Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: Hs8NdHjnVJeJ3WSNcnWsaDsZq/3ZCbRlkQ/sMmeIw3k=
Subject key identifier: 9B:87:CA:E2:93:86:0A:6F:4C:6F:CF:7B:AB:19:1F:44:36:D9:68:BD
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 019CAB6BA38F1AD8F32601A300DC797E2670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 116F
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: 33dtqLxDvjVwskcvs1eBKxG9qW0.roa (hash: v3Uvvd01xCxk2zOvIWKmnmyUBgwjXDORZn0oG3d1w0A=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: Z5Ti65pVGEtvWPRf5PTwu947hDKO3XzC6sGP1IoBic0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a3:8f:1a:d8:f3:26:01:a3:00:dc:79:7e:26:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=9b87cae293860a6f4c6fcf7bab191f4436d968bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:e3:93:4d:77:f2:ad:99:7e:78:8a:a4:f3:
a1:81:14:05:9c:70:a6:6e:24:ff:89:ae:34:62:d3:
9e:9d:4d:90:a2:56:31:a4:a5:ad:14:fc:e6:88:1f:
38:d2:60:97:5d:34:d3:48:e2:59:fa:9c:e8:5b:e0:
9a:a0:51:f1:3b:a0:cd:7c:35:26:fb:b6:87:e0:86:
a0:6f:6d:b3:0f:39:34:43:c9:d1:03:bc:d2:01:91:
86:02:26:c4:4e:2e:e4:5f:00:c5:36:69:f1:9d:05:
9b:5e:76:82:d3:4d:14:e1:15:f2:eb:c6:ee:2b:ab:
fe:25:40:7c:55:28:b6:73:fd:bc:53:4d:7e:5a:14:
1b:f1:53:9f:f7:cc:dc:1b:86:74:d3:a5:80:8d:7d:
dd:33:a3:5b:bb:11:e8:ab:a4:04:50:6e:db:65:7d:
76:04:95:d9:29:46:2a:c6:53:6e:e9:4f:9e:51:1e:
22:ef:05:e8:3e:46:9e:65:3a:24:27:6b:8b:c2:b1:
43:2a:80:17:ae:97:cc:22:f8:77:8c:e9:ed:73:f4:
85:13:5b:00:92:01:19:72:34:c4:fb:29:8f:3b:db:
0f:3b:e1:03:2f:32:10:85:e5:43:e5:fa:77:23:8a:
28:dc:31:6c:4b:fe:7a:fd:e1:f7:72:97:91:44:4e:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:CA:E2:93:86:0A:6F:4C:6F:CF:7B:AB:19:1F:44:36:D9:68:BD
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8b:3b:0f:bc:6b:4a:4c:fb:2c:b9:95:e1:0e:e5:7f:16:47:
20:7d:91:88:20:54:4e:97:da:72:fa:ce:41:4a:c3:ed:8e:8f:
fc:9b:91:bd:ae:07:dd:ea:59:b3:ef:90:e2:5d:3a:80:0d:99:
d3:54:e3:01:86:2e:47:f6:fc:3d:71:20:3d:2e:cb:b9:ef:66:
a9:cd:93:4b:9e:0a:a3:9b:2f:80:6c:33:9d:46:41:20:00:a3:
cf:9b:ea:60:40:59:40:a6:52:a6:60:36:ae:3c:bd:d6:94:81:
53:96:33:d3:63:23:1d:5e:77:96:1a:6e:55:08:4c:46:93:9b:
51:67:5a:7c:fe:7b:a2:c0:c8:ad:23:69:cd:2b:59:93:3f:5b:
fe:cd:e8:18:0f:33:0f:e0:79:04:dd:64:87:10:b1:d0:a1:c3:
f5:90:8a:5f:b7:60:ae:cf:2e:a2:1e:93:b6:8d:20:ac:d1:7d:
c4:41:24:4f:1f:b2:e9:71:78:15:79:ed:41:0b:39:17:2e:9b:
e0:8c:b9:d6:7a:00:11:ac:73:7f:2f:47:f6:6f:07:41:80:71:
e1:ec:7a:00:be:23:a1:12:72:a0:6f:d7:df:57:13:01:25:d1:
2b:d8:75:cc:51:4c:55:f0:8d:80:b8:7a:ff:2e:8c:7b:9a:ec:
af:e8:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:28 2026 by rpki-client