Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File: q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier: RSKg/FkFpSo2JgikieI86hh5HbpEcOG0nAHHSQ+3Mzk=
Subject key identifier: 81:C5:46:BD:1E:93:FF:52:99:B6:F7:72:3B:26:FF:3C:5C:F5:0D:5F
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 019D27727733D522391485816DB203868223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number: 18CB
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: 7QXSQMVR5e3PA33Tbe1jUFBiBtU.roa (hash: Fu/x5ydAHbzxjRuQ9kPsYtD1frLQkvc1el/MBrSoppE=)
2: D_nN_vPhKORNTjWjIas_aeL_fw4.roa (hash: 2kCeAo6j8PDX4i6BTYf7QZybuVQ19wHuoI+CXgfbp/g=)
3: NIWJ9b544URGWTLtmkZjvf2kxIA.roa (hash: DSfziWB0uqzODbT1D3jvb0WNAfepSpfXbax16O29J9U=)
4: e7dlLb1mQuulDFLIJIubZnzn92Y.roa (hash: pjhxvegNUc0jD9hr5mE16h6OsbQxuTM2Z8MfFLGcvIk=)
5: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: wpbE1CvtHkZiMtgUK3VRVpKEGPezz6PUeQIbvxkysUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:77:33:d5:22:39:14:85:81:6d:b2:03:86:82:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=81c546bd1e93ff5299b6f7723b26ff3c5cf50d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:c2:59:b4:f1:32:c7:7d:9a:88:d2:f0:9b:
ec:68:48:dd:9b:b6:dd:9e:2e:80:a0:ba:6c:a4:a0:
2a:a6:aa:d9:2a:10:ec:16:38:d4:d1:f3:7c:74:5b:
65:3f:4e:d0:83:4e:e9:35:0d:93:2c:04:5a:52:e1:
21:81:c4:35:9c:03:7c:db:11:ca:1f:f3:39:4d:cd:
e6:45:22:9e:b8:c2:b6:e3:51:90:0b:06:b6:e0:f0:
25:16:5d:26:ea:a3:65:e1:04:86:2f:54:f6:32:ca:
35:0f:21:d6:c5:ae:ae:ad:77:7f:15:c1:d1:25:d2:
7b:cf:df:dc:73:5f:1a:a9:81:67:fb:db:a2:04:04:
a7:a6:f0:9f:21:62:83:72:01:88:9c:3b:97:90:00:
53:48:1b:87:f6:e5:c1:a7:3d:c9:4d:e0:c4:08:92:
fe:9f:49:6b:2a:12:06:16:b2:54:b4:cc:b5:24:2b:
62:2b:7a:58:ab:1c:ae:e0:6b:3a:29:59:6b:06:78:
21:38:fb:98:5e:a8:e4:8f:76:f8:d8:3e:82:bb:0d:
3e:4b:91:96:06:04:89:dc:d3:b3:e1:d2:39:51:a9:
1c:09:52:fe:90:b9:7f:9e:db:d2:59:1d:bb:98:c8:
95:d2:a9:5a:f0:e3:de:7e:6f:15:3f:72:73:94:27:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C5:46:BD:1E:93:FF:52:99:B6:F7:72:3B:26:FF:3C:5C:F5:0D:5F
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:af:cb:b6:a7:3c:be:9c:c7:dc:fc:f6:55:40:5a:a8:c6:09:
33:02:e3:0d:77:61:65:e7:48:b7:ba:34:eb:6f:de:25:23:58:
70:de:5b:15:52:14:6f:81:fe:bb:02:96:d6:39:30:aa:10:a6:
08:ad:52:18:e3:95:d3:0c:38:81:11:ca:b3:be:44:ef:80:7c:
e9:f0:9a:ec:70:f3:e1:86:9d:dc:26:de:44:14:ff:92:db:03:
69:45:03:ec:94:60:f5:d9:40:15:22:2a:cd:42:86:26:0f:19:
39:1e:5b:7b:ce:24:43:57:2e:28:ef:cb:20:b7:af:30:e2:4a:
cf:bc:25:6d:c3:d1:8b:0a:26:26:df:49:00:92:d9:41:68:f4:
1d:fb:e0:56:8c:aa:d4:29:fa:64:57:15:02:d7:5a:fb:36:59:
f1:b8:01:14:1e:6e:e9:6f:96:92:7a:cb:e6:fd:25:15:f8:ae:
2c:d2:f9:d5:31:c6:ff:4b:ac:15:44:4d:76:69:09:a0:7d:5f:
93:70:34:f5:0a:85:cf:c8:be:66:24:25:94:5f:40:85:86:d6:
18:39:17:56:4f:e8:17:11:e1:e7:d5:db:18:6b:77:fd:a0:02:
90:66:22:37:50:6f:ea:b1:2a:3a:04:34:0f:79:c0:9d:2b:f1:
5b:97:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:07 2026 by rpki-client