Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: qKApJzZ0RuWrbNZH/cNiuUozZE7EBjNRV7bczS4nGcc=
Subject key identifier: 12:80:F8:AB:FE:36:7B:99:0E:0B:3C:7B:61:B3:2C:88:8E:5D:8E:CE
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019CAC4763E41CD5075508DC78089D47870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 085B
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: tifG/EmsBMS++rira5ZrqxlH7bJ4kXGDV04QU6L4zLw=)
2: q92f6dR-iX4C-CVcHHlSJfjRbjA.roa (hash: 5e9T1SkG/kIEUC1gZXSHnISGiuKNuBXnH3Nj4yFHRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:63:e4:1c:d5:07:55:08:dc:78:08:9d:47:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=1280f8abfe367b990e0b3c7b61b32c888e5d8ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:c3:fa:4e:bd:ab:b0:95:49:86:8b:ab:9b:
6f:92:08:28:52:72:e6:48:98:a1:25:d8:8a:f5:1d:
87:a9:1e:38:68:25:31:30:cd:66:e2:3e:a5:62:65:
ee:88:05:51:cd:fc:ae:66:4a:0d:73:5e:ca:ec:a4:
02:08:97:3b:b8:1e:50:8c:61:6b:ad:1c:72:54:2f:
57:23:01:3f:7f:b0:75:f3:39:f1:29:9d:3f:6e:d8:
54:37:fb:b1:5d:eb:a9:8a:b2:10:0e:68:40:0d:f7:
de:66:9f:a9:af:2c:25:00:98:34:61:68:cc:89:ad:
1d:f8:5e:bb:a4:af:3a:7f:73:68:e0:52:1d:23:b4:
5b:9d:4c:e9:53:02:9b:a4:17:a9:ee:ea:c9:0b:3b:
a7:b1:72:13:51:13:02:44:d6:8c:d2:cf:9c:2d:59:
a4:8c:3b:88:32:0a:00:99:4d:a0:f7:e8:23:11:4f:
b9:3a:98:71:ab:95:e3:de:63:6d:79:b7:62:97:a3:
d5:0b:68:37:4a:e6:02:be:ea:9d:2f:57:a3:c9:31:
e0:95:66:85:14:c5:f7:64:c9:43:40:44:a0:73:62:
62:6e:83:bf:cf:05:74:8e:8e:e5:1f:47:ab:36:12:
ab:50:16:be:52:0e:6a:58:d1:b2:e6:27:51:76:e3:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:80:F8:AB:FE:36:7B:99:0E:0B:3C:7B:61:B3:2C:88:8E:5D:8E:CE
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:ce:5c:bf:e8:6d:83:55:36:62:d6:d2:b5:57:19:a4:c7:
57:b0:ad:8d:45:d9:c4:42:3c:91:00:da:5b:79:0f:b6:06:90:
42:00:51:ce:07:3b:21:c1:c3:4a:42:33:db:38:ba:c2:9f:60:
6c:1e:f4:29:4d:3d:06:5f:ef:b3:31:a5:42:93:b2:f2:3c:00:
af:03:d7:16:25:b6:f2:91:ff:2a:a7:d5:98:88:ba:17:59:01:
79:b5:51:42:69:e9:04:c7:d4:54:05:a0:3a:ee:b2:9f:50:18:
7c:78:32:c3:af:25:cd:f3:15:83:0c:49:3a:ac:42:c3:cd:6f:
ba:58:06:4c:b1:0d:e5:55:c7:3f:7e:2c:80:51:8f:96:e7:92:
72:dd:46:8d:79:0e:c8:27:a1:ec:f6:68:00:b8:91:2a:ff:d4:
3e:23:28:b4:da:16:d6:15:3a:5c:d6:b0:7f:eb:ee:c4:e6:1c:
29:42:65:af:4f:69:4b:bf:6f:e8:38:b6:5b:6e:2c:09:f5:c3:
6e:6b:73:b8:e4:03:eb:32:67:d5:a0:65:38:45:7d:b6:3a:3f:
95:a1:9d:78:df:90:2a:59:e5:71:c0:3c:3b:24:2a:02:04:59:
34:b4:6a:aa:f6:8c:d4:4f:8b:5a:c2:bc:9e:d6:2e:d5:4b:1c:
d1:59:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:07 2026 by rpki-client