6d:77:f3:65:0f:c9:ee:
d8:d2:d3:ee:c3:a6:69:7e:73:0d:19:2c:71:b0:75:d0:1f:72:
19:34:34:40:19:9f:3a:32:88:19:bb:44:f2:1a:76:1b:fe:31:
b0:56:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:09 2026 by rpki-client