Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: yeEaJV50lOUe3DK3ZmwM5xmrgobRfGU1LkU6tiefjK0=
Subject key identifier: D7:DF:75:C6:2E:77:AE:F8:B9:31:7D:E3:D0:B7:E7:2F:F5:F1:D6:1E
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019CA8D8929A42DA654F9ADD0A5B811FB970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 11F7
Signing time: Sun 01 Mar 2026 10:01:31 +0000
Manifest this update: Sun 01 Mar 2026 10:01:31 +0000
Manifest next update: Mon 02 Mar 2026 10:01:31 +0000
Files and hashes: 1: 01gOHhB5_pWufFnmo1ikJr9FdBE.roa (hash: uIgQG2Hb8xSJ5sRya+P6SQmFDmY5GndAehICV6dLpVI=)
2: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: RoVhFJLfoKyyrM44QE7lMaYp3IhMobol/GSSdofy6OI=)
3: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
8: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:92:9a:42:da:65:4f:9a:dd:0a:5b:81:1f:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Mar 1 10:01:31 2026 GMT
Not After : Mar 2 10:01:31 2026 GMT
Subject: CN=d7df75c62e77aef8b9317de3d0b7e72ff5f1d61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:52:3c:75:cc:cf:27:e8:b5:34:fa:c5:74:
8e:24:42:ec:75:a7:fe:1a:a2:31:a9:ff:f5:4c:42:
2c:5c:e4:84:6d:6a:8a:ac:84:45:93:f3:e9:05:c5:
e6:5a:4b:f8:5c:ea:ff:70:57:4b:29:3a:b6:15:f6:
d5:72:e0:c1:75:2b:f6:3d:4a:a7:60:66:dc:bc:1f:
44:a4:68:4d:59:16:6b:46:71:8c:12:ff:ae:ea:92:
02:65:72:36:bb:84:10:0f:09:44:42:48:2b:2a:58:
58:3e:12:d6:bd:33:bd:a7:7a:20:ea:4b:45:40:22:
0b:20:e0:08:df:28:a2:cb:45:97:cb:f1:07:f1:99:
72:f6:a9:cb:9e:6e:0a:54:e6:2d:d0:23:c3:9d:9d:
20:c9:dd:4e:78:db:92:1e:7d:0e:29:bb:86:76:7b:
18:82:f0:a7:33:db:d7:d1:73:0e:2f:96:a8:99:98:
29:fc:af:5c:0c:47:a1:47:ed:e7:e7:d2:8f:2b:ac:
f4:2a:87:49:60:52:ef:2b:71:85:18:54:61:e4:de:
1b:71:fa:9f:09:06:6b:1b:f6:af:f6:c8:7b:3b:6f:
14:01:69:e6:f4:59:82:ea:81:fe:5c:0a:23:bd:60:
4b:00:6a:bc:ab:9e:dd:a4:b8:0c:49:0e:27:c1:83:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:75:C6:2E:77:AE:F8:B9:31:7D:E3:D0:B7:E7:2F:F5:F1:D6:1E
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:a7:da:d1:4f:dd:c3:5a:b8:93:fa:4f:64:79:88:03:59:
ed:07:4a:25:24:b6:8f:00:49:5a:ad:b5:92:bf:0b:6a:b4:ef:
ba:56:40:18:e8:4e:96:27:f5:d4:4e:ee:73:49:dd:c0:9b:c7:
88:95:22:e8:c3:e9:9b:01:e1:0e:8a:68:82:a9:e0:0f:f6:9b:
2e:be:4b:00:50:6f:e3:31:38:4d:61:f7:24:ac:c9:5d:c3:f1:
ef:e4:e1:9c:b0:9d:24:c7:e4:ff:93:d1:0e:7c:b7:06:ca:ea:
77:f3:47:68:15:02:05:d5:d9:38:9d:da:ea:2e:90:d0:10:dc:
eb:a0:44:71:b2:32:87:18:d4:8e:66:59:49:7c:6c:6b:d6:c2:
0b:2c:08:30:dd:a2:0c:66:55:fc:92:43:8b:22:1b:03:0f:2b:
56:e7:9b:e6:32:94:14:eb:96:7a:08:34:d3:7c:68:7f:bc:ed:
9f:46:01:76:2b:3f:20:83:82:5b:e9:16:95:ec:0e:12:5f:bc:
e6:9c:e9:4c:78:bb:31:d8:79:a0:08:79:01:43:e8:c4:90:15:
e5:0b:19:f3:c8:07:a6:94:14:24:13:fb:f6:e3:47:f7:30:f0:
9c:0c:c2:a4:cc:33:1b:50:7d:93:3a:fa:0c:ff:e5:47:dc:6a:
5d:33:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:54 2026 by rpki-client