Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: MiDM/W78JVmjSbw7i39I9HQM9ogTr4KrB6FK+9HhjyE=
Subject key identifier: 50:46:E3:C3:BF:59:7A:78:BE:13:F8:AA:12:FE:42:F3:E4:A7:B9:FA
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019D273A9EC1A841D3888B70D465D00140A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0EB9
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: hJ4GPBdx6T72S1YvofsQ6nwvrCc2WJj4AD22tJn/TLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9e:c1:a8:41:d3:88:8b:70:d4:65:d0:01:40:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=5046e3c3bf597a78be13f8aa12fe42f3e4a7b9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:ab:0c:72:41:05:64:ae:70:74:aa:b9:05:
97:6c:eb:64:e9:2b:aa:c5:3c:89:a8:58:59:58:f8:
91:ca:85:3f:80:73:03:47:d8:74:e5:50:80:86:cc:
55:37:03:87:ba:88:4b:21:b7:56:46:c7:e0:71:b1:
f7:10:59:48:9b:c0:5c:aa:ca:e8:22:6c:06:3b:6b:
ea:e5:d9:93:4a:35:4d:f5:2a:31:9b:69:0f:be:d6:
08:11:82:c8:a9:fd:7d:be:5a:10:f2:b5:90:f7:7d:
b2:50:b6:d2:a5:07:8f:98:50:ab:b9:2c:11:d2:b9:
35:9d:07:47:e6:d3:3a:d2:cc:1b:38:36:d1:e1:e1:
a8:cb:db:b9:f4:cc:86:8f:cc:c1:fb:16:75:30:a2:
7a:e8:9c:57:bb:3c:d4:e1:fc:f8:8c:b5:25:37:4d:
f7:72:3d:b3:34:9b:62:a3:62:de:dc:b4:7f:76:98:
41:4b:92:60:02:75:5f:80:ad:40:d3:97:ff:f6:76:
cf:fb:27:44:31:c9:5b:84:14:a0:4d:be:eb:3f:01:
ad:14:86:6a:2f:99:6f:d6:ea:56:19:72:63:7d:08:
d0:1f:a0:00:ab:98:98:02:d1:93:02:6b:96:f3:a4:
6d:5c:87:1c:46:b3:ab:01:90:67:ff:23:93:e1:15:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:E3:C3:BF:59:7A:78:BE:13:F8:AA:12:FE:42:F3:E4:A7:B9:FA
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:3c:3b:27:5e:1c:80:dc:99:12:8d:a4:58:b3:c2:d2:dc:
3c:fe:b4:05:2f:db:9e:8a:a0:1b:52:fb:be:f4:7f:ba:b8:c1:
96:b0:4e:38:a2:61:a2:9d:8d:6a:95:9f:f2:a7:ad:f4:b9:55:
59:3f:09:5f:bb:dd:97:09:93:c2:b5:07:92:4e:92:da:f0:4f:
b7:2a:bf:a2:d2:9c:dc:7f:a5:2b:55:ea:95:a2:32:28:b6:be:
ba:85:9a:93:79:17:69:24:30:d7:db:a3:04:28:06:60:e6:4c:
ee:2a:5d:f0:1a:e7:b1:d8:51:f4:bc:6f:84:7c:be:c1:7b:08:
18:81:8a:6f:f0:27:2f:02:b9:99:15:fe:25:10:2a:c2:6f:05:
e7:8e:db:d2:4e:95:66:77:15:73:7e:2f:1b:95:24:87:3d:ce:
a9:fa:9e:81:81:2f:86:81:86:6a:07:ae:f0:67:a4:81:6b:24:
f0:6e:e6:7e:d4:d2:02:9a:6e:25:e1:3b:57:14:0a:c7:7f:9f:
11:63:4e:b8:d4:98:98:60:8e:73:55:3d:84:ac:90:29:82:92:
79:5d:75:a8:68:52:51:d2:47:d1:70:68:6e:31:d7:6f:1e:7c:
92:93:97:c6:1f:5c:a6:5d:01:81:2e:5b:b6:e8:ee:c7:8e:6e:
7d:3b:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:41 2026 by rpki-client