Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: 2M+Bl94TWBBLdJuyU/7doTmBJgO9AoqsGhiJGpV/x1k=
Subject key identifier: 7E:0F:56:5C:5D:55:16:E9:71:09:CE:FD:F8:28:90:F3:58:10:87:85
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019D2703DB5E175F16AE5CAD6D2E306B61D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0D6A
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: IEQmPaN2GlKRT3JtCebaEO49TxmzQ2NFbi4s8uE+nxY=)
2: rhstuAH1RjeoFX9aBL9o13FXeo8.roa (hash: V/dFIE6DEQQYxzvLKa9DV5po5slChYjT93vla6o5qEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:db:5e:17:5f:16:ae:5c:ad:6d:2e:30:6b:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=7e0f565c5d5516e97109cefdf82890f358108785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:a7:12:d1:2c:3f:42:b2:d0:0c:07:79:80:
d3:dd:d6:fd:4e:68:c1:16:f3:50:56:2b:e3:2e:a1:
2e:df:c8:12:f2:99:25:88:7f:ce:cc:f0:21:6f:a6:
05:62:21:99:93:8e:89:61:14:5e:5f:e5:26:72:a0:
e6:c0:47:34:57:f7:76:92:66:cc:f9:a6:92:75:a6:
19:b1:f4:41:6e:a8:6b:a1:dc:d9:2e:03:3c:21:88:
6e:b0:ad:5b:a9:e4:36:74:76:18:78:7d:e1:e1:3c:
2a:89:9b:f2:5f:1f:35:39:d3:0a:35:9a:74:58:35:
ec:fe:18:44:c9:f2:6b:48:ea:6d:c9:be:90:2e:51:
7c:d7:6b:47:6c:47:ff:c8:ab:55:26:63:03:34:c0:
96:ac:5b:71:52:3b:cb:52:22:f2:b1:ef:b2:17:66:
b4:db:2e:72:6e:81:22:c5:4d:2a:08:ff:7e:8f:fa:
4b:aa:d9:b1:89:dc:1c:98:cd:4c:51:d8:ae:33:28:
78:3a:d6:d5:c9:7d:a0:e9:c0:f9:0d:4e:bd:a3:57:
be:bd:6b:98:f7:bc:a7:73:aa:6f:15:4e:78:0f:2e:
e7:a6:92:61:96:62:3c:10:06:b8:4a:00:6c:3e:20:
b7:7e:c0:6d:6c:bc:8c:1e:c7:d4:87:7d:92:cb:32:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0F:56:5C:5D:55:16:E9:71:09:CE:FD:F8:28:90:F3:58:10:87:85
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a5:10:1e:cc:22:97:dc:e5:87:be:aa:8f:fb:61:a1:5b:df:
82:52:05:76:ef:b1:f9:d7:bf:2d:b6:e1:71:37:f1:38:2d:03:
e3:9e:24:9c:21:97:9f:5d:c5:ff:a9:7f:57:0f:f1:28:02:b8:
ea:fc:14:b8:b9:4c:26:9a:db:e6:23:64:6f:22:92:b5:c7:cf:
62:6b:f0:6d:43:13:4a:ec:3d:6f:2c:59:42:ea:73:4e:8d:39:
cb:45:ad:a3:3a:27:5e:60:42:8b:9b:c6:d0:33:de:8f:46:bc:
62:cb:cf:af:0c:39:4f:59:f9:a6:f5:26:b1:8c:a6:f5:a0:01:
16:b0:71:6f:69:3c:be:62:96:4f:76:1b:4d:2f:c1:32:f0:a7:
5b:ea:23:4d:87:ad:0d:52:24:89:ec:b2:39:06:d2:3a:32:7f:
e6:ba:b1:39:81:b6:54:8b:30:fd:b7:1f:e6:62:3f:35:08:07:
54:7f:f8:1b:0f:04:4f:0d:b7:47:ce:ab:03:c6:3a:cc:85:25:
d3:e8:16:be:cf:b8:7f:1f:65:df:18:5a:58:16:9b:02:a9:c8:
82:49:93:6c:30:c5:77:2d:bc:79:30:2c:a9:43:b6:92:48:49:
d5:e3:ab:13:17:f8:58:c5:d8:51:cb:a7:90:b4:1c:58:79:fb:
38:25:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:41 2026 by rpki-client