Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: zwGMH3wqgtIcj5uYD9r9t1leWSDBkCV/skeZyd8wlis=
Subject key identifier: B7:E0:C8:39:68:55:BD:47:5D:B2:0B:F6:13:01:97:4F:C3:58:49:17
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019CAA590E7807BC130CBB2F44821C84EBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 019A
Signing time: Sun 01 Mar 2026 17:01:28 +0000
Manifest this update: Sun 01 Mar 2026 17:01:28 +0000
Manifest next update: Mon 02 Mar 2026 17:01:28 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: dJyIcMfLu+I50N7da2SGqfbGq2Id7oXrmKx5d6b5TxU=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0e:78:07:bc:13:0c:bb:2f:44:82:1c:84:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Mar 1 17:01:28 2026 GMT
Not After : Mar 2 17:01:28 2026 GMT
Subject: CN=b7e0c8396855bd475db20bf61301974fc3584917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:37:4d:3d:2d:31:3f:e5:d2:39:cd:75:6a:
b7:fa:f4:9a:70:25:2e:ac:4e:f7:74:26:0d:cf:66:
37:c4:dc:3a:ef:7c:07:2c:48:e2:0c:0c:35:68:0b:
18:08:e9:80:97:58:56:df:61:cf:7a:f9:61:cf:1f:
8c:d2:1c:d3:1c:ef:60:a6:a7:de:ba:e7:2b:69:be:
fe:a5:38:d7:69:dc:68:6a:19:db:7e:83:f0:d6:e3:
47:3a:c6:fc:f9:47:09:f7:94:eb:f7:c2:33:e0:91:
83:b6:cc:f5:24:55:11:0f:0f:a6:12:0b:93:ee:87:
ad:e3:d1:4b:b5:a7:21:0c:bd:73:c8:c0:08:ca:91:
43:b7:02:69:b8:93:16:34:0b:4d:f1:c7:3c:a8:34:
a5:50:da:74:f5:1b:3e:e6:e5:ce:23:ee:ce:b5:a6:
8e:20:8a:a2:2a:94:80:4c:01:78:db:ed:80:45:92:
ef:e9:f5:43:e0:36:eb:05:e9:cf:19:2e:db:24:82:
0f:40:0f:c8:dc:fb:85:50:61:59:42:28:1e:7b:54:
bd:f1:fd:31:95:28:24:9f:bd:67:6d:d4:b1:1d:39:
58:2e:2a:b3:79:79:70:9c:76:7b:d9:7c:db:6d:c3:
4f:c4:d3:eb:ba:0b:b8:0b:7c:e1:81:ef:81:59:e4:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E0:C8:39:68:55:BD:47:5D:B2:0B:F6:13:01:97:4F:C3:58:49:17
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e1:65:55:ae:06:ed:b6:6d:8a:57:47:0c:11:b4:1b:55:b1:
df:50:fe:42:db:32:db:c3:b3:ad:d3:7c:5a:88:25:37:a0:24:
2d:9d:a9:99:4d:c7:db:fa:06:21:3a:7b:fe:a8:c1:20:42:48:
7b:df:74:93:d0:7d:06:0e:1b:eb:be:b9:cd:96:72:96:de:be:
b0:79:fc:62:70:f9:f0:27:aa:c1:1d:3b:56:eb:8e:6c:11:09:
d2:e6:66:1b:f2:37:98:7a:77:f0:6b:18:f9:cc:4b:3a:b5:be:
a0:a9:5d:22:84:bf:f2:81:80:3f:72:0c:49:f6:3e:23:46:04:
76:d3:46:e0:2c:a0:17:43:ef:c6:33:df:4c:2e:5e:e5:47:10:
f4:12:cb:b9:b4:4d:d6:26:cc:bf:1b:99:12:ce:3d:14:df:80:
e7:9f:e5:cb:a1:fa:aa:97:bc:7b:18:1a:3d:37:fa:ae:eb:63:
a4:f5:de:21:a7:95:91:d4:c8:a8:ef:6c:95:01:1b:06:93:a1:
2f:4b:95:3d:cd:88:17:1c:2a:0b:98:78:27:73:f8:a6:22:bb:
1e:5e:d0:05:ad:d0:60:0e:0e:0c:73:89:c3:1a:11:aa:dd:5c:
1d:5a:79:7f:53:f5:85:f3:d4:d1:41:37:b0:db:f9:a5:4f:13:
99:c9:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:23 2026 by rpki-client