
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: cffwVRPYBDK/xU7EuJLnNUMjiiqMuficGEIiMo7z8Kg=
Subject key identifier: A1:1D:A9:9B:B1:BE:C9:9F:80:87:12:B6:09:A3:22:2F:FF:A7:49:BD
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 019E1E352B96005D145B158D1D0657C19E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 22:01:01 +0000
Manifest this update: Tue 12 May 2026 22:01:01 +0000
Manifest next update: Wed 13 May 2026 22:01:01 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: ktBJkCuaoV5GM83ndS54jT+9HR5Sc0bDcxobTwkBUeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:2b:96:00:5d:14:5b:15:8d:1d:06:57:c1:9e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: May 12 22:01:01 2026 GMT
Not After : May 13 22:01:01 2026 GMT
Subject: CN=a11da99bb1bec99f808712b609a3222fffa749bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:2f:af:56:ae:c9:a3:6d:70:7b:41:83:c7:
83:bc:32:64:5c:23:36:19:fa:bb:f2:e2:be:18:27:
8e:ae:ae:97:27:3b:d5:c2:0d:a3:4c:27:b7:bd:d9:
bc:e5:0e:05:b8:7f:31:e7:8a:f8:d6:25:d9:9b:6e:
02:e4:39:e0:1a:14:f6:6d:7d:b1:fb:4f:07:b7:94:
ce:cd:ff:8c:6d:7e:6e:92:fc:33:c8:23:2b:d4:54:
86:9d:93:8f:f9:cb:f4:19:bf:49:0d:6f:60:1a:c4:
d1:95:5c:95:27:10:55:76:02:36:f5:9c:d3:58:98:
5b:52:02:c6:f2:fd:8a:04:59:76:0f:9f:d0:0e:fa:
c0:95:b4:e4:88:15:05:6c:87:7f:fe:ed:f1:73:e0:
7e:d8:80:0b:7a:68:60:01:b0:46:0c:40:51:68:fc:
3a:73:73:47:07:f3:a9:57:11:3c:9c:74:8c:07:43:
1b:a0:b5:65:45:ee:d8:23:16:6f:a9:2f:fc:84:2f:
df:39:63:f5:70:93:26:39:2b:c5:27:f3:f4:5a:bf:
c3:1c:d3:da:a5:70:54:28:46:33:1f:77:c9:86:14:
2e:ef:24:ce:f9:a5:de:e6:4c:22:a4:95:61:58:5a:
2b:9d:b2:54:cc:cc:16:65:67:4d:d0:b2:7b:29:43:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1D:A9:9B:B1:BE:C9:9F:80:87:12:B6:09:A3:22:2F:FF:A7:49:BD
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:c1:bf:8c:05:ac:b9:02:70:fd:3b:7c:6a:1c:3b:24:04:
cf:c6:f9:b2:51:66:b0:e8:d1:11:24:61:36:eb:5c:8c:ed:5b:
4b:c0:2c:57:49:f7:82:de:98:2e:8f:5d:6b:9e:93:6f:69:db:
08:47:3f:59:35:60:af:51:4e:ac:3b:23:8e:e3:a1:f8:81:79:
66:fa:a2:10:8b:12:9c:a2:ac:94:ae:65:2e:ec:47:f8:a5:0c:
5a:65:b8:fe:89:f4:c0:6b:d4:f0:ee:a3:d4:fc:3d:ef:f4:8c:
17:d6:a6:3c:f5:b3:5d:2e:f8:94:5e:6b:1d:64:b5:6a:77:a1:
82:9f:4f:8f:cc:47:e8:7b:dd:cf:c2:6b:61:97:da:ee:a0:14:
8c:56:11:b7:9f:d9:9d:7b:e4:87:ec:09:6e:1b:fa:63:98:98:
d1:0a:e0:5a:55:4f:be:9f:fb:91:43:63:a5:69:58:d1:b7:ef:
8c:2f:86:62:ee:bc:18:5d:5e:45:91:a4:78:43:c9:5b:69:06:
32:4e:e2:6d:69:7a:8d:e8:b6:c3:85:cd:b0:ef:0d:86:59:60:
1a:f8:46:e0:61:a7:42:00:b4:fa:d8:e8:2b:5a:4f:b5:02:0f:
08:cb:1e:af:7f:69:63:37:f3:1c:2b:58:1f:5c:d2:1e:9b:81:
1d:2c:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:49 2026 by rpki-client