Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: pjVyDXoRR3BN4TnAHqZah0kxCj+A/kN2GVjXd7aTo0c=
Subject key identifier: F4:07:09:BC:EE:68:6A:83:C0:42:37:7B:9B:23:D3:AD:3A:31:A3:FA
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019D389BE8644B09B84099B77EFC5066560E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: s7rFVjDVGfnab2cLW2QQUvXrY2cNkfPCf4rmkxo+oFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e8:64:4b:09:b8:40:99:b7:7e:fc:50:66:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=f40709bcee686a83c042377b9b23d3ad3a31a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:55:a7:59:6f:79:ed:68:89:87:62:d7:e5:
30:41:f8:70:99:20:05:ec:31:35:16:81:6a:9c:69:
cd:60:07:1f:26:d9:b7:57:55:a3:de:1a:6d:f5:d7:
c0:ca:8b:79:10:96:14:cc:d4:c6:fe:46:8a:bc:76:
f5:a0:bb:42:42:42:32:86:15:08:2f:fb:a0:61:16:
f5:28:cb:c4:36:d3:92:0b:7b:57:dd:22:54:b8:b9:
4a:59:a8:ec:8e:a3:5b:2d:b0:04:79:82:05:7a:14:
c8:db:b8:e1:ff:79:3e:47:e5:86:19:e1:b5:11:59:
ef:d1:9e:2c:a1:55:a7:ce:cc:dc:09:40:f6:5e:ef:
f3:e1:70:ae:1f:95:7f:59:37:81:6f:14:92:57:bf:
4d:8f:0e:34:06:a4:7b:1b:24:6f:0b:84:aa:f2:11:
08:b1:90:45:65:0a:ef:a6:42:9a:e0:1c:f7:f5:44:
24:c4:82:d3:66:bf:62:82:3d:2c:44:6f:66:7b:05:
cc:74:71:3b:3e:64:d7:4e:bb:c5:6d:ef:84:d7:80:
0d:a5:fb:8a:f9:7b:c4:f1:5f:f0:c3:c4:a5:58:08:
f3:ea:31:a8:b3:3b:71:ca:a8:9f:fd:02:2d:41:13:
12:d7:e3:0b:78:c9:a5:22:95:ee:8f:f2:0b:c0:c1:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:09:BC:EE:68:6A:83:C0:42:37:7B:9B:23:D3:AD:3A:31:A3:FA
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:38:2a:73:71:03:29:18:8a:cc:da:cb:0c:e8:6b:1b:1f:3a:
e7:8b:56:89:72:65:6d:2c:41:37:95:fb:7b:63:cd:26:6c:bc:
fa:8a:0e:c4:36:71:87:e6:a0:7f:c4:da:b5:26:e5:3a:ee:61:
97:c1:6a:4c:d1:7b:e6:7f:c7:1e:8a:9c:f5:f3:5f:71:a7:b4:
99:5a:e5:16:29:e9:22:01:c0:31:c7:b8:83:f1:85:4b:5a:3c:
0c:7f:c2:1d:c6:7f:45:b6:9f:d8:0c:03:94:39:02:ab:ef:1f:
8c:44:6a:35:64:8e:80:5b:2a:ee:33:88:89:38:1d:de:92:80:
e6:14:17:57:c8:97:ea:02:da:02:93:c8:36:7d:50:ed:82:56:
51:b2:5f:ce:b4:07:9f:82:22:aa:4e:97:2c:18:a6:db:64:a8:
ae:11:24:d1:47:6b:cd:15:c1:36:4a:a5:6d:97:ca:70:cd:89:
8c:ab:f5:e4:df:48:e6:7a:84:c8:a4:4b:a4:cd:0c:8b:5b:04:
be:6f:a2:43:d2:92:1e:a0:2e:a5:ba:a9:b9:3c:60:7a:02:91:
a8:e9:5a:d7:f3:6b:55:32:b4:5c:12:8b:4b:0c:62:81:8c:2d:
47:aa:0a:4c:1a:12:30:2d:2b:78:6a:bd:26:68:07:0d:c5:13:
ab:36:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:25 2026 by rpki-client