Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: fX+hdfl2A22NTMVUzdlAGIbfgO8DIOEi8x2xxfagEvU=
Subject key identifier: 51:F5:0F:63:81:0C:C0:1D:C9:92:06:41:68:0F:AD:EB:DC:60:E4:4C
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019CADC80DB1BFA29572B893E38BD8D27EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0EDE
Signing time: Mon 02 Mar 2026 09:01:34 +0000
Manifest this update: Mon 02 Mar 2026 09:01:34 +0000
Manifest next update: Tue 03 Mar 2026 09:01:34 +0000
Files and hashes: 1: BO14bA7PeRb0D7KQP3CWollCutc.roa (hash: KWBfGK/f5gpdRKkzCSVIg8eJkkTlP4Rw/G54X2xmAk8=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: KIDy0eKqVllOPH6bO+SlfozGBWbLQ4CH0u/TcE/7t2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0d:b1:bf:a2:95:72:b8:93:e3:8b:d8:d2:7e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Mar 2 09:01:34 2026 GMT
Not After : Mar 3 09:01:34 2026 GMT
Subject: CN=51f50f63810cc01dc9920641680fadebdc60e44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:07:ef:08:ac:af:c3:ab:81:aa:89:b8:47:
77:95:c0:a9:b5:51:ab:f8:6b:73:75:07:29:77:35:
95:d2:de:d7:07:98:cb:2f:e2:ed:4d:f1:6f:75:c0:
9b:d3:98:ab:3a:fb:4d:86:e5:20:e4:14:50:97:03:
91:f5:55:ca:6f:8a:eb:e8:af:aa:ab:31:21:7a:b1:
44:30:e1:e0:80:88:e2:67:87:49:33:45:4f:c1:38:
0d:ca:13:30:d1:09:ce:51:de:0e:5c:93:74:9b:52:
65:83:65:9f:29:9e:de:95:d3:d0:39:67:e7:83:e2:
9e:39:13:7b:ff:3d:aa:c8:d9:9e:6f:26:f3:67:b7:
de:33:ed:8b:a9:37:90:e4:a9:f0:aa:c9:94:52:32:
b4:fa:12:0d:98:e4:6c:3f:67:6b:10:98:71:69:1a:
2c:66:e0:2b:23:f8:71:ee:9e:11:fc:f1:d9:6c:ba:
dd:00:9f:c4:b3:b9:c6:9d:95:fe:69:e4:97:4c:5c:
44:43:ef:cc:46:45:be:70:52:31:ef:1f:90:68:be:
ec:59:11:0d:24:50:17:d0:77:2d:6f:fe:01:aa:46:
33:4c:b0:d3:f8:20:22:c8:94:6c:43:3a:f8:89:bb:
22:a7:a9:3d:6e:4e:56:de:38:c8:53:39:76:f6:b6:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F5:0F:63:81:0C:C0:1D:C9:92:06:41:68:0F:AD:EB:DC:60:E4:4C
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:99:64:32:d1:4b:4e:59:ce:aa:4c:77:88:ef:65:df:95:9f:
5b:6d:23:d0:16:55:63:12:ad:4e:80:74:96:b9:e0:68:b3:a5:
7f:35:fb:c9:b7:3d:62:5e:5c:25:8d:c7:f7:b2:c7:c7:eb:57:
ee:c0:55:80:ff:10:8a:be:13:fa:1b:fc:31:d4:f3:2c:7b:9f:
1e:b0:b6:86:26:ce:12:bc:02:86:78:53:c6:16:84:fe:26:9f:
32:11:4b:88:8d:ad:25:39:69:4f:22:81:86:ff:c3:07:7d:91:
2b:1c:4b:67:5c:02:e6:f8:d8:8c:82:6d:e8:af:6e:d7:c4:7f:
89:44:a9:08:e6:13:7b:71:3a:0a:2e:8b:71:06:7f:99:e2:e2:
d6:1d:a1:4e:fb:1f:39:43:13:df:f7:72:f4:ef:84:6d:d8:89:
29:26:e4:d7:cc:6f:32:bf:dc:48:5e:44:26:bc:97:9d:d5:72:
58:0a:57:3e:63:a8:68:56:46:28:4f:a7:bf:09:f1:2c:81:51:
cc:36:78:f1:74:fd:16:94:9f:5f:fb:e6:4e:4c:4b:2f:19:fb:
d6:82:f4:d0:ab:ba:3f:d6:6f:17:8a:79:67:f8:b3:01:67:a3:
7e:1f:0d:6a:d5:c6:ff:28:b7:69:70:b6:be:eb:fc:d4:b7:bf:
3d:36:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:40 2026 by rpki-client