Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: QxIp5KKTMmp+34/h3hXEagd7GoDxvOdE7ySgCRBrJLQ=
Subject key identifier: CD:C5:E6:9E:8E:39:74:BB:B4:E6:84:18:77:A8:5B:24:39:5C:DA:D0
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 019D273AB7EFB1784A039423E845AFD8E7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: LYw_86zqqUU-5ZAgDmKGuBI8moU.roa (hash: yws9eccxGXYISJMC2IFo/HR97Yy0+NyB/dp085XRJR8=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: X4I1nwp/hXvQKUIzjdNs1L1y9GmnlKjKf93EUF0cSiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b7:ef:b1:78:4a:03:94:23:e8:45:af:d8:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=cdc5e69e8e3974bbb4e6841877a85b24395cdad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:25:08:12:1f:6e:4a:93:79:63:98:a2:b0:
f3:cf:79:59:01:87:1b:ee:20:4e:4b:ce:64:6e:aa:
50:c6:b4:0c:78:60:a9:0a:f2:2c:54:34:55:54:84:
61:8b:b8:b7:df:1a:ef:d7:57:14:43:6d:75:be:12:
d8:43:5f:5b:19:10:1a:4b:cb:a7:c6:99:18:5d:5d:
67:75:f2:cf:55:9d:a7:18:f2:42:41:3a:23:38:9e:
0e:e1:38:7a:9f:2f:76:6d:d8:8b:d9:c5:ef:a6:a1:
ac:64:46:2f:1d:cd:7b:2d:a1:80:1b:b6:74:0d:7e:
c7:94:11:ed:44:ea:20:d5:34:89:31:b0:79:0d:02:
0a:ba:7d:7a:33:2f:a9:c7:5d:2a:9a:09:45:09:b3:
cb:26:a8:30:05:c0:4d:af:d1:39:76:9c:d7:28:5b:
05:c4:a9:48:5b:05:e8:14:b8:ae:55:26:0a:90:74:
12:56:1d:47:95:63:1a:42:c0:9a:1f:e8:61:22:67:
5c:60:4b:34:5a:9b:6d:39:52:33:63:20:51:36:13:
55:1b:1c:0e:2c:cb:13:a3:99:e9:5f:c9:2a:2e:31:
3c:12:87:fd:98:f8:98:c0:01:eb:60:7f:3d:14:d7:
3d:04:7b:2b:fc:22:0b:a8:c1:25:0a:b6:4d:aa:7d:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:E6:9E:8E:39:74:BB:B4:E6:84:18:77:A8:5B:24:39:5C:DA:D0
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:dc:83:4d:b0:0d:37:c9:ed:d7:4c:4e:c5:b7:15:26:b9:
02:51:ca:4b:cd:79:55:0f:a9:b0:fd:64:23:2e:f5:6d:69:1f:
f6:3d:68:eb:62:49:ef:79:99:10:7d:7e:93:5d:11:8a:86:28:
ab:e0:c4:86:b1:af:b0:76:23:f1:3d:56:87:32:de:a6:69:dc:
33:ec:7e:f3:57:72:db:50:2c:f3:f0:cb:90:b4:19:56:6c:28:
6e:aa:ef:49:9f:f3:9e:55:d5:c0:df:08:73:1a:ef:38:37:6a:
af:70:34:4f:e9:f0:d3:61:23:83:94:4b:2d:fd:ab:d1:c1:33:
e6:3c:f0:ef:c2:a4:23:70:9b:96:bf:44:2a:3a:65:3e:82:51:
b0:27:a7:57:6a:8b:16:08:b2:09:b6:be:ee:a1:f8:b4:80:27:
6f:07:49:85:79:d1:fb:ce:9d:e5:88:22:40:2a:6a:a6:ee:9b:
46:ad:fc:95:47:03:4c:3e:2a:bc:2d:33:31:33:82:02:41:da:
21:d4:6a:f7:84:ab:25:16:10:4c:40:e9:76:31:da:b5:32:94:
cd:78:3d:82:40:b3:91:59:6e:cc:5a:54:1c:4e:84:b2:83:a1:
02:17:4c:94:d1:92:7a:25:56:cc:88:1c:c7:a7:0f:b8:29:19:
53:ae:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:21 2026 by rpki-client