Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: JiiEWOCencRemVVnCsqyacRDhfIH+aZI3+qGiHGlUZw=
Subject key identifier: FF:DB:48:CD:C0:53:6F:5A:CA:51:16:77:84:B3:10:06:17:E8:1B:63
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 019D273B243F0727E3BB401F667557AFA68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: eYVzKhVxRl0S4NV-8z3jnKXYp7g.roa (hash: FCmQv16BfxP+owog0Mj/PEYM7uRcKJlUX18aeU4hB40=)
2: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: tpb7TxJBT9sEGEewQyXuSE3f0OonEbf87zmHxyE0frQ=)
3: xV6FBBeDoPLgKQuqzg8O7q-72L4.roa (hash: bdyv+UoIDEOcCmHbnZjDztZ9hQAFyZKMucdHwquQvzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:24:3f:07:27:e3:bb:40:1f:66:75:57:af:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=ffdb48cdc0536f5aca51167784b3100617e81b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:6a:ae:4a:0d:98:4e:ca:4a:43:6c:9e:14:
55:54:d5:62:37:3a:c5:9f:8b:1b:36:cb:d9:44:bc:
84:a5:f2:6d:ff:00:de:c1:ea:b9:40:fe:5b:fd:d2:
2b:c8:ed:a1:be:24:35:94:07:25:9b:7a:d1:2d:c1:
6a:8f:65:aa:23:c6:c5:da:1f:c9:ad:f2:e3:c7:e5:
bb:f8:f3:f2:9d:14:3a:ec:c7:dd:ce:47:14:40:1d:
b1:1f:d4:75:8d:23:95:9f:1d:75:1b:95:2b:78:22:
8e:ea:95:92:b4:69:08:a8:db:c9:2e:82:98:91:93:
2b:1f:68:c9:7e:43:9e:44:ec:b0:45:41:ac:aa:9d:
83:19:59:97:92:2c:51:89:0e:ba:39:ed:a1:63:21:
60:85:be:ab:85:f7:0b:b0:ae:7b:90:99:ab:3e:c2:
5e:0a:a4:5e:b6:db:c6:dc:48:4f:67:67:02:2b:0e:
fb:c5:31:bd:5d:71:2c:3d:c3:1d:a8:74:3f:c9:f2:
16:bb:c5:2b:61:2c:9b:fc:5a:f4:a5:cb:3f:20:7e:
1b:db:56:94:2e:a3:04:4d:07:4e:ce:fe:98:2c:02:
6b:d2:45:03:2c:40:dc:ec:20:37:9e:62:9c:a7:f2:
a2:a1:31:cd:1f:b6:cd:1e:38:42:25:a8:2a:cd:37:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DB:48:CD:C0:53:6F:5A:CA:51:16:77:84:B3:10:06:17:E8:1B:63
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7c:0a:37:01:9f:c5:8c:d5:8f:78:fd:8b:cc:89:6a:f0:a9:
6f:b1:e2:76:db:b8:b1:03:01:1d:62:5e:3e:03:48:b8:b3:c2:
6f:d7:01:86:40:df:d1:e5:c0:4e:06:0e:d5:6d:59:e2:52:01:
f9:f6:99:c1:21:83:56:d8:73:44:7b:d2:a0:88:95:c7:a4:86:
7f:fc:7c:3f:26:37:3b:a4:e0:e7:b5:9c:35:30:ea:eb:25:aa:
a5:6e:13:08:05:79:17:e7:35:b7:7e:c3:a4:e8:1b:8e:8a:a3:
39:33:0b:1d:bc:a0:d1:73:48:4a:49:a6:59:e8:53:22:09:65:
19:37:b3:f2:80:95:0c:72:be:1a:a2:48:03:11:61:c6:6a:ae:
5d:7e:c5:d0:f6:fa:f3:d9:09:ca:a3:4f:e4:0e:d1:d5:b9:ee:
0e:05:8a:3e:db:9b:a1:3e:69:bb:a3:d5:b4:89:d5:b5:73:55:
7d:69:4e:c8:e7:56:4a:9a:0d:66:d6:07:19:d1:f2:78:f6:cf:
aa:e1:83:17:37:9a:c8:50:e9:b0:79:eb:b3:b5:2b:52:bb:cf:
ff:2b:22:78:e9:a3:67:23:8a:57:a6:0d:61:d8:84:41:58:f3:
4a:de:33:41:c5:4c:dc:15:07:72:20:7b:4f:fe:87:ce:6f:4b:
66:f6:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:31 2026 by rpki-client