Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: SwIgcVfKg0w+rqqRok4ktxVTF3hgN7eLwEuS5AAcnA0=
Subject key identifier: 26:B2:17:20:1E:00:52:A0:FE:F0:84:43:D6:41:E5:3E:96:A1:32:99
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019D2703CF2CF98F3B9B1F83B9A7E5DAF96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: kEStRgFFvUE-F5ouVzsvLSOaSko.roa (hash: CPss/SLu7PEcptxsMsF+R9khBX0xPafGY3ozU4mC0YU=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: ati5Ytz3LdyvnDi5vwUAzWg3T0dbM/ODXrnWDt5agHc=)
3: ybcCspNcqCQ33fBea-dujuXdvYA.roa (hash: VgxSvwLJO5sqIYu59D65/gIjVJTVHdASRnQ/3xkt0AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cf:2c:f9:8f:3b:9b:1f:83:b9:a7:e5:da:f9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=26b217201e0052a0fef08443d641e53e96a13299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:41:e1:9e:28:d7:61:79:d0:26:8c:70:03:
b0:1e:60:5d:28:24:d1:22:fa:4c:27:23:f5:1d:d5:
cb:fc:68:91:83:e5:e0:a9:2a:f2:b2:69:29:4e:e2:
90:67:25:a5:6a:7c:a2:44:77:79:39:74:a4:5b:5b:
27:af:89:8c:c0:4f:45:df:c5:7a:b3:94:6c:bc:2d:
cc:d4:1f:0b:13:19:d7:e1:9f:97:0e:c0:df:ad:07:
eb:5f:b6:d4:cb:8b:62:dc:fd:b7:85:59:51:64:e9:
62:8a:0d:38:a5:70:14:50:fe:1d:3d:cb:3e:8c:ed:
08:89:d3:85:d9:06:9a:13:82:84:20:de:b7:30:0b:
be:ce:21:a5:c7:69:dd:9f:93:20:39:8c:ad:97:91:
e6:d8:d5:98:30:bc:cb:cb:01:2c:b5:59:e5:5e:29:
7b:33:7e:a4:f0:ed:4a:33:7e:c9:38:08:59:49:87:
fd:46:b4:77:8e:ec:0b:5f:4e:ce:11:60:24:77:e4:
a8:9d:3c:ed:c6:a1:a6:6c:41:c8:57:9d:8b:69:ed:
86:02:e6:63:53:3b:3b:a5:63:d9:4b:ee:9c:40:1c:
da:ab:dd:cd:34:fd:38:ef:20:71:4d:ac:66:78:22:
d1:c8:90:95:92:35:59:75:37:d8:7f:ef:db:a5:0f:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:17:20:1E:00:52:A0:FE:F0:84:43:D6:41:E5:3E:96:A1:32:99
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:ff:1e:97:fb:24:1b:d4:5b:2f:ff:b1:59:db:7d:58:11:
56:52:97:8e:e1:d3:37:17:36:43:af:4c:7a:8c:7c:c2:26:04:
9a:fa:6f:8f:6f:bb:fa:61:a3:e1:0c:ff:f5:5f:1f:1b:09:c9:
ae:16:10:84:88:2a:51:76:25:3e:06:c5:3d:a7:35:0e:97:ce:
45:bb:82:3d:5d:b2:f1:2c:9c:eb:24:1e:e0:68:aa:71:33:7c:
ab:2c:f4:f4:fe:f0:c3:cd:d0:64:d6:a9:db:ff:ee:54:1a:92:
55:31:e6:05:8f:11:f1:59:3d:5a:4c:98:06:f7:33:15:09:b4:
ca:c3:ae:0c:25:7f:f1:82:16:44:ec:cc:c5:de:0d:78:65:53:
24:98:8b:dd:89:00:76:bc:f0:c3:c4:20:5b:9f:cf:ea:69:62:
3f:22:35:0b:d2:6a:97:9c:7c:1c:2f:d8:4f:93:3d:6e:dd:73:
c8:44:2a:40:27:64:79:4c:94:ab:e6:47:fe:69:ea:b1:00:f4:
e4:43:72:aa:cb:0e:78:3a:fd:61:d5:2b:91:80:80:0d:ae:1a:
f9:de:7f:18:d4:42:55:80:8c:68:9b:b4:1e:6e:66:75:72:c2:
04:cc:33:f2:b6:4d:a7:77:bb:b0:ef:e6:a7:d9:da:2a:2d:7f:
6c:2d:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:22 2026 by rpki-client