Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: FiRnGhRdY+nNSOtF7kZIJz5gES81zWjaFfbHsw0cYe4=
Subject key identifier: 6F:9C:65:B0:0C:C5:8E:93:C4:59:3A:73:47:85:78:50:0C:50:38:83
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 019CC6752B1FEBFE0767C41C1951CCF592F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 1853
Signing time: Sat 07 Mar 2026 04:01:33 +0000
Manifest this update: Sat 07 Mar 2026 04:01:33 +0000
Manifest next update: Sun 08 Mar 2026 04:01:33 +0000
Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: TkiJpF4DC15Fc9ZjX5kboTDSEUlzpnMDECPNk2np070=)
2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=)
3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=)
4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:75:2b:1f:eb:fe:07:67:c4:1c:19:51:cc:f5:92:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Mar 7 04:01:33 2026 GMT
Not After : Mar 8 04:01:33 2026 GMT
Subject: CN=6f9c65b00cc58e93c4593a73478578500c503883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cd:85:39:d1:18:b8:e4:f0:14:85:9f:2f:a3:
5b:80:f0:a2:af:d5:85:2b:b7:5e:2f:7f:aa:cd:a9:
dd:65:51:92:7c:a6:a5:f9:8c:c3:d2:26:fa:9c:97:
a1:9c:95:f6:7d:4d:0f:07:0e:c8:8f:4b:82:6c:8a:
d1:bd:da:06:fe:39:2f:bd:b5:2c:db:fe:3a:21:71:
b0:10:a5:65:6d:47:4c:cc:46:5f:04:12:44:e2:54:
9b:6f:c9:56:b1:41:e8:73:5c:e9:d0:85:43:e6:c8:
06:7b:36:ce:ae:29:b6:a4:91:e1:37:91:93:ce:6b:
7e:b8:dd:64:e6:c6:60:da:02:96:62:dd:3a:08:a3:
18:c9:08:20:f1:c4:49:d1:70:94:83:0a:b2:aa:19:
71:f9:e1:e2:12:5d:01:3f:af:4c:d0:60:0c:4d:fd:
34:9a:56:08:ed:dd:35:8c:b1:46:c5:39:e6:54:db:
de:34:4a:a9:4c:25:a3:c7:05:ce:ea:25:5c:9b:2a:
a4:64:e0:9b:e0:f0:89:43:8d:bb:f6:61:18:ce:41:
e5:d8:f7:a0:42:ed:1e:06:94:e9:c0:37:3c:2e:27:
4e:1b:62:ab:ad:ca:8f:25:86:42:00:de:ea:2e:16:
b7:29:f4:12:bb:04:d2:a8:ed:d3:77:32:e9:67:c9:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:65:B0:0C:C5:8E:93:C4:59:3A:73:47:85:78:50:0C:50:38:83
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:94:10:0c:91:ae:74:5d:49:78:92:6f:cd:2b:06:74:cc:
df:e1:5c:fd:b3:73:f1:3d:fa:6b:98:20:e0:c8:96:fa:5c:c2:
9c:d6:03:82:27:75:bb:3f:e5:22:e2:e7:43:c0:83:e5:f0:ee:
75:7f:e2:91:a4:ef:58:d9:d8:31:b6:f0:9b:5e:ae:b6:36:5a:
0f:cb:08:27:cb:a9:11:fe:10:f1:ed:36:5e:d9:59:91:2d:fc:
06:e0:51:46:ab:e3:1a:ad:18:d7:d6:bc:7a:6f:0c:bb:6f:b8:
52:11:c7:d8:81:76:54:84:1d:c0:ac:7f:5e:af:18:01:b6:2d:
a9:11:65:81:0c:cf:40:7b:22:71:41:08:3a:6b:72:87:f1:9b:
1c:88:42:8e:fb:d1:1f:de:dc:33:ef:00:43:97:d5:4a:ca:5a:
56:32:e8:9d:a5:ce:fd:ba:df:5c:62:e6:a8:9b:d5:7f:c5:52:
44:80:cc:b2:bf:fe:c1:bf:68:88:b3:ea:42:54:fd:c6:48:cc:
ba:cc:8a:50:12:03:a2:61:b7:01:4f:9c:44:13:ed:44:a2:bd:
98:e1:70:22:10:80:51:a4:1f:d4:1b:f7:d7:8f:db:3e:f8:74:
d4:77:86:6e:ad:8b:f1:19:6a:12:58:b1:0a:0c:78:04:4a:60:
84:0a:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:08 2026 by rpki-client