Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File: qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier: BfkdS+ckKM9CxnKomr/OUpHnrUKsu8UodFti6GjVMTQ=
Subject key identifier: 3D:4C:78:9E:B6:2E:60:2F:30:1D:E2:62:65:F0:9C:1B:2D:0B:BC:94
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial: 019CACB461AB09F2867F15173EF7298FA546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number: 1218
Signing time: Mon 02 Mar 2026 04:00:28 +0000
Manifest this update: Mon 02 Mar 2026 04:00:28 +0000
Manifest next update: Tue 03 Mar 2026 04:00:28 +0000
Files and hashes: 1: 9BXJOc4KzcwJ_gxDdNfTFpPCWH4.roa (hash: pkuMeH0UPmv52lxpZhcTdpJlbDSliFaKfs/env8uGi4=)
2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: 3u3bdKfZo30ID/7l7+T7cCdGDh5Bk3ofSnaaPrOGAfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:61:ab:09:f2:86:7f:15:17:3e:f7:29:8f:a5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Validity
Not Before: Mar 2 04:00:28 2026 GMT
Not After : Mar 3 04:00:28 2026 GMT
Subject: CN=3d4c789eb62e602f301de26265f09c1b2d0bbc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:45:43:18:cf:f4:db:cb:28:41:e4:dc:b7:b0:
e0:9f:30:28:90:ff:73:cb:0d:57:e3:3b:ab:fa:cb:
4d:6c:0d:64:ca:a6:08:5c:af:1b:a0:95:b8:8d:8c:
25:84:35:f4:14:ac:58:24:a7:1c:93:ef:95:6d:34:
c5:bd:bb:65:19:7b:97:d0:0b:6b:6d:0a:e6:f3:a6:
d5:cd:f0:10:14:16:bc:97:34:ec:e7:42:0b:16:05:
e0:37:1f:f5:f4:61:00:9f:f4:f7:6b:8d:5b:54:a9:
72:45:8d:ff:df:a8:82:c2:d2:58:54:7f:de:fc:c5:
80:61:22:ce:1f:b3:d5:44:ec:5e:c7:4b:49:d0:22:
ac:30:44:5d:3b:1b:61:49:b1:8a:eb:9e:59:12:78:
88:1d:34:c9:66:3a:83:49:9b:cb:23:40:fd:d0:4b:
03:05:20:36:de:6e:1d:d9:9b:eb:9b:d1:0c:e2:ad:
f9:1a:f2:d4:5e:a7:44:41:3d:48:16:b4:63:47:b6:
29:7d:c3:61:e0:ae:95:5d:fc:14:4a:6d:e2:36:15:
ee:83:c4:4a:2b:b6:f9:74:a8:8c:0e:44:ae:95:1c:
90:df:6b:a7:8a:f2:99:87:12:0a:e9:f8:d7:41:96:
10:81:77:19:7f:1c:f8:33:39:22:22:f9:c2:b6:ed:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4C:78:9E:B6:2E:60:2F:30:1D:E2:62:65:F0:9C:1B:2D:0B:BC:94
X509v3 Authority Key Identifier:
keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d8:2a:75:2d:3a:d0:89:e8:0b:e4:8e:a3:e1:c3:6a:6b:84:
0e:26:c0:d2:75:26:55:b6:13:8c:2c:48:9d:b8:bf:60:f2:29:
60:80:d1:44:24:d4:fc:43:67:83:a4:be:ad:24:96:36:48:21:
2c:13:cc:8b:67:ac:90:e2:76:61:94:e5:65:2d:08:71:69:d4:
ec:f5:f0:9c:91:ce:90:26:29:41:89:c2:e0:82:05:e1:0e:88:
a6:2b:b8:a8:56:b2:b7:8e:aa:ec:77:30:d1:b5:73:53:c2:fa:
8c:f1:97:78:db:cc:b1:7a:8e:38:71:c9:dc:5e:d0:b6:83:83:
50:62:ed:cf:b5:da:8a:3b:be:af:57:29:aa:bc:49:8a:81:b3:
80:ac:bc:f4:88:09:70:80:0a:62:c3:5f:70:f0:0e:57:55:49:
6f:da:02:0f:37:cb:99:a6:9c:83:b5:e0:2f:43:ec:fd:11:28:
a8:38:6b:43:2b:7d:fc:79:2c:f3:7a:9e:2a:35:38:bd:8a:22:
04:d3:34:03:38:17:5b:b2:af:ca:a5:fc:e3:e5:6a:98:21:02:
e0:75:29:0d:54:10:cc:f9:1f:e7:82:7d:84:51:a4:ed:17:6c:
e8:01:2f:5d:0a:2a:19:eb:84:d1:dd:5e:53:be:82:8a:e6:c1:
9b:d2:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:20 2026 by rpki-client