Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: wQmtQefzqgI70QLZ6qwJZ9EJg0jApMZc+yH2pxHF8j8=
Subject key identifier: 43:0A:2C:79:74:BF:BD:30:F7:08:5F:07:EE:5D:12:7A:7F:6B:D8:13
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 019CABD991F1F715477AEA8AF4426C512149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:01:28 +0000
Manifest this update: Mon 02 Mar 2026 00:01:28 +0000
Manifest next update: Tue 03 Mar 2026 00:01:28 +0000
Files and hashes: 1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=)
2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=)
3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: 5y0Qplt9AilzHmt2ZOzxPP/RMKaHln+LdKiDiRtkFp8=)
4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:91:f1:f7:15:47:7a:ea:8a:f4:42:6c:51:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Mar 2 00:01:28 2026 GMT
Not After : Mar 3 00:01:28 2026 GMT
Subject: CN=430a2c7974bfbd30f7085f07ee5d127a7f6bd813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:2d:c3:40:6d:44:67:ab:11:16:df:fa:52:
b6:b0:71:f9:b5:e0:24:10:ee:28:f9:4d:0a:a0:20:
fd:f6:1f:cf:a6:18:3d:af:a3:88:88:a9:24:b9:20:
67:9f:ae:78:6a:e1:79:21:f4:3d:1b:73:5f:9a:30:
5f:c0:e9:bf:30:a6:99:57:ee:02:84:17:8a:51:d4:
5c:c4:29:1b:4a:3f:76:97:07:73:ec:a8:4a:55:0b:
77:36:e2:49:89:c0:52:40:87:ea:30:1e:fe:e6:7b:
e1:f0:4e:80:3c:bc:46:f3:64:5e:b8:21:6b:86:d7:
28:63:f6:eb:45:4c:fa:81:79:c6:11:25:78:74:07:
c7:c9:3f:89:f4:4b:47:e4:21:fb:f2:a8:86:e0:cb:
93:35:73:01:41:fb:ed:2c:6e:0a:12:95:7b:85:3f:
73:68:b7:08:63:60:2d:a2:cb:f2:98:24:f3:5c:20:
d3:c0:b5:ea:3d:37:83:db:91:ed:26:b9:94:af:60:
19:cc:8f:79:ce:9e:68:4e:07:9c:66:8c:af:b7:57:
ae:a4:7e:73:e7:e8:28:5c:c1:0f:1e:53:18:95:d5:
35:49:e2:3e:b9:e8:c9:5a:9c:19:18:13:17:09:41:
70:9a:62:87:5d:22:bb:53:1e:8c:e7:3f:6c:b4:30:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0A:2C:79:74:BF:BD:30:F7:08:5F:07:EE:5D:12:7A:7F:6B:D8:13
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:0b:dd:ac:5e:a3:43:2f:1c:a8:7d:9d:b8:bb:b0:fc:19:
ef:1c:84:e7:c4:56:48:ea:87:8b:79:d9:df:20:51:8b:7e:c9:
a8:29:9d:f7:6b:5f:72:d6:49:ce:95:75:de:1c:a4:9f:86:44:
fe:88:9f:58:77:1d:8c:b8:b6:13:4a:7f:85:e4:a9:74:a9:ea:
97:13:a8:05:e5:6b:33:e3:cc:9c:61:6d:15:0d:a0:00:59:98:
f3:67:76:4e:0b:84:b9:3e:00:1a:25:6b:61:db:4f:47:94:1b:
2e:5b:8c:ca:d3:62:e7:90:e0:29:11:18:6e:c5:e5:d7:76:27:
49:56:b3:0f:99:38:9c:34:17:ca:da:86:96:81:99:9e:89:a2:
6d:e3:d3:78:9f:07:5b:f8:30:36:e4:b4:94:b8:f2:a7:9e:15:
b9:52:e6:81:45:37:c0:0a:aa:ed:bb:45:eb:e2:b4:7e:44:ae:
70:e4:9a:60:ff:b8:7f:9a:b5:2a:2e:15:da:2f:fa:60:4a:54:
db:16:25:05:32:3a:d7:53:59:47:5e:08:09:6e:e3:b7:14:06:
64:66:a5:03:66:93:10:e5:a7:e0:fb:ff:a6:d3:1d:fd:c7:dd:
13:e2:5b:c3:a3:cb:7e:68:1a:c2:ec:55:eb:06:42:fb:06:03:
4c:dd:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:05 2026 by rpki-client