Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File: qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier: f9PN5r4vJ6BoFEJkuDMX5WGO78X41XUCUoqj4JZT7y8=
Subject key identifier: 1E:A0:C4:02:BE:06:97:E7:E8:49:E1:5D:E8:74:3C:52:E2:AD:C9:72
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer: /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial: 019D269659AFDD806C02B3D277D6513637CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number: 076F
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: MkdPJ2X8KSAgPeL_E9eUW7kJg44.roa (hash: L9wK9aXGqZVs8Xjy0tqG+NiG0/js60DJI6OgRrSyYQQ=)
2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: 3rq9doro0m+PeJ1q6ruxsZ6gqhAwD/6Mr3NR4wvLRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:59:af:dd:80:6c:02:b3:d2:77:d6:51:36:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=1ea0c402be0697e7e849e15de8743c52e2adc972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d5:0d:3a:87:55:83:80:7e:2a:2e:e4:5a:ea:
12:46:23:88:44:42:ca:98:1c:37:c6:18:45:dd:e1:
e3:50:d7:25:06:c7:a9:5e:00:af:a7:db:46:3e:16:
a1:d8:6b:57:21:01:c2:26:43:c6:4b:0a:26:c0:30:
6c:42:4b:06:95:5b:be:cf:14:b8:ce:59:34:13:71:
05:ef:78:54:d5:f2:b6:dc:cb:7d:4b:f8:d8:c2:34:
2d:47:e1:db:fb:e3:fa:0c:c4:88:22:eb:26:59:af:
ba:9c:fa:1c:de:ff:fd:61:79:f8:75:d5:f7:dc:22:
7e:5d:95:66:8a:b7:1a:2a:0f:eb:e9:50:08:48:11:
0a:32:c5:7d:91:f5:c2:64:72:a1:f6:99:a4:9d:59:
ce:97:07:df:2e:81:61:95:4c:92:e8:c0:23:c9:5a:
d7:f0:77:37:7e:46:05:19:66:ab:19:a5:bf:52:97:
55:3a:4f:83:7f:b3:c3:27:08:49:5e:98:f8:69:d3:
23:3f:97:45:f7:3f:d5:67:59:b2:15:3b:7d:83:48:
5b:4b:e9:08:ec:a2:e4:66:10:b4:e4:fa:d2:ed:81:
ca:06:76:bc:41:45:c6:36:d0:76:d6:af:cd:27:34:
d3:a0:81:fe:dd:a2:ec:90:7d:0d:1b:55:c8:dd:eb:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:C4:02:BE:06:97:E7:E8:49:E1:5D:E8:74:3C:52:E2:AD:C9:72
X509v3 Authority Key Identifier:
keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c6:c6:43:4f:06:24:7f:44:23:8b:b1:a5:7c:8b:3d:6e:6b:
53:df:1f:52:4c:d7:7a:e4:0b:fe:49:74:17:9b:83:3f:db:51:
22:42:d7:42:de:0d:d5:53:ab:9e:24:83:36:3a:12:d0:e7:f7:
50:d3:b8:37:71:48:ed:d2:71:67:e5:d3:4d:57:8b:3b:d0:66:
b8:08:c5:2f:2e:11:b8:98:3d:ba:72:d1:a4:86:d7:fd:08:f2:
39:57:52:4a:7e:92:74:58:2d:74:22:27:4b:6f:8a:07:30:16:
36:22:e1:6f:a2:9f:df:de:1b:50:87:91:94:8d:b9:fd:d6:71:
93:d1:be:8f:60:a7:ca:df:74:aa:24:c5:ce:ce:e5:53:f6:81:
3a:69:71:4f:b4:6c:c9:8a:46:d4:4d:3e:af:5b:51:3a:6a:da:
ca:e1:7a:d2:69:3b:f0:c0:e1:0e:77:85:5f:8d:d3:a3:00:a9:
79:0b:ca:ab:9b:51:16:45:b3:a1:02:72:39:b8:16:b4:d6:af:
d6:f3:6c:c3:9f:b9:bf:70:cf:61:3d:65:5a:ce:d5:35:9b:7d:
66:92:a7:4f:c7:87:bc:2c:f4:d8:18:b4:fe:b5:ce:b8:a9:28:
8f:ac:f7:b0:31:66:cf:53:04:fc:d6:ee:f8:e5:19:31:0b:c3:
87:be:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:20 2026 by rpki-client