Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File: qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier: 87cnD8ZkD/Uc5k40Jtne0msmeBbA5yXvsEKZ6t7ll0k=
Subject key identifier: 97:8D:58:DA:FB:F3:8D:13:78:1F:CC:A6:CB:7F:1D:B6:E4:34:9A:3E
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer: /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial: 019D28BBD6D8E4F6FCC6925F2E8C452ED217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number: 17C7
Signing time: Thu 26 Mar 2026 06:01:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 06:01:31 +0000
Files and hashes: 1: PMMli3MzCqCG67uo47gc07F1xDs.roa (hash: 0QTIv8iQUI0jlHi0XMn+A7S70suNA2tPVsewSPKeO9Q=)
2: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: C/GAXFAqTpN1dWDktEMH5171BoXzyB5mfVX0qGGsj14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d6:d8:e4:f6:fc:c6:92:5f:2e:8c:45:2e:d2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 06:01:31 2026 GMT
Subject: CN=978d58dafbf38d13781fcca6cb7f1db6e4349a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:fe:06:b1:22:01:68:8c:91:e0:f7:34:41:
c5:77:7a:88:01:9b:06:32:ca:66:d0:d2:e1:07:27:
d0:12:8c:de:de:72:f5:c7:d5:2e:01:54:a7:5f:b3:
32:62:a8:b5:0a:b1:cb:a4:d4:09:9b:bb:00:c4:6c:
13:2e:e9:e3:36:8b:5b:da:81:32:61:7c:fd:c1:fb:
61:f3:7f:2d:5d:01:d8:35:65:f6:13:0f:64:7e:93:
34:84:9e:6b:fe:7f:38:ea:5a:62:eb:e1:56:b7:9e:
7e:ce:4c:9d:c5:70:0a:33:f4:f6:30:7d:9e:9e:5c:
df:15:04:4a:5e:3d:3d:b2:98:cf:51:f8:b5:99:e6:
f0:5f:3d:d3:c5:bd:61:b4:d7:9d:93:29:51:10:83:
e0:a7:ce:cb:35:72:ae:98:b2:4d:c2:4b:91:4f:ab:
4c:3f:17:1a:a0:9a:4c:45:52:d7:f7:64:37:da:fd:
53:15:20:9c:9d:3c:51:a0:52:e7:24:2a:cf:95:78:
b7:6c:22:07:bc:e2:32:19:cd:ab:4a:79:0f:2b:e3:
33:cd:7a:2d:e1:20:1c:47:3e:d0:3b:10:5d:7f:9b:
8f:dd:05:b0:2d:56:61:bf:ae:5b:fa:01:f3:82:89:
f3:5c:0f:10:dd:86:b1:ff:52:6a:c1:15:9c:7e:72:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:58:DA:FB:F3:8D:13:78:1F:CC:A6:CB:7F:1D:B6:E4:34:9A:3E
X509v3 Authority Key Identifier:
keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:58:4e:77:7b:a4:36:c1:3a:88:c6:8e:03:2f:f0:0b:7d:2d:
a6:1d:00:68:4b:a0:ca:56:b4:8a:e8:cd:d1:1c:d5:df:a4:41:
69:a5:b2:ff:3f:a0:09:bf:a6:01:aa:02:c6:a1:de:6b:b4:30:
d5:7a:52:90:07:32:e5:23:c9:e1:d6:56:dd:1d:e2:13:5b:a2:
4b:99:96:e5:da:be:b1:9d:06:3f:df:e8:3a:8e:a3:1d:fb:7a:
ad:94:20:49:73:68:a1:9f:fd:1c:f1:08:ce:83:20:22:f1:40:
15:35:a9:ea:64:17:cf:f6:e7:af:a0:40:3c:b7:ec:2d:f6:5f:
9d:7f:62:13:95:80:df:e3:57:52:9e:9e:11:4a:f0:cd:5c:b2:
9e:fb:a1:d6:41:4c:74:ae:59:69:8d:96:f1:8a:95:45:ea:bb:
5a:6e:40:c3:87:49:f3:23:0a:fa:aa:26:f1:2f:46:3d:5d:c6:
fb:d1:67:02:47:01:08:91:3f:7a:47:06:c1:30:cd:72:f9:80:
81:09:dd:c8:78:50:1b:05:ab:29:0a:1f:e9:69:f2:80:e3:00:
11:23:63:d8:95:44:50:5b:b8:0a:8e:cf:43:37:c5:14:56:8e:
a9:fe:79:a6:63:b4:48:0c:57:fa:b7:30:c3:25:dc:c5:90:19:
e0:60:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:09 2026 by rpki-client