Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
File: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft (raw, json)
Hash identifier: 8MKDgVn7NXuHPCz0WjSqWX8qdZqWOLndqBo62RvIY4c=
Subject key identifier: 91:DA:80:C8:43:6C:5D:C9:5E:5A:6B:44:93:BA:59:B3:F4:E3:B0:F1
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial: 019CAEA2F860299F1EF29EDDCC09B3FF6ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
Manifest number: 6F
Signing time: Mon 02 Mar 2026 13:00:41 +0000
Manifest this update: Mon 02 Mar 2026 13:00:41 +0000
Manifest next update: Tue 03 Mar 2026 13:00:41 +0000
Files and hashes: 1: Qkmm8NzglIDSaRRojnPgAONoFTs.roa (hash: +ytJC/qxZWUUZ4DE43GZcN4/00ano+1+6kAJf6whSh4=)
2: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl (hash: +4MCzgFhha6bgMkK0qIlyfDgawJ4YJKeqS+sPej+dFU=)
3: fS9DhAA3eiG8HtVq67hAVe5MUHU.roa (hash: IiJhrxZlH7dtIcu6+WjaoQeyu/z5L+5HOr52j6mMjfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:f8:60:29:9f:1e:f2:9e:dd:cc:09:b3:ff:6a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
Validity
Not Before: Mar 2 13:00:41 2026 GMT
Not After : Mar 3 13:00:41 2026 GMT
Subject: CN=91da80c8436c5dc95e5a6b4493ba59b3f4e3b0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:a9:d5:44:b7:f2:88:44:11:fd:6e:1b:f5:
12:ac:85:a2:f5:20:69:1f:8c:fb:47:1f:9d:d5:97:
56:8c:7e:00:01:d8:fe:94:39:d1:df:a5:24:cb:4c:
c9:64:01:40:1f:9c:41:e3:cd:10:59:66:af:a0:5d:
6d:e4:98:92:83:7a:da:7d:ff:98:30:5f:22:e5:e1:
07:b4:3a:ef:67:68:f7:55:48:3c:17:f2:96:d0:c1:
43:b4:e3:13:e5:e5:5d:b7:c3:af:ee:df:d5:b8:15:
5a:dd:f6:8a:63:a8:97:2c:d8:82:67:35:b5:31:7c:
87:93:07:09:8a:d5:85:54:64:07:49:6f:9a:1e:0d:
23:5c:44:bd:b2:b4:72:1a:d9:36:25:73:8c:67:54:
d2:ac:b7:f4:7c:bf:3c:5d:fc:33:89:4f:1f:d4:21:
2a:26:69:12:15:bb:c8:42:0a:09:36:80:b1:93:08:
59:ba:37:ea:49:df:0a:70:ce:cb:ac:8a:b4:64:78:
24:f7:0a:de:71:21:35:5e:42:b9:d5:a5:5f:b5:f4:
02:0d:34:f4:04:93:f6:82:00:5a:80:60:0c:20:ac:
40:d3:dd:c5:87:62:4e:c1:28:c2:79:46:17:b2:de:
56:d5:e1:af:96:42:55:c7:dd:6f:bf:eb:4a:04:ec:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DA:80:C8:43:6C:5D:C9:5E:5A:6B:44:93:BA:59:B3:F4:E3:B0:F1
X509v3 Authority Key Identifier:
keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6c:97:99:2f:72:95:06:30:43:09:f4:98:f1:24:da:8a:b1:
57:c9:d7:a4:ae:12:b9:9b:95:99:c2:ac:a3:73:0e:e1:ac:a0:
be:31:d5:f1:43:e2:89:dc:61:56:8c:a3:d0:72:7a:76:9a:e4:
7c:be:0c:19:f8:3a:0f:00:bf:96:bf:c6:c8:e1:83:10:0b:53:
c9:76:c4:c4:62:9e:cd:61:e4:e7:66:7b:3f:3d:47:de:6c:fa:
ee:df:34:86:9c:e8:0b:33:84:3f:aa:31:57:8c:7a:cf:30:c4:
8f:8b:ae:db:83:05:72:53:88:ed:76:3b:b5:ba:31:81:11:82:
d3:9c:63:8c:16:cf:e3:78:9a:6e:f1:d6:b6:23:e1:d7:d6:3e:
7a:22:3b:e7:03:fe:41:04:b6:32:eb:90:3d:bc:30:7b:df:e9:
3f:12:d0:a7:36:4d:58:ad:55:0d:4b:1d:aa:3a:97:68:a8:b3:
3e:98:0a:18:e3:1f:fe:ce:a1:3a:2d:93:f6:c7:b9:7d:54:4e:
a0:03:e1:17:12:1c:cc:fe:62:5c:1e:69:e1:91:46:2d:46:ec:
fe:c9:b8:8a:73:f5:7f:e7:89:ad:37:53:c1:a8:b6:65:be:1a:
60:b0:ec:b3:a1:74:ee:88:a2:74:3a:bc:a1:10:b3:bd:da:5f:
1e:ca:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:36 2026 by rpki-client