Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: ei89DN+nCv+f5io85OFqV/RjsDFEFDKV09RCFWHeccA=
Subject key identifier: FF:95:F6:69:79:E2:77:53:6E:E5:BF:63:BF:3F:1A:A5:D0:14:E4:6D
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019D284D7AC9A4BFD1A5F1700C86A8D2937A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 14D9
Signing time: Thu 26 Mar 2026 04:00:59 +0000
Manifest this update: Thu 26 Mar 2026 04:00:59 +0000
Manifest next update: Fri 27 Mar 2026 04:00:59 +0000
Files and hashes: 1: 2QQChTDwIOQycovI2YsVvoZPz2I.roa (hash: CH9BbZ7Au7IxXqkLtHNUF65I74hoA0C1m5kNxLVSkng=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: w++kGDJAmVOK2OS99vagHFNm3yfIZsDXbqj1nYpp7o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7a:c9:a4:bf:d1:a5:f1:70:0c:86:a8:d2:93:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Mar 26 04:00:59 2026 GMT
Not After : Mar 27 04:00:59 2026 GMT
Subject: CN=ff95f66979e277536ee5bf63bf3f1aa5d014e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:d2:d0:c2:4d:5f:c1:13:64:5f:79:a0:03:
21:3b:39:ed:8b:16:d2:16:32:b8:f7:21:6b:d5:00:
c7:4f:61:dc:97:70:99:5a:13:34:dc:9d:7c:2f:d2:
51:68:98:f3:40:68:5c:e1:e9:86:6d:9f:b6:c6:df:
af:9e:cd:b3:bf:0a:4d:96:85:fd:59:db:c2:7d:3a:
c3:eb:17:8c:8a:84:74:65:ad:4d:7e:9e:12:0b:92:
3f:6a:8f:92:24:d9:50:7f:df:aa:8c:1b:2b:96:bc:
28:c3:86:25:53:a5:6d:8e:bf:1b:20:a1:a6:a7:9f:
48:40:70:a1:2d:9b:5f:4e:0b:bb:40:06:b8:5e:37:
13:15:7e:9c:53:a5:bb:1f:13:47:b8:23:83:a4:53:
7b:49:83:62:90:87:d2:62:f3:de:0a:94:f8:5b:7b:
cd:63:70:6b:8a:bf:c2:35:ee:08:40:13:85:7d:96:
42:eb:f5:6c:5b:72:2a:b4:fe:88:6e:da:ed:92:a3:
32:42:ae:3a:f3:bc:80:dd:44:63:11:24:e4:74:57:
5a:5b:d2:a1:82:fc:8b:9d:8e:85:62:50:47:f6:fb:
1a:3e:5d:be:ba:79:24:4b:38:3d:d0:31:e1:52:9d:
70:fd:67:e9:08:89:c2:95:0f:43:e9:ad:61:9b:36:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:F6:69:79:E2:77:53:6E:E5:BF:63:BF:3F:1A:A5:D0:14:E4:6D
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9f:d0:81:46:74:60:25:6a:2a:de:9d:dd:c8:45:91:56:3b:
5e:5d:c8:c8:d1:b8:94:a7:d8:fb:ee:53:95:d8:60:e4:dc:e3:
03:a4:1d:3e:e2:5d:c9:a8:9d:3a:3b:3b:ad:ff:b8:ae:23:46:
cc:d9:b4:fd:35:82:56:46:7c:16:f4:aa:1a:5f:4f:2a:a6:d2:
2b:e8:3f:67:d1:2f:7b:f1:33:3c:68:31:c0:99:1e:7c:c6:ea:
01:a2:e3:b5:bd:05:4d:99:97:7d:0d:11:1c:96:4b:31:5f:b7:
8d:c3:bf:c6:b0:dc:04:0c:18:07:27:4c:f4:0c:c5:15:4f:9f:
41:8c:21:a2:44:5f:a5:ca:80:8b:78:29:2b:8a:00:d2:86:bc:
41:e2:c7:f5:f6:ae:18:9d:61:2a:6e:37:80:48:e4:c0:8d:4d:
32:88:29:25:78:99:bb:19:1f:e4:b9:2e:dc:25:f2:37:03:c8:
14:b6:16:fb:38:34:1b:bf:ea:02:ae:a5:33:b0:b2:84:05:4a:
b3:49:00:fc:b9:8e:8b:03:ab:9c:09:db:25:74:dd:a2:20:6e:
00:de:75:4e:42:84:77:9c:fa:32:bb:c8:ea:84:b1:3e:c7:45:
80:96:c4:54:33:21:da:17:6c:4a:42:22:90:0d:9b:3e:b6:e0:
d6:5b:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:53:40 2026 by rpki-client