Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: 3kGwzp94/MSH/j0/1sVnGN8tlK5gSP2n+suRgfAIEFQ=
Subject key identifier: 1F:97:75:C4:D3:2D:B1:1A:C3:86:C9:A2:47:FF:CC:87:B0:25:8B:90
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019D27DFC92F5DC5844A60B95A8090B2F6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 089B
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: l4U7IQcyCP2dA0xNmZgJyiH8LKTCqU5CF7pXFgTZRyU=)
2: q92f6dR-iX4C-CVcHHlSJfjRbjA.roa (hash: 5e9T1SkG/kIEUC1gZXSHnISGiuKNuBXnH3Nj4yFHRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c9:2f:5d:c5:84:4a:60:b9:5a:80:90:b2:f6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=1f9775c4d32db11ac386c9a247ffcc87b0258b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:0f:6e:fa:85:40:5c:41:5f:4f:e6:cd:f6:
d7:c4:59:f5:72:1b:b0:c6:15:5e:6a:a5:7a:6c:78:
2d:5f:5d:d8:66:eb:ce:1a:1c:1d:f8:a6:e0:0f:90:
9e:30:bc:48:d0:7c:27:b0:59:1b:cc:d6:87:82:84:
c9:ae:1d:d4:fb:dc:e9:8d:b4:08:72:51:a1:a6:69:
9a:84:29:cc:5f:3d:b1:ed:45:4e:d3:dd:08:3c:b4:
e5:17:48:99:6c:9b:45:7b:f4:ce:7a:f8:4d:57:8a:
0c:0f:21:13:04:73:e5:1d:f7:0b:c4:af:00:f8:b4:
78:f0:b4:21:91:7d:5a:71:42:42:9a:cf:1a:ba:6e:
b7:cf:96:ba:fa:c3:b0:c9:f2:ca:68:35:ff:cd:1d:
5f:f0:e7:bc:ec:86:d5:99:c8:32:6a:e2:d4:c2:6d:
37:5c:c2:df:fd:51:86:7d:62:6d:c0:21:fa:dc:f8:
a5:72:ab:73:6d:07:f2:01:ea:5c:d8:c2:77:a2:ed:
47:8d:35:b9:7f:8e:13:67:7d:44:09:9d:b9:44:bd:
3a:17:8d:7c:9d:ac:a7:63:3f:27:67:7a:aa:0d:bd:
a4:77:80:a7:85:20:46:f3:3d:b2:29:05:97:e1:84:
a4:9c:f9:b6:fb:4d:81:0a:f6:6b:22:6f:49:85:8f:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:75:C4:D3:2D:B1:1A:C3:86:C9:A2:47:FF:CC:87:B0:25:8B:90
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1a:87:95:cb:66:84:fc:eb:f9:3b:76:e9:6e:49:b9:d3:3f:
97:85:b6:df:65:eb:59:d8:7c:c3:60:ff:b2:d0:0f:f5:43:8b:
c2:6a:b5:08:f8:dc:f2:16:ac:3a:76:52:2f:7d:98:c1:0a:0a:
dc:18:18:b6:f1:05:aa:c6:f1:6c:b1:ee:d8:0b:14:ba:fc:8e:
ca:97:eb:42:82:77:c9:7f:e7:c9:fc:93:93:27:be:50:fb:d4:
37:2b:14:a1:25:c4:c8:0d:e3:0a:e7:f9:78:b7:40:07:ee:82:
a0:56:28:bd:54:e6:cc:4a:a3:bc:64:8b:45:07:d7:75:8a:43:
10:25:07:1f:00:60:b9:c8:d0:8c:f2:f0:01:dd:20:12:28:f1:
27:a0:50:5d:ab:dd:b9:70:1a:09:d8:0c:3a:55:51:82:6c:9e:
f2:00:cb:32:26:ac:26:ae:35:50:1d:51:47:9e:86:4b:e3:70:
f3:53:be:ce:29:93:f7:a8:36:9f:72:f3:8e:0a:a4:d0:f1:48:
7f:24:f7:47:6a:90:d5:f3:1d:ad:d7:24:68:59:ee:57:cf:a6:
6a:ad:40:4f:63:d0:1c:58:d3:52:b3:83:7b:2a:85:b1:af:df:
d3:ac:30:f2:cc:57:4c:b8:49:25:2a:a8:d4:c5:a7:39:97:07:
c1:23:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:44 2026 by rpki-client