Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: /QfG7WOVLGDxqOFWakODxUwR/RMc39KBLALnFE/vuDE=
Subject key identifier: 1F:8F:B1:E7:87:A0:28:39:C4:C8:71:54:9A:64:E4:C5:C5:C2:AA:1C
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 019D27725709A02CD9A67BDB2EBA07A09731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: 5gvppHvivcscRmJkd_-Ax4ZpaIk.roa (hash: Fv7SxnZFuKOYMVmrqeZiX9L2/02B+Ff1eXNebanWC4I=)
2: q07AwoeAHG6jHueO7q9HXMyxFjs.roa (hash: KbddfU+aGzifwawc6lQ9wXWnokH881+sm51JZkWk/6U=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: Is6Y2zj7WQ9TFPlmBqdaOvnqlvFKMU4KMqi0GQGxhxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:57:09:a0:2c:d9:a6:7b:db:2e:ba:07:a0:97:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=1f8fb1e787a02839c4c871549a64e4c5c5c2aa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:32:4f:50:4a:a6:9e:2e:d2:5f:28:26:43:
52:18:31:64:6f:ba:5f:4a:77:64:3e:5c:72:41:e1:
39:d4:7a:e4:db:e6:e6:e7:31:3d:1c:7f:78:b0:31:
3f:c1:8f:3d:f2:7f:68:05:79:00:90:df:f1:08:8c:
ea:09:c5:81:13:08:8e:b1:d5:cd:86:7d:20:f4:c7:
12:d6:be:84:2b:2e:65:d7:36:8a:a9:b3:f9:fb:3e:
7c:df:bd:99:d5:1b:da:0f:92:8c:e3:01:5e:16:6b:
7b:9a:79:f1:c3:24:b8:04:52:55:42:fa:13:b3:72:
3a:54:b6:e6:0f:7d:83:e9:6a:a8:d7:82:82:51:1f:
1f:c6:d2:c8:46:40:03:f8:4b:e1:0a:5d:e5:e1:08:
fd:cf:f4:a4:b1:7e:b3:87:40:e7:16:c7:09:ce:f3:
31:60:60:30:94:24:9a:48:5d:d7:13:3d:1e:42:9d:
0d:48:bd:39:1f:3a:69:71:63:e9:64:e9:b7:06:8a:
20:95:f3:9f:1e:62:2b:5a:85:b5:df:47:88:2d:ab:
10:96:dd:1e:13:b8:eb:a5:7d:2e:c1:06:81:28:3a:
1c:03:49:fd:f0:d7:3b:d3:52:7d:ac:19:9b:b4:25:
ea:33:13:8d:b1:a3:4e:1a:48:e1:e2:fd:2b:ff:ea:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:B1:E7:87:A0:28:39:C4:C8:71:54:9A:64:E4:C5:C5:C2:AA:1C
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:af:67:11:cb:1f:a6:2d:a3:5d:7e:07:73:b8:43:de:04:8d:
8c:62:58:44:93:60:53:4b:bc:a6:81:9f:fe:34:61:80:a9:f7:
fc:6c:8a:ff:6f:aa:fe:84:3f:9a:e9:a3:41:6e:73:00:2d:14:
a3:82:9f:c8:b4:6d:80:fd:8b:8d:5a:eb:28:28:a7:a8:7c:6c:
da:83:11:fa:65:88:ea:72:7a:b6:bf:5e:98:44:7e:d2:06:d1:
27:a5:03:c3:a0:c6:27:73:89:bf:15:79:82:63:4a:e4:45:45:
53:47:1a:e8:ba:ae:a0:f3:e3:f0:60:95:65:b1:2e:a2:4e:77:
b7:9c:a8:6f:d6:73:48:42:ab:af:da:87:ba:e8:82:68:9f:24:
f2:ad:00:36:3b:4b:9c:14:70:11:a3:56:d5:cb:61:2e:88:86:
67:ee:70:a8:97:e0:7d:ce:d7:bc:b4:71:79:56:5c:c8:6d:ff:
a9:a6:c6:30:6a:f5:15:a0:95:d2:5c:de:92:ff:19:d6:15:68:
ed:a8:e1:a3:f2:b6:de:56:51:2b:ff:9a:2c:b2:6a:8a:fa:35:
2e:b1:01:46:51:f8:dc:05:55:c2:ee:a7:7c:fb:71:48:de:a5:
4c:eb:4d:39:80:8a:d9:00:69:f3:98:9e:ea:70:10:5b:69:ac:
29:bc:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:10 2026 by rpki-client