Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: IGYJRO4PylwNHzdx9w6zJ2Xi+vwqdzEUKOAu0EuxVRU=
Subject key identifier: 55:AB:BD:83:97:0F:2E:15:36:CB:0A:E0:C7:AC:56:89:89:D6:44:61
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019CABD9A05349780217141FC460217B69B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 10DA
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: 1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa (hash: BkBrVdmzVpfXD4QvBO8xygY9UajM60k/x4abGcDGbmw=)
2: 9enrJ1aLGA3RCeme7xBZCB62agk.roa (hash: vRnXuA5NETYBT1BeqdHLACLYGuovCr87R2REHEDrMcI=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: yGNzzj57dR8DWDc6K3HMAtx3T6MwkN23Qmz4MERrmaE=)
4: wSuoaH9wOLl866tBer1nWZMIWCc.roa (hash: IgY4urUfYKNfspzPi766lr6KcHLSrEwdZwQgGXHYG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a0:53:49:78:02:17:14:1f:c4:60:21:7b:69:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=55abbd83970f2e1536cb0ae0c7ac568989d64461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:eb:3b:75:b3:28:b6:c3:27:ce:7d:94:d6:
af:e9:1c:bf:59:1d:1b:ff:02:7b:d2:2c:ca:b9:f8:
46:74:3a:91:81:9c:17:e4:f7:c5:4a:9d:26:b7:85:
fe:8f:f3:fa:29:88:4d:ec:10:3f:e3:de:91:4f:90:
50:40:0e:74:c5:7d:2c:c4:57:c6:94:c4:f8:4e:b0:
72:cf:0a:70:f1:d0:96:0d:d7:69:54:e3:ff:f8:32:
98:60:e0:bb:6b:86:8b:9f:ae:11:46:3d:25:8f:2f:
30:22:99:35:b5:5d:70:5a:dd:d4:b0:04:34:59:5d:
1c:5c:7b:fa:fd:6b:c2:5f:a8:98:ca:9d:e9:c6:2b:
54:93:1d:a7:88:ed:bd:c5:c4:74:98:f6:83:05:4a:
1e:84:7e:5f:aa:1a:11:4d:77:88:85:b3:63:8c:16:
1b:bc:77:18:b5:85:d8:69:70:60:ab:d7:51:fd:7e:
72:77:71:b9:d8:bd:7d:be:f5:ba:cc:75:3f:36:ff:
df:16:c6:f7:3d:4d:41:ec:26:23:00:d1:c0:8f:f9:
fa:79:64:31:e3:11:65:75:63:65:bd:a8:b7:35:ae:
b6:66:55:0d:85:47:db:06:23:fb:f8:44:70:a4:29:
3f:b2:38:45:30:39:11:83:08:89:80:a4:40:ec:d7:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:BD:83:97:0F:2E:15:36:CB:0A:E0:C7:AC:56:89:89:D6:44:61
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:70:72:30:25:2c:e3:67:e7:b1:e1:2c:71:27:a8:15:87:74:
53:a7:82:b9:fc:8c:4f:9c:2c:52:5c:be:e6:9b:b1:8e:5a:0b:
82:d5:f1:43:4e:62:da:4f:d0:d0:fd:b3:dc:98:a4:01:db:09:
59:7c:a9:0a:a1:de:2e:e5:6a:4a:3c:0d:9f:03:b1:47:7c:f4:
74:98:65:40:cc:cf:fd:7c:76:07:c4:98:80:2c:40:53:0d:16:
27:76:7e:09:99:a9:8e:88:45:92:de:4d:b6:9b:4b:43:7f:3e:
da:46:6c:3b:b5:68:28:ee:2f:bd:b4:cd:d8:6d:90:43:7a:16:
aa:d4:49:74:3b:8b:a9:62:cc:df:6c:7a:9f:86:87:fc:32:34:
90:e7:24:87:1c:37:9c:4b:b3:88:50:0b:f8:8f:c7:7d:b4:30:
18:63:f6:4d:bc:fc:ee:62:52:2b:59:f7:fa:12:d1:7f:d9:34:
dd:ed:26:df:0d:1f:b1:0e:01:88:f0:6b:49:84:23:46:de:3b:
00:62:de:20:d8:49:70:46:ea:17:73:8e:6e:d3:d0:b5:7e:90:
ef:db:3b:14:68:94:0e:1f:4e:18:3c:7c:30:31:ea:05:95:25:
5f:af:9c:38:a6:ca:a1:60:c6:aa:21:77:ce:47:40:d7:e4:0c:
2b:98:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:04 2026 by rpki-client