Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: KnbdQszcHZb0Iy9NBhentKqx4rBCIKJMw5UPJFjQn9U=
Subject key identifier: 23:59:99:CC:07:99:7C:9D:55:44:6B:B6:55:D4:CC:CD:E5:94:5C:2C
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019CAA58A250B5BF1FFA90932902AB595EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 1582
Signing time: Sun 01 Mar 2026 17:01:01 +0000
Manifest this update: Sun 01 Mar 2026 17:01:01 +0000
Manifest next update: Mon 02 Mar 2026 17:01:01 +0000
Files and hashes: 1: GLWh56MMEykKTE4rrV87G9Vgki8.roa (hash: 02Z7LQfQNnw59BWb8xFGQ1xpLvcBlJFnepDp+x8RT7E=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: Pbz5f55pDXbnm/XjoXuDQ8Uds99Z9HMhq9epR//nMQY=)
3: w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa (hash: Rh0VsCvy2O3VBR0z+FrTOlGdPanimSzIyXLHmJJMba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a2:50:b5:bf:1f:fa:90:93:29:02:ab:59:5e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Mar 1 17:01:01 2026 GMT
Not After : Mar 2 17:01:01 2026 GMT
Subject: CN=235999cc07997c9d55446bb655d4cccde5945c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:4c:29:e8:d4:5a:21:bb:93:d5:63:b8:42:
57:5c:c4:89:77:f3:4b:e2:04:2c:05:05:57:be:e6:
8c:83:23:46:c3:9c:e1:90:22:aa:83:71:91:f7:bf:
71:9e:c5:93:87:37:53:a8:0a:9d:7b:3d:90:14:9b:
1f:80:b6:3e:08:00:66:38:56:19:a8:a0:3e:d3:0f:
f0:27:57:2e:36:68:11:bc:d6:ca:a8:20:81:78:7f:
e0:5c:34:b7:fa:af:84:d7:39:1c:1f:2c:74:ae:fd:
8b:88:aa:b6:cc:86:70:4b:2a:0b:ea:57:04:10:66:
23:7b:47:13:5e:0b:f5:5a:3a:e7:9e:72:54:37:22:
71:6e:e5:88:bf:72:95:78:00:d5:46:cc:df:75:c5:
41:88:2f:37:64:bb:3c:6f:f2:41:43:e2:2b:65:bc:
86:f5:16:51:19:3c:52:d4:c1:77:76:69:93:02:2f:
3d:5d:43:5f:c6:0a:6a:39:f1:8b:a0:3b:82:06:99:
87:f4:80:d1:0a:76:fc:bb:29:93:ea:1c:25:2a:ef:
16:7a:60:ba:fe:ff:d4:ec:54:d0:4f:8b:67:92:4f:
70:5b:e3:90:65:58:20:fa:14:a8:0b:88:1e:d8:3c:
d8:36:51:9b:21:49:d0:f8:57:04:46:d1:35:d6:d7:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:99:CC:07:99:7C:9D:55:44:6B:B6:55:D4:CC:CD:E5:94:5C:2C
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:9f:33:89:5c:31:d0:d8:0b:58:45:bc:50:95:5f:8d:17:
78:48:2b:2b:02:b7:7e:69:8b:d7:7f:d7:c9:53:5c:98:eb:13:
3c:bf:39:94:a7:72:51:a1:71:2d:6b:66:56:c4:15:12:e1:c4:
c0:2a:0a:d7:89:a7:28:f0:c9:28:0c:20:21:9e:77:0f:b6:d4:
2b:14:78:d8:a4:7d:d6:62:7e:f2:03:e6:93:44:0b:eb:77:db:
34:3f:93:fc:f7:3c:c8:9d:95:01:70:19:77:63:42:c5:e9:6d:
ce:09:af:0b:ab:60:a2:de:ae:b7:f8:fe:99:dd:ee:68:fb:40:
13:c2:50:65:0b:e5:74:72:db:3e:f3:c4:70:b7:92:6d:9f:33:
b3:0f:49:b8:30:07:50:3a:42:66:62:71:97:2a:c0:d3:1d:a5:
68:22:5e:a9:2c:64:e6:af:66:03:34:e5:ce:2d:a0:96:1a:7e:
18:cd:bd:b3:3d:ef:ec:89:f4:55:71:a4:5a:b6:82:37:38:8e:
19:2b:58:06:50:13:9a:76:04:74:2e:61:90:85:06:a0:8d:74:
32:6c:c7:f4:82:ab:87:17:16:75:24:c7:2b:bf:be:8a:4d:37:
85:7a:30:f1:50:19:37:38:a6:0c:b8:99:5e:f2:ed:77:25:e2:
cb:b9:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:07 2026 by rpki-client