Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: yRQSUl48WI/XNvmLpnYzXSTi4LjMNOKiTtNYtbwh+YI=
Subject key identifier: E5:35:D2:7C:B0:54:05:33:77:8D:3E:6C:46:32:C2:35:AA:F1:CA:0A
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019CAD229691C1798584DD47F2C012CDA6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 17EB
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: 64PPoR5GtznikRg+3Ho/8noAaCqLWj+cIsyfoX0TZyQ=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:96:91:c1:79:85:84:dd:47:f2:c0:12:cd:a6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=e535d27cb0540533778d3e6c4632c235aaf1ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:f1:cf:dc:b6:48:4f:42:39:d2:9b:7c:51:
e8:3c:fe:c7:94:6f:4f:0d:45:92:db:06:b6:1c:01:
d5:c0:62:20:8e:08:76:33:fa:77:cb:a2:fb:9a:40:
a8:3f:75:dc:fd:e9:d5:10:63:cf:04:b3:63:84:95:
66:e4:17:33:5a:99:e9:60:1a:d8:0c:ad:05:07:35:
ca:0c:c1:c1:ad:44:83:75:5a:39:e1:6b:22:ad:2c:
2c:e4:5d:7e:83:d8:fa:39:d4:3f:17:60:6c:eb:3c:
50:8d:27:85:50:86:d3:8f:43:8a:10:1b:c6:d7:2b:
1e:b7:de:7c:46:91:23:49:63:80:0a:95:68:d5:47:
b3:0d:21:41:15:71:f2:a8:e1:76:42:07:be:75:00:
b0:0f:bc:2b:34:6b:bd:96:d2:32:29:50:0e:af:32:
62:35:8b:c8:39:f1:da:33:28:51:81:89:b3:23:7f:
2a:fb:09:21:c4:a3:b4:2f:b2:f4:ee:b2:60:13:50:
ed:36:1c:23:0a:ba:0a:cc:05:f6:ef:3e:9c:6e:38:
85:0d:21:50:be:84:41:e1:ff:db:a3:41:fe:c7:7a:
25:f0:44:31:cb:b8:4c:7a:a3:88:51:a8:25:e7:5b:
08:b6:ef:14:b0:fa:d8:86:10:7c:cf:9b:09:a8:de:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:D2:7C:B0:54:05:33:77:8D:3E:6C:46:32:C2:35:AA:F1:CA:0A
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f5:d4:5d:4b:08:84:0a:a5:bc:73:b9:86:b2:64:e9:a4:1d:
c2:29:60:90:bf:1f:19:f9:89:41:cb:a1:28:60:7b:39:8c:27:
3b:d6:74:18:91:1e:1d:f5:48:e4:71:87:d8:88:b6:1e:5e:59:
7e:51:32:4a:63:b5:75:bb:82:d3:da:5c:9b:94:ed:ee:cd:0a:
50:e2:cb:ba:b2:20:ff:a4:50:a7:1e:9d:95:1f:04:1e:35:82:
c4:0d:25:0e:be:23:4a:37:02:d2:69:e9:a8:51:04:cb:fc:9c:
b8:22:1c:66:f8:3e:d4:ab:23:d9:03:64:27:73:e6:24:f3:53:
a1:f0:32:97:e8:3d:46:4a:e1:1b:b1:31:2c:db:70:f3:cf:bb:
48:fa:86:9d:97:fb:c5:b2:35:b7:9b:ef:16:94:5b:cd:c2:de:
13:be:38:28:70:ac:31:91:d6:7b:13:ba:0b:d7:3b:9e:f5:39:
47:1d:2a:4b:17:ca:6d:aa:99:57:f2:ed:22:1d:c7:ab:96:cc:
0f:95:b6:ef:b7:29:38:b5:d8:77:b2:5d:7b:9a:a7:69:84:a7:
db:07:53:e9:1f:92:74:fd:25:36:20:0b:a9:e3:27:3d:05:b8:
00:7b:5c:12:e4:6c:94:b5:b3:47:a7:7c:ce:4e:d6:a8:8e:18:
60:49:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:12 2026 by rpki-client