Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: /woHAQueO7ULGYxDvFHgYrXnQU+HCkwerHPUB2xtxzc=
Subject key identifier: D0:39:F9:C4:B1:F0:B5:34:4B:79:C7:5B:35:77:9B:AE:F7:64:18:58
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019D2703D1923FF8E84001572B1B52F79116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: 8xeJJ2JObKimB+7a2PleQ+ZvMiELmLtmm8QdS/vcjL0=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d1:92:3f:f8:e8:40:01:57:2b:1b:52:f7:91:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=d039f9c4b1f0b5344b79c75b35779baef7641858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:df:39:f5:16:f3:af:44:46:28:11:fc:73:
38:81:6f:6f:2d:88:78:61:c5:53:23:97:d1:db:d7:
1d:f4:57:c9:ab:3e:2a:a2:5b:b1:90:e7:a6:09:4d:
22:37:43:ee:ab:71:50:cb:88:4a:6d:13:6a:81:2c:
52:e1:76:4c:aa:71:5c:86:4f:30:74:89:94:53:28:
a6:d6:97:35:8b:f4:3c:1c:8d:9d:8d:7c:88:68:9a:
cd:fe:c0:fd:41:ff:e0:58:62:15:c1:f0:66:6e:f0:
65:0e:72:0b:7f:3b:94:dd:4f:cf:73:49:77:2f:a2:
f2:bf:59:e2:82:7f:27:4f:92:31:02:ad:ca:07:a3:
c4:e1:e3:31:51:5e:13:e6:9f:df:ee:3b:e9:ac:ec:
a2:5c:e4:03:24:ad:01:de:bb:b4:c3:91:6a:58:c9:
14:cc:7a:8d:b9:74:73:0a:7f:18:4f:19:1c:aa:16:
2b:07:cb:96:de:c5:88:cf:f1:22:60:b3:d1:26:ca:
9c:aa:8b:a4:62:58:aa:b7:82:12:69:3f:a6:b7:80:
23:d4:b0:00:23:6e:a0:88:02:07:80:a6:d4:6c:04:
5e:54:9b:1c:5d:c4:3d:22:57:cc:f9:7d:2b:f4:25:
79:90:63:37:bd:9b:26:52:ae:c3:0b:6d:44:47:e5:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:F9:C4:B1:F0:B5:34:4B:79:C7:5B:35:77:9B:AE:F7:64:18:58
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:d1:e1:69:88:05:86:3c:16:24:1f:16:cc:2e:5e:00:86:
dc:5d:50:60:fa:51:f9:82:6d:d2:f8:06:58:d8:7b:79:09:1b:
c5:2f:4a:bd:5c:9c:a8:6f:bc:d5:ee:96:44:be:07:ba:f0:e1:
52:62:b5:e6:80:33:28:0f:15:ca:f7:5b:46:19:68:fd:2e:ae:
92:ad:5c:86:a2:7e:8f:3a:88:8e:1f:0b:11:1f:22:91:e5:d5:
9f:06:76:e0:03:e6:bc:da:d5:9c:ea:aa:36:28:78:9f:03:80:
b5:52:ce:6e:94:4e:d5:e4:74:34:9a:db:d1:d2:28:56:f9:be:
59:17:fc:1f:c5:1b:af:b6:0e:f3:52:79:d2:76:4b:d7:49:3b:
a9:d9:38:92:b4:16:81:75:34:6b:5e:3b:f2:14:58:48:97:6e:
4e:f5:96:f0:75:d6:c0:0f:5e:cd:99:bf:d7:f5:38:55:9e:91:
08:b8:7e:cd:87:72:e1:e4:72:5c:ce:26:14:93:21:9c:0e:7c:
28:98:e2:35:fb:9d:e0:b9:d2:a8:e5:9e:3a:a8:35:e9:68:ed:
db:dd:bf:e4:c1:5b:05:1d:06:e9:2a:84:df:50:f7:9a:49:5a:
ff:7b:41:3b:af:b1:6f:b2:9b:03:f4:76:58:b3:12:e5:a1:4f:
02:42:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:21 2026 by rpki-client