Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: YyKKreXuKoNTKWSFw4zZLUwUmxCuTKfuvksoR15E3wM=
Subject key identifier: 14:2F:06:46:63:B2:86:58:50:DE:87:BA:15:49:56:9B:E0:E7:68:98
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019D258380C6B3C6C115219EC1B79AF383E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: AOsYF79xJ6mwpSoq_CsTPxIhIUc.roa (hash: eHh19EYVK7Y6kkFMfVMowI7crTkOBt+ZcdNlnXxLe2I=)
3: Lc1jl7QVxqLwMWxBrIVxsneb__U.roa (hash: E1vTmbk4SrydL0KXJtJee0AsNy8nI/ShD3+SVqKy/u4=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: osdMbawXeICawDg+Zbe/RcaWFIivUuobnlaWvUjhMRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:80:c6:b3:c6:c1:15:21:9e:c1:b7:9a:f3:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=142f064663b2865850de87ba1549569be0e76898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:b0:00:76:a9:41:0a:97:c4:38:f6:f6:d7:
07:73:4c:f0:fc:cc:36:61:6d:85:ba:ed:04:0d:ab:
93:15:cc:31:c1:10:61:5d:86:47:99:6f:86:57:9e:
a2:47:4b:e9:53:d5:41:4c:27:20:43:2b:11:72:22:
d1:c6:a7:be:43:94:2a:02:1e:dc:13:86:c4:60:1f:
37:78:e9:17:ed:db:46:56:c2:f6:b4:cb:56:00:2b:
5c:47:f4:fd:81:5b:73:9e:8e:cc:c5:71:83:75:f0:
26:bb:5d:bf:18:3c:b9:19:95:41:fc:47:91:16:18:
88:5e:7f:0e:5c:80:c0:9b:89:a1:ec:98:93:d5:44:
19:e8:08:15:cb:76:f5:22:34:96:c4:e5:2f:6f:23:
2e:53:2d:f4:ce:6e:ca:ca:02:d1:80:7b:1e:5f:be:
07:51:55:8a:88:92:93:d3:34:37:f5:6c:c8:52:9a:
6a:10:77:e6:70:ea:a5:2f:01:a1:7e:ab:c1:2c:e5:
bd:e3:e8:3a:f4:e0:dc:3b:9d:e0:62:6a:3d:9c:55:
6a:f3:f8:b1:2b:fc:71:e2:34:00:98:e3:ea:44:fe:
ee:c8:4c:21:f3:e2:0a:f0:72:c4:94:eb:4f:37:97:
f9:0c:7c:0c:86:9a:5b:cd:52:cc:39:35:8d:cb:08:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2F:06:46:63:B2:86:58:50:DE:87:BA:15:49:56:9B:E0:E7:68:98
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8e:6f:5d:dc:2e:68:16:35:bf:08:55:6a:98:a8:62:1c:8c:
ca:ff:9a:8a:b6:f8:9e:fd:7f:23:13:8b:ce:22:72:22:c5:30:
eb:8b:e4:56:c8:81:55:8e:7c:cf:7e:b8:b8:14:6e:45:d6:17:
4c:b6:34:e9:38:a4:cc:41:76:02:ed:59:9f:0b:ee:44:46:2b:
26:ae:e7:dd:d5:da:76:f8:c7:01:7c:64:1b:f6:a7:5b:8c:29:
7f:e0:e2:ff:ac:56:71:b5:0c:0d:21:68:7b:55:68:4d:dd:2a:
22:cd:44:54:a1:cd:e5:8f:a3:be:68:67:ff:73:ab:5c:ea:43:
50:67:5c:5c:96:96:b9:ba:88:75:8d:3b:dc:91:c6:d4:0c:07:
26:8c:1b:f7:e0:cb:1b:22:43:c2:c5:ae:82:c5:51:f0:35:07:
0f:a6:b0:35:42:54:d8:f4:77:f1:a9:4c:ca:89:c3:f6:93:72:
5c:06:d6:8c:e4:c8:f7:16:5f:8b:84:2b:92:33:f9:d3:74:31:
7e:e4:f4:35:ef:0d:47:c2:62:b4:03:ac:9a:fa:c4:8c:ab:2d:
50:cc:6c:a7:84:e2:1b:91:a3:2b:9a:91:fa:55:0c:a6:ca:ea:
3a:31:43:bc:24:dd:3a:c8:70:49:b6:4e:80:50:71:8d:4e:7d:
e9:41:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:42 2026 by rpki-client