Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: rEsNWhKXkqQBUsGz3nnEJMLTu6guH2cApjptI+hXFPY=
Subject key identifier: F8:59:DE:F4:50:51:4E:20:CE:E8:64:BC:AA:9B:32:ED:30:FA:52:5E
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 019D2771F5BFB180106990C7C7267FF6C3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 08C5
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: sKUJjT9F2Gl9GWPKpuFSIAD/Pnr9LK0CiNLpxBZ6mss=)
2: NBMICGxDjswxMBcIkL6TWpVgug4.roa (hash: SDiHoGR3hyxD5P9xq7VGB+HgvxZFXXwsXaz8vMU9je8=)
3: flkFMntj216ik-1RHE5z8QkiuF4.roa (hash: Gx/ViUGq+C6Lf+xKNlRvkXnmfpj7mqFvEpimMEsP3EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f5:bf:b1:80:10:69:90:c7:c7:26:7f:f6:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=f859def450514e20cee864bcaa9b32ed30fa525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:04:d0:7b:6c:eb:d0:e9:6e:f4:ba:d3:97:
9c:6d:fb:ad:a3:38:b8:59:e6:65:e5:d1:08:c6:e6:
15:f3:c7:af:91:00:7a:f6:fe:1d:04:57:09:54:a4:
c1:13:5d:9c:a9:ab:02:91:90:df:aa:41:42:90:e0:
0d:eb:54:d0:ea:3a:a4:96:51:e1:ff:60:77:7d:37:
25:7a:37:97:8c:d2:7e:55:f8:6f:01:54:03:ee:1c:
96:44:3d:0c:20:c3:4d:93:ea:e7:2b:2c:a0:1a:6f:
b4:d8:68:c9:0a:f4:b7:bd:65:ea:53:70:26:2b:93:
31:d0:11:af:51:f9:07:d1:d3:71:85:e4:39:77:70:
b2:16:4a:60:28:50:52:30:1e:11:00:b0:3e:d0:ab:
12:8b:93:f1:bb:63:e6:2a:aa:0b:ae:d7:62:a5:83:
1e:e8:77:88:7e:06:ed:8e:a9:fd:53:79:fa:e3:6c:
56:6d:8f:15:0e:bd:f6:cd:bb:54:bd:09:b5:32:dc:
ff:84:a3:91:8d:05:71:15:65:e0:5d:01:fb:84:76:
68:da:3d:b6:00:b7:e5:d6:ec:f5:46:c9:43:38:16:
0b:db:71:53:05:54:cc:bb:50:40:34:93:f3:17:a3:
97:cd:23:d0:f1:2d:3a:c8:e5:3d:29:84:b0:c6:20:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:59:DE:F4:50:51:4E:20:CE:E8:64:BC:AA:9B:32:ED:30:FA:52:5E
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:60:98:3a:9d:e3:88:af:fa:33:4b:ba:00:15:da:6d:bf:
44:e0:d2:a5:49:32:6f:d0:17:2d:05:2d:44:48:71:fb:6e:c1:
c7:9b:01:8d:cf:44:8f:39:f5:4e:f4:30:a9:48:e8:66:8c:a5:
78:1f:2b:43:93:fb:d2:f5:53:24:fc:da:43:52:d0:b5:38:9f:
d8:6f:0c:4b:1f:43:f1:03:ff:77:a7:91:f0:65:d5:c4:5d:47:
0e:73:87:5a:c4:ce:ad:77:eb:79:ad:49:0b:2a:d0:2f:10:2f:
09:cd:c6:db:88:fd:4a:bc:95:ed:ed:39:87:80:a7:40:93:f1:
20:0b:d5:62:44:3d:c5:79:e2:5c:27:d4:fb:15:20:24:a5:d8:
d3:ff:11:0e:22:25:78:b2:76:b6:ec:a2:eb:fb:ef:ec:9a:9a:
2f:81:e4:53:de:1e:5d:09:13:82:b0:5a:04:a1:f9:ae:3b:a0:
3a:bd:4b:3e:1b:00:2e:cf:1c:77:aa:0f:13:1c:91:54:e9:19:
81:e6:bb:de:bd:db:9e:e6:74:7b:e8:7d:95:69:fd:d6:b5:e6:
2b:98:88:e0:f8:55:8a:91:b7:c4:f0:39:cf:4a:de:37:03:c0:
be:b7:6c:c1:c1:22:69:c9:99:63:7c:47:e6:20:28:57:53:b2:
a2:49:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:07 2026 by rpki-client