Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier: k9pfRuXm/ka2T2rMB6A8ltu9MKs7XPb21dRH3PMHd3Y=
Subject key identifier: 50:1B:77:66:AC:0F:BF:14:5C:CB:28:CC:3B:A1:63:51:DB:DD:30:1C
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 019CAA58552FF7B34328279CCB24EA3DBDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: hi+yiSB+20bx6M+Rv0CZD/BimDSQq9bBdX6KtyLFiOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:55:2f:f7:b3:43:28:27:9c:cb:24:ea:3d:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=501b7766ac0fbf145ccb28cc3ba16351dbdd301c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:a3:55:5a:d9:76:b6:71:43:91:9b:f2:05:
0e:8e:31:ce:62:fc:b5:b4:34:ab:74:66:57:84:de:
4b:88:eb:f7:6f:f2:4e:ef:c4:65:85:f4:c0:3b:63:
73:0d:a3:6f:55:98:e9:ec:7e:4d:90:72:30:b9:7b:
8a:41:9b:20:52:92:2c:d0:e2:01:78:05:e7:6b:88:
fa:fb:63:1c:36:e7:ce:85:2b:60:ba:9b:21:8f:ec:
a4:b7:20:ad:18:26:ec:bd:e8:e6:1d:88:97:e6:d1:
e1:b0:4e:3d:19:d7:f4:97:bc:2f:ce:45:98:96:fd:
58:71:29:3f:ca:38:93:5a:46:a6:2f:87:24:2b:cc:
64:2a:eb:39:00:10:81:2c:c7:26:07:dc:3e:e9:c7:
77:0a:15:ae:ee:31:2e:c3:fc:8a:ce:c8:0d:32:d4:
b5:4b:92:ad:33:6f:9d:9f:d9:f9:8b:e1:cb:cc:db:
3c:02:7d:6c:d3:89:b4:d0:81:c3:00:a5:3c:86:c6:
87:3b:21:7b:f1:ee:b8:4e:d9:9a:27:4d:28:61:ef:
85:33:59:fb:b6:3d:07:da:f6:a8:33:24:61:38:26:
f3:bb:0f:63:ab:9c:4e:2f:ad:db:fc:3e:cc:56:d1:
dd:a9:c7:17:05:92:8b:ee:5f:1e:a1:19:a5:da:78:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:77:66:AC:0F:BF:14:5C:CB:28:CC:3B:A1:63:51:DB:DD:30:1C
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9d:20:12:83:4e:34:b8:42:52:9c:a4:fc:14:6b:ad:3f:0d:
6b:50:c7:0e:a0:7f:35:89:81:57:c9:40:d2:ce:81:8e:b1:af:
81:82:29:c7:3b:88:36:04:bb:2b:81:2e:e0:4f:60:4d:dc:71:
07:83:71:10:f3:40:4b:62:ce:a0:c6:e7:01:9a:9a:91:59:31:
ef:45:22:c5:a9:99:8f:04:e3:14:04:6e:33:5a:85:56:e9:c5:
68:7b:6e:77:87:39:7c:0e:f6:87:5a:22:df:9e:bd:4d:b0:0b:
54:69:34:e4:a2:e0:32:09:f2:e9:c3:d6:6f:2f:01:8a:28:81:
5f:fa:c3:cf:66:2a:03:53:ac:c8:28:6d:1a:32:9e:b9:83:41:
ae:40:3d:ea:c4:6a:19:36:40:9c:d7:06:13:b3:31:14:20:e6:
c4:36:be:56:2a:35:70:8c:59:e1:93:16:fe:08:28:68:3a:a0:
e1:97:79:89:18:ad:dd:7c:8d:61:0c:3e:f4:54:96:bb:9e:eb:
c3:56:2a:aa:e6:0b:c3:56:ab:32:ae:93:6b:05:15:3e:29:3b:
ab:ae:29:55:02:89:25:19:42:29:d5:28:17:6b:61:e0:31:6c:
ad:7c:b3:84:01:43:37:4a:bb:4e:6f:a1:33:3a:df:b8:a7:ac:
02:d9:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:32 2026 by rpki-client