Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: 7cXc8pwFjPu8ELd28aNbjFDfFwyf335L46OrJzfN+xA=
Subject key identifier: A7:B6:74:10:0D:8A:58:E3:61:C1:4C:09:11:AE:8F:03:AA:3D:50:DB
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 019CA9EAE0CCEF4FE3AD10A79B70114A0A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:01:08 +0000
Manifest this update: Sun 01 Mar 2026 15:01:08 +0000
Manifest next update: Mon 02 Mar 2026 15:01:08 +0000
Files and hashes: 1: OLNyTBFLB0GRgG6WCzbXR7UvRrA.roa (hash: I/YlyloEBTVluHRzMYW18o3EO4jxYYroq7F9Zg2Jggo=)
2: fCBNQoZpXWRf7HiESYlfI6ubNuI.roa (hash: Xi95Rj4tFLGoeBm6XrdM9ofNJV6OvWlEYiGW/UAuLU4=)
3: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: 0TztkEQhgzpVcn/MB4W0SblW4RspPrHvVlUlLC2Unis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e0:cc:ef:4f:e3:ad:10:a7:9b:70:11:4a:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Mar 1 15:01:08 2026 GMT
Not After : Mar 2 15:01:08 2026 GMT
Subject: CN=a7b674100d8a58e361c14c0911ae8f03aa3d50db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:1f:62:6c:07:d9:6b:bf:a9:08:2d:0e:50:
5c:91:3b:6b:1c:1b:83:94:0b:3b:42:32:2e:77:89:
7d:ca:d4:86:51:e8:7b:db:ec:a5:51:a8:70:e8:84:
ae:5c:76:3d:a1:0d:4f:35:90:6f:2e:75:40:4f:21:
ac:ce:20:31:17:35:67:ba:b8:4d:bf:b2:80:1f:5f:
6c:88:43:97:22:ff:18:df:46:e8:5a:86:00:60:a7:
0c:91:30:3a:4d:45:58:16:37:12:47:6e:13:24:0d:
0e:4b:08:28:5f:94:0b:ac:0f:46:fb:8b:fd:88:24:
b6:a4:e4:fa:c1:3d:6b:c3:a3:bc:3d:d2:3c:fa:f8:
53:2a:e5:0b:54:e1:fb:43:e4:8c:2b:d0:d5:33:b4:
3d:aa:1a:a1:87:f0:e1:f2:61:ab:fc:e4:4b:65:69:
6e:11:77:75:27:95:3f:7b:20:a6:8c:a4:20:60:15:
fc:80:fc:09:dd:b9:f1:61:20:ac:25:62:c7:84:cb:
21:3c:43:69:98:5f:ec:c3:ac:7d:42:5e:33:36:28:
f0:97:48:2b:88:85:12:e6:d1:d4:12:bb:c8:c2:c3:
0c:6d:b5:c7:2e:f2:77:08:ed:34:80:6b:a5:fa:06:
22:4a:6b:6c:3c:10:49:22:ea:ee:80:36:ca:5a:79:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:74:10:0D:8A:58:E3:61:C1:4C:09:11:AE:8F:03:AA:3D:50:DB
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e1:c0:0e:be:02:27:41:43:a6:e8:42:7c:76:1b:9b:b0:aa:
12:4f:03:87:18:ba:cd:53:f1:18:61:6a:e7:96:8e:68:ff:41:
39:ce:2a:aa:0b:6b:43:c7:3e:46:aa:82:93:76:5b:71:b5:51:
93:be:ab:e7:ee:af:23:77:d8:df:b6:df:7a:0e:fb:04:6a:f0:
93:c3:00:5f:fe:8d:6f:47:9c:18:c5:9e:eb:19:3a:86:40:a3:
43:fe:51:c8:85:0d:ee:fd:47:7f:c6:60:4a:a1:ae:48:54:0e:
a4:77:73:ad:62:05:17:7a:04:6d:86:96:b6:98:52:c4:b9:2b:
4b:7d:31:37:f9:31:4a:b5:07:ba:a0:f5:6f:c5:c2:ec:1e:bc:
94:bf:a2:cc:bd:4d:81:8a:d9:02:51:6e:d5:ba:92:83:ee:2c:
be:1f:88:75:13:50:a8:6e:5b:a9:ae:b4:28:31:63:da:ef:60:
9a:ea:90:a3:38:7b:65:ea:04:bf:86:ce:7c:9f:26:e6:ba:35:
db:70:66:42:97:cf:09:13:72:33:cc:46:6b:3a:46:a0:fe:a9:
f4:23:f3:9b:8b:f0:00:a3:72:bc:9d:c0:af:4b:ff:39:47:3f:
3a:3a:df:da:03:aa:ed:94:59:63:82:70:db:f9:99:47:ef:ee:
21:7b:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:19 2026 by rpki-client