Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: Fkn/yD6TmcZuKAtSczD2Z58D02VGyzweudg7xydNw+M=
Subject key identifier: 68:03:66:9A:4F:F3:B0:A9:17:62:54:7B:90:07:95:A4:77:24:C7:15
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019D27E031321E9EE19AD84A035E5F9B16FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:37 +0000
Manifest this update: Thu 26 Mar 2026 02:01:37 +0000
Manifest next update: Fri 27 Mar 2026 02:01:37 +0000
Files and hashes: 1: Q9bW7DT8b-bilbM4okf2-4RumJ8.roa (hash: VGpo3RNyhjlbXzLjR04xOlVdZxQhemrEMPSoF4PPXPI=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: GwMYbn+/4DADjrDEYfc52iGW38bzGFPEBkzvTVfGHeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:31:32:1e:9e:e1:9a:d8:4a:03:5e:5f:9b:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Mar 26 02:01:37 2026 GMT
Not After : Mar 27 02:01:37 2026 GMT
Subject: CN=6803669a4ff3b0a91762547b900795a47724c715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:21:4b:7f:d6:ec:da:ee:fa:ed:ee:a7:4a:
a2:d1:8f:dc:07:ed:db:60:08:76:40:6d:d6:96:9a:
4d:1a:98:94:e3:73:9b:fc:14:4d:10:f9:ad:fc:27:
a6:6a:3c:18:6d:4e:c0:ab:90:ee:51:0e:96:a7:90:
18:b5:fd:bc:cf:ff:38:51:b9:72:c7:12:b9:e6:f9:
80:33:1e:3a:a4:81:40:ab:20:c8:60:db:77:ea:4e:
aa:2c:38:55:5e:b2:d7:6f:34:ef:40:32:c7:99:da:
94:77:bd:d6:db:83:fc:9f:3d:80:14:b3:a2:4f:34:
29:75:53:b0:e8:eb:a2:ef:79:09:f3:2c:08:88:bd:
66:8e:4e:ed:23:d8:c1:df:c6:11:5d:8c:9f:60:ec:
e7:35:e2:54:7f:06:47:f9:1b:c5:cf:bc:fc:98:aa:
f4:18:70:6c:77:70:8a:20:27:60:d2:a3:79:7d:5c:
c5:e4:24:79:d7:d5:29:77:c7:b3:46:ef:65:fb:88:
06:ae:89:2e:b9:be:c0:16:67:7e:3f:37:5b:7f:80:
0a:d4:8f:fc:81:b8:03:45:11:56:69:c3:30:23:e2:
7b:7f:f7:55:b1:9e:f3:29:6e:73:b3:ef:2d:9b:d6:
af:01:ac:77:08:70:20:0b:e2:17:49:29:23:2f:fb:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:66:9A:4F:F3:B0:A9:17:62:54:7B:90:07:95:A4:77:24:C7:15
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:10:0b:71:bb:6e:c7:a7:3b:44:e5:39:4e:c0:d5:7d:4c:4e:
79:f6:fb:54:87:b9:e6:9a:cc:81:9c:5f:0f:47:0f:4b:84:16:
58:aa:67:8e:ca:f1:bb:9f:33:71:aa:d6:c8:c3:68:df:d1:47:
49:da:bf:8a:6b:45:1c:84:27:ed:64:51:47:d4:2d:04:63:aa:
ab:05:e1:7c:21:7c:6c:34:a3:08:a9:9f:c9:1a:aa:8d:f5:95:
00:b6:30:e4:c9:bf:f0:1d:83:b9:5a:fa:19:21:4b:b4:8b:ed:
94:80:d1:fd:aa:29:a8:cf:9e:82:7c:27:2b:99:1a:e8:c7:14:
1a:6b:dc:71:5b:b1:f1:f7:9e:75:cc:ca:3d:75:b9:a7:2a:40:
3e:f3:1f:89:d8:ad:77:5f:66:67:2c:ff:e6:16:30:29:68:40:
55:1a:5b:5c:99:a3:42:14:4b:71:b4:33:3e:87:2a:49:d0:fc:
aa:e5:c2:2c:ae:94:b9:5f:0e:90:fd:1f:34:55:89:ae:be:69:
64:10:7c:5f:c2:3b:32:a8:93:a3:7c:c1:0d:aa:9d:cc:33:f4:
c8:48:bc:b5:d3:bf:10:10:79:d4:9c:a9:fc:03:9b:39:4f:86:
aa:bf:53:6b:48:3f:37:0c:3f:c6:a4:f6:4e:28:a3:9d:02:a2:
e0:55:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:31 2026 by rpki-client