Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: rkhc/DAz2DiWgYPKQpA8cqNeSBr60b5wRxqWL/ldL7g=
Subject key identifier: 18:46:AF:16:FB:A4:23:82:3C:9B:8B:0A:96:C5:1C:A5:D5:43:8C:E1
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 019D26CD6C576FD3EEE8A8C8C2850C17709C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa (hash: zcRDL/MU2cEJIkxNEFip0E/KypuWn835uLEU6Antv/M=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: IqUyjtx3bOXWiyFRc5Nn4K/vfBR8m1nm+WhPxS3SOCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6c:57:6f:d3:ee:e8:a8:c8:c2:85:0c:17:70:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=1846af16fba423823c9b8b0a96c51ca5d5438ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:9e:61:2c:bc:a9:44:eb:da:a7:76:59:19:
f9:22:ac:c2:8f:9c:27:07:0b:5a:f5:86:d9:12:2f:
33:c6:17:df:d6:7a:cf:f1:b7:9b:cd:26:f6:91:32:
7d:60:7c:2c:50:94:e8:61:85:65:e7:b2:fb:55:c4:
f5:b2:6b:2e:13:a2:19:28:5d:35:95:3d:91:d7:ab:
3f:8d:7c:7b:05:1d:29:dc:05:33:ed:9e:93:37:0f:
bf:14:e0:20:37:94:19:6d:c7:ce:3c:d9:86:78:52:
31:22:a3:cb:5b:d2:d7:6f:69:d4:49:fb:ef:db:0f:
40:be:13:02:d9:c2:b0:4b:81:cb:69:5a:fd:53:95:
57:da:db:0e:d2:93:44:55:12:13:4c:02:d2:b3:e8:
4e:a5:01:bc:a3:8a:fb:3c:b4:24:6d:13:cd:38:97:
c1:75:ba:23:da:5e:1b:e1:38:ac:fe:7b:bf:34:b2:
4d:67:8c:05:52:a7:4c:75:21:62:fa:36:1f:01:00:
28:9c:64:16:f1:8f:8e:62:ec:ba:1f:43:e2:29:92:
c8:f6:e0:01:5a:1a:2a:25:50:48:5f:7f:8c:e6:d0:
03:1a:7d:ed:21:3a:4f:c6:c4:e1:06:e7:46:29:a8:
b7:3f:8a:71:91:b8:87:e2:fe:df:dc:73:2b:d8:76:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:46:AF:16:FB:A4:23:82:3C:9B:8B:0A:96:C5:1C:A5:D5:43:8C:E1
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:f0:46:c2:ad:0d:5d:9d:80:db:81:89:84:2e:d2:ea:f4:
b8:6d:6a:6a:81:84:7a:ef:c5:d8:9f:d0:ab:3c:7d:1f:64:91:
9f:70:26:26:74:98:83:06:e3:b6:c6:a9:04:c8:55:ab:ac:27:
f4:27:59:60:17:30:09:63:1b:40:b1:62:ef:55:e6:8b:75:cb:
c7:fa:98:e1:39:8f:6a:da:76:6d:bb:2f:42:37:71:d4:2a:4a:
66:ea:6b:77:e8:51:49:36:a8:23:9f:e4:56:62:05:77:3f:20:
55:99:f6:02:60:fe:db:b9:a9:ff:68:3f:ae:4c:07:d5:a3:74:
2e:4d:b5:b2:9a:3d:45:16:95:93:6a:77:bd:90:20:1b:4d:5a:
93:35:9b:18:30:a6:cd:57:c9:ea:b5:4e:f2:ab:43:61:73:3c:
36:3a:e5:32:41:4b:35:f4:f7:3b:44:5d:17:e3:87:18:1c:53:
25:d9:92:26:70:40:a4:2d:49:5b:99:a6:11:9c:74:10:6d:89:
7e:22:1b:37:6c:39:79:a7:d4:2d:ea:c0:8f:8f:16:38:b5:43:
78:2a:12:8e:84:0b:aa:47:52:b9:3a:71:cb:fa:6f:85:6e:c0:
6d:8f:b9:cb:1a:45:6b:31:d9:b3:77:69:5e:65:a3:fd:3b:41:
4d:79:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:25 2026 by rpki-client