Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: X+LJekJ0ITE3NS82QTd9NR/TcMZN965aVz5GZMMpg5s=
Subject key identifier: D3:CF:63:A7:F5:3F:22:72:95:05:90:7A:A3:EB:18:9F:0D:85:99:97
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 019CAC0FEB66ABF93A8AD59B7F9642CE9B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 1610
Signing time: Mon 02 Mar 2026 01:00:50 +0000
Manifest this update: Mon 02 Mar 2026 01:00:50 +0000
Manifest next update: Tue 03 Mar 2026 01:00:50 +0000
Files and hashes: 1: brwHnJn9j349deS3lmnqCOoNhq8.roa (hash: m2Te8mjf6FkoLB1a3b50ZNfCC4MLvjshErjN5GPxq0M=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: uzp4S0NMKVjX/hEbTr4tB+7C90LWQ0c7c+Y7DISPzFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:eb:66:ab:f9:3a:8a:d5:9b:7f:96:42:ce:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Mar 2 01:00:50 2026 GMT
Not After : Mar 3 01:00:50 2026 GMT
Subject: CN=d3cf63a7f53f22729505907aa3eb189f0d859997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:b9:ce:51:c2:ed:11:8f:a0:61:c9:8f:98:
a3:c2:ca:1d:0b:16:4d:d7:28:27:e3:e0:78:c6:ea:
e8:5f:d7:04:0e:42:06:da:d5:0d:f1:c1:cd:46:af:
4b:47:41:a2:08:ae:f4:38:29:0f:4c:d8:0b:f0:40:
51:bc:fa:3f:d3:b4:b2:ec:39:a8:74:5a:15:f2:1e:
f7:f4:e4:1b:29:34:96:06:b6:f2:7b:8c:08:e2:a4:
4a:e1:75:8a:60:34:2a:5f:0b:f4:f1:5f:34:58:83:
ab:03:fa:47:60:1a:a6:a1:e8:cc:bc:c1:43:02:c0:
4e:ae:d0:a8:86:aa:a9:33:51:5e:3e:d3:23:70:95:
ce:69:85:2e:bd:a8:fd:4e:e9:93:e4:1d:08:aa:b0:
c7:20:10:bb:29:e9:d1:e6:9f:1e:4e:37:87:a3:77:
52:2e:b7:3d:94:b4:be:56:e6:60:06:5c:7f:42:27:
a0:9d:c3:3c:2e:19:c2:7d:52:6d:00:80:56:4a:4a:
b7:58:3e:f5:65:c9:de:eb:a6:6e:37:0e:cf:fd:c1:
f4:cf:9a:c1:15:12:f2:83:67:33:3f:11:9a:30:64:
2d:a3:c9:05:13:23:c5:4b:0a:7f:4e:c2:a9:b9:12:
00:05:67:22:3f:36:cd:55:69:76:00:87:2b:b4:88:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:63:A7:F5:3F:22:72:95:05:90:7A:A3:EB:18:9F:0D:85:99:97
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:bc:bf:bd:1a:59:7d:f7:a2:4b:3c:11:35:2f:ed:da:30:
24:ca:8d:03:a2:7b:11:e8:87:90:49:7e:bd:80:a1:b0:32:4b:
ad:05:42:79:02:0a:78:6d:22:ef:82:d5:cb:0c:41:81:15:f7:
6b:d2:db:f1:54:34:fe:bf:fd:f2:46:0d:72:d8:55:f0:da:11:
3b:63:22:28:da:fd:d2:c5:37:4f:cc:a8:79:42:e9:e9:f8:17:
28:49:ff:41:41:fc:41:ae:c4:c3:54:16:5b:d2:74:96:ad:5e:
3e:85:5a:f6:e3:aa:74:e1:e8:16:38:9e:2f:34:41:57:36:8e:
9d:fc:0e:8f:12:d4:f0:b4:16:f5:c4:ea:87:f0:3a:39:f8:99:
c2:5f:34:a9:0f:1d:96:ad:30:4b:35:d4:d6:0a:43:f3:0a:33:
f6:ef:44:b6:f9:16:e0:84:93:f5:25:01:41:f0:87:ac:92:2d:
0f:6d:63:86:f2:7a:dc:19:b7:53:3a:ab:9d:f8:ba:73:fd:c5:
7b:9c:fa:14:27:47:45:9c:6d:e6:9c:c8:14:a0:c4:70:d2:5f:
cb:04:d1:79:f3:9d:0c:5a:2f:0e:a6:6d:64:09:39:cc:f9:66:
b3:83:5d:53:9e:05:c5:4e:b6:56:be:d4:22:5f:dd:46:a4:74:
a3:68:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:02 2026 by rpki-client