Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: tWFFg/b65K1qJCd4p6QW/yowBhZEcN6qeKVeg8zy80s=
Subject key identifier: EB:2C:5D:89:AD:15:F8:D5:CF:AB:FC:76:7F:7D:AA:14:57:90:F2:70
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 019D25F13D387A4518E9B579DDC31F056B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 159F
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: upUOY/fdcZqX1iDZfsNamltaFYInuvoZWxxgPmxk0AQ=)
2: T42ISOzOZCjRJULwv95Ki_1s9aQ.roa (hash: Mey912qaR+jcZwTBP3JL+1sjx7k32kwZ3D6pir+lHUc=)
3: hK81XxwexeAS1Vg0WZOVuuxaXZ0.roa (hash: 1mtzz3B7T8LCh8jy6BmMpwy7jaCIEVijH1m2+CPXt+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3d:38:7a:45:18:e9:b5:79:dd:c3:1f:05:6b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=eb2c5d89ad15f8d5cfabfc767f7daa145790f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:eb:ee:a0:cb:cc:fb:ac:0a:94:ec:5a:7b:
0f:76:45:4c:44:7c:3a:d9:ea:04:05:d8:53:a5:40:
e8:3f:11:c3:1c:b7:63:fe:56:38:61:c0:62:ff:65:
fd:02:6a:7d:c6:0f:be:f7:a7:fd:9c:ea:9f:57:2a:
42:92:c3:1d:94:95:d5:98:b2:d5:d6:06:43:35:5a:
5c:66:75:f3:cf:b8:a4:fe:ea:ee:b8:b5:c2:84:9c:
66:01:f3:7a:cc:73:97:37:56:49:94:a7:ae:5a:3f:
c1:26:1c:be:cd:51:eb:e4:43:0c:c1:77:2c:8c:f3:
9e:de:d8:24:6b:b9:55:d2:a9:a0:25:7a:75:97:b7:
b1:91:a1:70:54:77:58:66:5a:08:40:85:d5:fa:8a:
76:eb:83:22:90:b3:e8:d9:ed:d3:e6:53:60:58:73:
54:f8:9c:f7:30:ae:6f:57:3e:da:2c:c7:f3:c3:1d:
ce:6d:5f:87:e7:a6:cc:a7:2f:26:69:97:6b:e6:1b:
39:40:55:20:3e:af:bb:d4:ea:02:53:d0:43:79:c5:
7d:05:fe:4e:de:bc:f9:47:c3:dd:33:c7:ef:6f:c4:
25:17:08:f3:7b:c7:5d:18:4a:3a:93:5f:59:38:c3:
c7:d9:69:bb:7a:aa:c2:c9:7c:ba:aa:bb:9a:b7:1c:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2C:5D:89:AD:15:F8:D5:CF:AB:FC:76:7F:7D:AA:14:57:90:F2:70
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5e:65:69:7d:ef:e9:76:a8:88:c9:0b:74:aa:98:1e:44:1a:
32:89:5e:f0:6e:2d:50:a5:24:b0:9f:d8:8b:a7:14:54:38:c9:
41:9b:a6:fa:4c:b5:ae:f2:70:7e:86:3c:27:e8:b9:97:1a:b8:
80:40:7d:5b:69:3d:81:14:25:d0:33:fe:7a:93:43:49:a3:33:
40:3e:3c:3c:65:eb:06:e2:18:8d:2f:c1:69:11:a4:ab:9b:e4:
17:ee:81:b6:e0:e5:e5:9e:53:38:48:62:9b:58:ec:31:50:6f:
7c:00:a2:03:f8:60:2c:25:cb:0c:c8:20:fd:6c:31:ee:95:7c:
70:6f:d6:a9:7a:4c:13:cd:1f:75:2c:94:47:e9:02:d9:80:46:
30:b6:73:4a:f6:6a:90:66:0e:3f:6f:ee:2c:9d:b7:63:35:46:
a1:eb:94:d6:5c:39:2b:9f:6e:ce:ee:cb:0a:e1:12:7e:0f:2c:
b1:31:1f:de:87:c9:11:c3:75:8b:9a:0a:cc:01:d4:c9:8b:d9:
a8:c6:d4:ce:9a:40:2c:96:4c:77:cb:7f:88:97:43:38:e3:28:
82:c9:24:3f:70:fa:8c:db:71:64:ae:08:ad:fa:c3:26:8b:70:
ec:72:01:4f:a1:ab:0f:55:6a:f4:4b:0d:41:5a:fe:a3:4c:df:
63:43:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:47 2026 by rpki-client