Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: xdHepkqJu7ineXwK7DnPxGQA0vjjKsyfmzXrZ/stLA8=
Subject key identifier: 3E:A1:67:98:53:21:04:84:EC:8A:E2:53:05:AB:55:5F:D1:9D:42:B5
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 019CABD9B68EC26D763ED3DA74B3FC672AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0C54
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: iNVZmW4DvwndVdY/+zbFwX0Sknzho0IX/7ShIrC4IZg=)
2: nPnN-mV_c2-YF1lYIozKulfXb-I.roa (hash: Vt2SDSHBDDSYSW6xQWsdmfz8p7B5Lt8QbmhuE6bmJeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b6:8e:c2:6d:76:3e:d3:da:74:b3:fc:67:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=3ea1679853210484ec8ae25305ab555fd19d42b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:16:b1:1c:ab:43:46:21:98:11:e8:aa:63:
d1:96:61:0d:f0:ce:8b:a4:9a:ac:2a:1c:ee:73:bf:
e2:6f:17:09:68:11:a6:de:14:fb:a7:86:1d:91:ae:
a7:46:6a:f3:b5:95:30:ce:be:bf:21:de:64:07:9d:
32:be:19:88:1b:35:50:85:90:85:a8:c1:f2:68:57:
47:c1:cb:7f:50:0b:64:08:c2:6f:74:ed:2c:3a:c3:
4a:11:69:0d:19:47:14:d8:fd:a2:ac:97:b6:23:4b:
7b:bf:77:9f:b7:4f:2e:b0:a3:69:c3:a9:60:59:67:
b2:20:1c:05:bd:77:37:7a:a1:d9:4c:1d:47:52:a9:
b4:32:7a:93:b7:ed:53:48:fc:3c:12:ca:27:6c:57:
4c:77:94:e6:9e:69:d9:20:c1:a7:3e:47:0f:b5:af:
70:f5:30:96:c0:d4:84:85:45:c1:6f:50:fa:cb:eb:
23:8b:1d:6c:02:2b:dd:54:8d:55:39:b4:ec:29:23:
88:39:54:92:29:2b:57:50:4e:81:ce:67:a8:5f:b4:
48:a9:02:00:99:fa:2d:5b:13:ef:16:0d:92:c2:3e:
c5:63:7d:5e:87:06:8f:21:bc:05:0f:65:d5:74:9b:
f5:57:00:13:fd:2d:ea:eb:ef:b4:03:3a:c0:9f:d7:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:67:98:53:21:04:84:EC:8A:E2:53:05:AB:55:5F:D1:9D:42:B5
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:d2:33:8a:6d:5c:57:85:43:f8:70:a4:5c:2f:20:bd:2f:
34:99:e3:f0:fa:a4:6e:9a:54:03:42:d8:84:66:1b:2d:d1:8e:
0a:a3:3f:95:1f:6d:3c:e3:1f:99:3a:59:6d:ab:97:52:65:bf:
8d:5c:6b:1f:42:77:c5:1d:15:dc:84:41:66:a7:42:f1:ac:8f:
da:0d:f8:98:79:32:bb:c5:40:52:3e:85:68:d8:9e:86:69:ba:
e0:a4:8e:75:83:18:73:9b:8f:0f:45:05:32:a1:7b:7e:a8:de:
8d:3c:5b:5f:21:38:1b:89:9d:03:e5:9e:14:ea:df:fe:d2:0d:
96:3b:00:14:15:ff:a7:98:40:97:1d:bd:0e:f2:e4:ca:44:47:
15:5b:cc:02:0a:9a:b7:8f:35:8b:9e:16:11:4e:0c:9d:ae:3b:
c5:fc:9d:bb:c4:e9:64:5d:03:c6:c9:68:37:90:4a:b2:ac:61:
c2:70:4c:1f:af:8d:43:cf:bf:c2:da:23:24:d1:62:62:62:35:
0b:14:6f:e6:b7:8b:85:ce:61:06:1e:27:37:6e:ce:67:64:02:
75:0c:9c:fe:83:96:db:ec:32:73:e8:ef:7c:f2:c3:ff:a3:03:
62:f4:ff:be:d3:c4:32:8f:38:dd:f9:7f:94:6b:ca:cd:4b:50:
c2:e7:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:59 2026 by rpki-client