Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: Oa0sD7D7oKvjqkn6za1wuLz/obbm+d3163oqtnextvs=
Subject key identifier: 1E:21:0A:ED:A9:EA:88:32:7B:25:85:9D:2C:92:FC:AA:21:D5:20:0C
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 019CB024409155E39C8BE3A7229072CD53C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1594
Signing time: Mon 02 Mar 2026 20:01:31 +0000
Manifest this update: Mon 02 Mar 2026 20:01:31 +0000
Manifest next update: Tue 03 Mar 2026 20:01:31 +0000
Files and hashes: 1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: BwNgJeGQKJSSx+9ljTLC+JwdgavStHSmAbFe4BH3Vzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:40:91:55:e3:9c:8b:e3:a7:22:90:72:cd:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Mar 2 20:01:31 2026 GMT
Not After : Mar 3 20:01:31 2026 GMT
Subject: CN=1e210aeda9ea88327b25859d2c92fcaa21d5200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:cc:cf:cd:8b:45:06:c3:b5:19:96:c8:75:
8d:3d:6f:83:6b:24:b7:6e:57:55:67:e9:92:98:77:
7f:13:85:05:4d:50:82:4b:4d:5c:af:2c:fb:e6:f2:
44:64:20:5d:98:9a:de:a2:73:18:40:63:33:2d:c8:
cc:5d:48:b9:15:53:eb:23:48:34:0f:9f:34:cf:16:
c7:cd:09:fe:3c:b6:d6:4f:c5:9d:a4:9d:1b:7b:04:
97:96:ea:47:db:3b:81:ec:55:32:b2:2a:99:81:da:
fe:1b:d3:a2:aa:43:4e:3b:45:9c:ca:b4:e5:29:36:
71:18:24:69:b0:a1:d0:3d:43:ff:24:f9:86:59:86:
24:a7:bd:2b:9d:ad:33:c9:95:23:db:0f:6c:cc:2d:
65:08:fd:50:37:5d:74:a2:bf:90:92:03:48:b6:9a:
3b:e5:ff:b7:74:9d:f0:bf:df:9c:f4:74:ec:44:c2:
10:bd:0b:c4:3e:91:55:e6:2b:09:f5:2e:78:ed:69:
10:7f:2e:2b:ad:c0:11:eb:f4:e1:a1:26:62:12:7b:
2e:ed:48:10:19:df:3f:38:78:a2:d8:3c:ad:5b:a4:
c2:dd:15:b3:46:d9:a3:7e:68:ee:77:43:eb:e9:43:
1f:22:dd:7c:df:e1:d4:7c:2c:5c:00:9d:f9:77:87:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:21:0A:ED:A9:EA:88:32:7B:25:85:9D:2C:92:FC:AA:21:D5:20:0C
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1b:aa:a1:e1:b7:55:95:5c:2c:69:d6:33:00:b6:59:62:4d:
6b:6f:aa:a7:10:5f:43:40:4e:a4:34:9c:87:0e:4a:b9:4d:9e:
1b:aa:0c:5c:7e:1b:2a:38:fd:37:76:9b:20:47:7d:cb:ff:32:
04:82:2c:20:55:6f:ee:ed:0e:0c:a5:5c:3b:d0:0f:96:cf:f2:
c6:b0:d3:b2:b6:bb:c9:bd:0a:99:38:c1:3c:8a:59:f6:bf:3b:
42:df:a8:9e:96:b0:53:31:bf:ad:84:5c:5b:b5:fd:40:d2:dd:
96:51:7f:33:9c:60:4d:25:fe:38:4d:7d:ed:d2:e3:19:75:64:
c6:bf:c6:9e:c4:f0:67:bc:f8:c8:ec:8c:11:ef:b5:e3:52:73:
02:17:ce:c7:df:b6:4d:42:f4:4b:c3:e3:e5:53:cf:01:e2:3f:
bd:f4:72:2e:63:fa:82:e8:0f:b5:66:43:ad:f8:7b:f1:d4:b6:
80:0d:b8:05:2f:1b:0e:02:06:0f:88:ad:ed:7a:97:8f:99:1a:
f3:03:14:7e:bd:da:1c:46:aa:2d:a5:10:fa:8a:f1:c6:5b:68:
2b:a6:54:a4:3a:01:fc:ec:f9:e9:97:eb:b9:76:68:b8:47:6a:
69:d5:1e:c6:af:06:29:26:64:63:f4:5d:79:45:25:21:5d:b0:
62:3a:4e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:30 2026 by rpki-client