Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: w37pc22UEJ9/a98dxKM6LCJRbFIMf3gnd3NRZxY5mtk=
Subject key identifier: 67:38:9B:34:61:66:54:10:E4:95:FA:55:42:A6:61:65:E6:04:06:EB
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019CAA8FBC23D558E577C54210C42FC197B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 18:01:12 +0000
Manifest this update: Sun 01 Mar 2026 18:01:12 +0000
Manifest next update: Mon 02 Mar 2026 18:01:12 +0000
Files and hashes: 1: akc9_wpKRVu5T4K4pQEPp8eh010.roa (hash: hk9ZC+s74u1UzDAVrpc9pATxHP34acNqulMsrlGZ+pA=)
2: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: fksHz8wul0JanRn4toGmPfAF6FPehPPwiYUl3Q2/f2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:bc:23:d5:58:e5:77:c5:42:10:c4:2f:c1:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Mar 1 18:01:12 2026 GMT
Not After : Mar 2 18:01:12 2026 GMT
Subject: CN=67389b3461665410e495fa5542a66165e60406eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:1c:ac:c0:55:87:50:90:f2:42:41:18:f1:
b0:e6:be:aa:fb:6f:fa:b0:9c:57:f2:50:86:e0:54:
5e:a6:fd:ec:ec:3e:7e:44:45:bd:16:f0:31:b4:b6:
a0:f9:9c:be:ca:11:66:f7:c2:76:27:c6:eb:09:58:
c3:bd:22:3f:b1:fd:a3:41:23:8e:63:f9:39:75:ed:
15:e1:8c:0d:fe:9f:14:52:5c:e7:6d:02:a3:80:ff:
9d:85:fd:55:92:a0:ad:c3:59:a4:51:97:7b:52:1b:
05:33:47:90:79:d8:fb:b7:9e:7c:eb:a6:4b:34:f1:
a4:a1:a9:51:08:13:17:9c:d3:62:66:78:7a:79:82:
80:a0:91:8c:c1:c1:98:a2:de:29:e1:92:0e:e4:36:
dc:f0:2a:d6:1e:d9:aa:51:58:58:3d:04:ae:5f:80:
6c:fa:41:08:cd:aa:27:a9:85:da:0f:46:e3:5e:1d:
3d:19:bd:15:54:c8:b6:27:3a:d3:d9:31:8c:9d:a7:
3c:5c:76:7a:97:b6:2b:e1:ab:b7:dc:6b:f5:0b:32:
ef:25:ab:8e:af:df:08:02:c6:fc:7b:dc:24:c2:17:
5c:54:c2:81:d4:c7:06:ee:bf:72:8a:5d:38:92:9b:
b9:cc:13:49:96:9b:0c:92:8f:5b:f1:d1:e1:a9:77:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:9B:34:61:66:54:10:E4:95:FA:55:42:A6:61:65:E6:04:06:EB
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6a:9e:e0:c6:7d:84:b4:4f:76:a9:da:ee:68:98:be:28:76:
39:fb:43:61:e1:8a:ca:d7:9f:2c:a6:57:73:5d:d7:06:2a:5a:
ac:0b:00:ea:2a:22:8b:37:37:13:d0:02:de:34:8b:88:b3:fb:
de:68:1f:c4:05:32:f1:41:7d:4f:be:e2:9e:20:29:64:ff:02:
fd:1f:c9:fa:5b:7a:1d:9c:34:ec:72:fd:cc:c8:95:69:13:75:
eb:1f:5d:8d:ac:a2:fb:61:46:fa:a1:a3:b7:22:24:d8:4f:15:
ae:07:b9:83:bf:dc:78:e5:27:f1:85:6d:94:01:87:0e:d1:a9:
3f:ab:99:87:33:35:ef:f1:cb:00:3e:69:cc:3b:8e:ee:d2:1d:
e1:93:e3:a7:0a:d4:44:a9:86:2a:73:e9:27:8c:59:8e:1f:a9:
91:ba:11:ac:37:c9:8f:d0:7e:c6:c5:09:e9:62:b0:d7:54:b1:
c8:fd:bd:2c:d2:68:2e:88:60:76:b2:19:98:49:0e:c6:f5:3b:
58:b4:8c:de:b0:0b:76:da:62:27:69:f9:a9:d2:b3:ff:ae:f9:
79:d9:14:2a:ae:d8:b8:a5:10:fe:a2:87:2c:2f:5a:60:64:c6:
98:4f:db:48:57:82:79:5b:d7:da:ff:4b:f3:8b:26:52:d0:ac:
00:8c:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:28 2026 by rpki-client