Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: nTakKMdj/yeT6nN+fYsDqgVJnDn9ulp/JCYpl2JDDQo=
Subject key identifier: D4:58:50:E4:34:4F:7B:0C:D3:60:AE:A3:6F:E1:E4:32:DA:E8:3D:3B
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 019D29607D54A89AF2CCD5C5C88906E86E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 09:01:22 +0000
Manifest this update: Thu 26 Mar 2026 09:01:22 +0000
Manifest next update: Fri 27 Mar 2026 09:01:22 +0000
Files and hashes: 1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=)
2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=)
3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: yesZLYUkoGM3QuVnZpmNO0y6IuOz/IAOTtKZLMgSXQw=)
4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7d:54:a8:9a:f2:cc:d5:c5:c8:89:06:e8:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Mar 26 09:01:22 2026 GMT
Not After : Mar 27 09:01:22 2026 GMT
Subject: CN=d45850e4344f7b0cd360aea36fe1e432dae83d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:31:ad:e3:a5:5c:3a:c5:9a:1f:b3:05:c5:
7b:2f:52:5b:bc:3e:1f:35:69:6d:ce:4e:20:e3:1b:
f0:49:7e:a6:5a:72:1a:c2:68:a4:bb:e5:02:c4:0e:
de:51:dd:13:9d:f4:73:dc:be:5a:e7:33:d7:f1:42:
ea:70:46:e7:f6:b6:f3:0e:2c:40:61:ad:a2:8e:7e:
79:e4:fd:ad:70:33:b2:9c:cc:68:fd:c4:77:22:08:
7a:f3:21:26:14:06:4d:0d:c7:66:53:a1:6a:6a:14:
62:94:29:08:ef:74:ad:3b:2c:f8:bd:06:05:c9:6c:
3c:ed:3a:4c:96:e6:6d:76:88:90:8a:9e:90:98:3e:
6a:8e:9f:e6:70:a9:a3:09:39:ca:0e:fa:e9:58:32:
4c:53:71:6a:ea:53:82:08:8c:ad:8c:91:2b:11:03:
5f:db:1d:ec:13:ff:d5:44:f7:1a:b9:f9:99:0c:2a:
1f:a1:0b:cc:56:b5:93:fd:c3:ab:1e:2a:b7:12:f7:
c5:d9:92:99:3d:eb:19:a2:92:c9:d2:67:c5:e6:6c:
a8:80:23:3f:c1:f6:e9:fa:90:6a:de:82:af:77:d0:
38:a5:3e:6b:00:d8:e2:40:eb:17:34:92:89:f8:46:
64:82:9a:ae:cf:f2:a8:2e:34:c4:d4:5e:9d:0a:dc:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:50:E4:34:4F:7B:0C:D3:60:AE:A3:6F:E1:E4:32:DA:E8:3D:3B
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7e:a9:9d:07:44:a5:9e:0c:c7:e0:07:f4:2b:cc:40:1e:89:
fc:7b:fe:ff:50:45:65:d5:0e:ec:01:f9:fe:25:42:fb:ec:37:
50:48:cb:4e:07:77:61:e5:cb:ea:26:3b:18:b1:89:16:18:e0:
b5:7a:c5:16:43:0f:cb:3a:e4:9b:1d:92:cb:9a:cb:9a:be:79:
7f:e5:0d:20:37:bb:fd:c0:2b:45:76:57:d9:34:fc:3c:d7:99:
07:51:15:c6:3e:fc:0c:85:03:60:1a:19:86:7c:80:67:e4:9d:
21:ac:2d:6a:c4:fc:2f:97:55:cc:54:51:5e:2b:ed:96:ea:a4:
1e:81:89:de:bf:fd:68:d7:e7:65:06:5c:eb:fc:5b:4d:7d:cf:
a2:1d:35:c9:b8:46:e6:3f:8e:fc:0c:4c:2e:0c:f2:2c:01:78:
83:b6:79:69:eb:b8:07:db:54:2d:59:f0:41:8d:88:a7:ce:cb:
e8:5f:2e:69:23:85:64:3f:4a:a5:68:05:67:64:b5:6a:75:d6:
d6:72:05:56:d4:54:5d:ae:a1:7e:d5:4c:ca:16:9e:e4:c5:c0:
c8:ba:31:ee:08:a1:4f:5b:5a:c7:36:ca:91:3d:72:a4:9c:78:
52:88:c9:1c:e2:f9:f2:fe:2c:94:06:81:db:73:22:f4:e8:cc:
1e:72:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:32 2026 by rpki-client