Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: /lIdkjGTzJiRX4euF9r9+64VzWuM3CLNFHEPf7/cOWU=
Subject key identifier: 41:C7:15:82:DB:39:4C:DF:2E:CF:21:7B:75:71:6A:70:5D:4A:8D:2B
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 019CAEA3785315A0ED1AD66AE2DDF84408A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 13:01:14 +0000
Manifest this update: Mon 02 Mar 2026 13:01:14 +0000
Manifest next update: Tue 03 Mar 2026 13:01:14 +0000
Files and hashes: 1: DDF4rHCyTUZ_JMqtFhQdlljmwdA.roa (hash: Wq2lfDQVze8aM27jqQxiGGAz6kfK87E03BpeKAOD1OA=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: Ze7RK3gYOwBRZCiTDPgIqchIV5foWU48oguhTpWL8Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:78:53:15:a0:ed:1a:d6:6a:e2:dd:f8:44:08:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Mar 2 13:01:14 2026 GMT
Not After : Mar 3 13:01:14 2026 GMT
Subject: CN=41c71582db394cdf2ecf217b75716a705d4a8d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5e:0d:15:67:39:1d:62:97:d9:a8:31:2d:5b:
3d:7c:e0:d4:85:b9:d7:3a:52:57:77:5c:3f:05:d5:
10:f3:90:a0:fe:a7:eb:a1:ae:6c:27:57:69:da:a4:
39:3e:00:4c:19:e6:ef:3d:cb:64:da:47:00:a0:97:
d9:53:c7:56:ed:2a:7f:8c:4b:fd:bc:76:c2:c2:64:
98:2e:ba:63:df:c7:28:4b:f8:c0:4b:04:c5:82:e7:
c7:3e:46:64:d2:c4:c3:ea:d1:4c:e0:8e:7e:1f:40:
7b:4d:5b:cc:92:31:4d:00:14:d6:79:f2:2a:e1:10:
c4:81:78:21:66:1f:d6:8d:3d:86:53:49:d2:3a:04:
ce:0a:06:0d:a6:ff:0a:e2:e9:b3:33:b7:e5:b5:b4:
8a:91:cd:c4:86:d6:8a:8f:ed:97:93:98:d8:79:94:
5a:84:13:da:03:33:32:ee:1d:bf:be:77:93:76:12:
f7:b8:c9:7c:a0:00:e1:7b:38:22:b5:ae:18:c1:06:
e2:06:cf:dc:bd:58:92:ba:51:ef:35:d0:aa:c7:e6:
5f:5c:b1:68:9b:62:8f:e0:76:9d:fc:6c:e3:d2:8d:
e1:a5:96:46:23:c4:30:1b:3f:36:cd:3c:42:a2:8e:
fc:0e:63:53:fc:d8:ef:66:7e:4c:73:c7:25:b7:ee:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:15:82:DB:39:4C:DF:2E:CF:21:7B:75:71:6A:70:5D:4A:8D:2B
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5e:79:44:79:94:19:4e:db:b5:9a:47:1e:26:d0:43:65:f3:
d2:92:33:62:4d:07:7c:0c:e5:5f:76:d6:10:e4:d9:a9:84:f0:
56:e1:3f:54:e8:8d:1c:e2:9e:63:08:a0:da:8a:a8:27:29:7c:
cd:2c:31:af:29:4e:4b:c4:2a:64:02:f5:ec:b4:6e:11:0a:8d:
58:56:0b:7f:23:ca:96:ef:15:d3:76:73:ff:4d:02:51:70:4f:
b3:34:d3:f9:31:ed:04:6a:ed:d1:41:d1:af:96:c2:07:60:8b:
ae:2b:70:27:11:dc:8f:12:32:08:23:f6:91:62:e9:b5:a2:c1:
1c:6f:86:c7:22:b7:5e:11:21:93:c7:07:94:96:80:96:e7:8d:
98:99:88:d2:6b:0a:d2:15:fc:f5:ed:89:17:56:61:3b:9a:40:
2e:a0:db:b0:36:ca:07:5f:63:06:4e:d9:ee:90:30:5e:71:3a:
47:b5:c8:38:92:f9:f4:a7:dc:72:fe:7a:d3:a3:dd:64:3f:7b:
04:b1:ce:d3:5f:14:f8:05:bd:f8:22:a1:1a:99:cd:cd:b7:e9:
db:c8:87:25:c4:fe:a3:84:b0:a6:9b:c6:3a:52:7c:88:5e:ee:
9f:9b:69:bb:67:53:7c:60:86:94:cb:79:07:46:98:10:08:28:
b7:4a:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:02 2026 by rpki-client