Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: +T7dSN2EFLi1jxjHNr5mIyNMKNkIrHu08joB+fQXBcQ=
Subject key identifier: D6:13:A4:3B:22:56:99:F8:52:1C:2D:D1:02:39:93:B6:1A:BE:0B:EB
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019CACEBAF0674016EF728128C5A2C3D36D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 0118
Signing time: Mon 02 Mar 2026 05:00:52 +0000
Manifest this update: Mon 02 Mar 2026 05:00:52 +0000
Manifest next update: Tue 03 Mar 2026 05:00:52 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: /3rM3XmKh27yXrFic5Mk/ZWXG6TS0E3WGeHC4vAcXX4=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: mwCzzvweJkXnsuKQFU_XqrjgkuY.roa (hash: oIsIZ9PAHY73DINk0iQBEaX5PRlBNYPUighzgQGS/2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:af:06:74:01:6e:f7:28:12:8c:5a:2c:3d:36:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Mar 2 05:00:52 2026 GMT
Not After : Mar 3 05:00:52 2026 GMT
Subject: CN=d613a43b225699f8521c2dd1023993b61abe0beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:31:ad:4b:68:5e:24:3e:dc:45:12:b1:26:
56:3a:6f:52:0e:47:9b:44:b1:74:41:16:6d:18:fa:
40:c9:98:9f:fd:07:16:d9:b6:0b:1a:86:57:c4:8d:
af:73:fd:9e:6c:bb:08:a3:55:4a:c9:30:cd:fb:06:
4d:7f:c9:ce:ae:66:3c:14:1d:a0:ab:85:39:66:da:
0d:55:99:3b:a1:3f:8b:ad:25:2b:68:fb:b4:61:b6:
9a:b5:5a:35:58:2d:bd:65:bc:e1:50:92:b6:5f:32:
60:06:e3:b3:43:7d:cb:61:ac:2f:0a:5d:23:54:18:
81:1c:0e:a9:d8:84:b6:c7:02:46:c6:60:e5:78:b2:
09:64:77:0d:5b:1f:e3:1a:b5:cd:26:40:8e:a1:f9:
b4:6e:3d:59:b3:eb:89:a3:27:5f:1e:80:83:22:f9:
1a:cf:b6:96:06:e3:21:5f:19:ea:7a:db:d3:d8:66:
d6:11:cc:54:45:4c:2c:a0:ac:00:3e:4e:b1:37:d2:
d0:ba:0a:71:b4:f0:ff:ff:f2:7b:b2:45:48:56:c0:
06:6f:45:50:12:41:14:b5:d7:bc:f5:86:73:9a:fd:
f0:1b:8d:37:ac:62:82:c5:b1:34:3f:fd:8a:e9:19:
0b:a4:49:8c:5c:93:15:59:24:2d:bf:e4:0e:01:f4:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:13:A4:3B:22:56:99:F8:52:1C:2D:D1:02:39:93:B6:1A:BE:0B:EB
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c3:e6:16:e6:92:01:32:d3:b3:dd:70:a6:4b:44:4b:d3:9f:
67:2e:40:86:6d:93:30:a9:f9:51:e8:9e:61:d4:c0:7a:1d:19:
74:06:0e:ad:d9:bc:95:a7:35:c6:ea:7b:aa:a0:ef:26:08:b4:
8a:7a:a8:ac:34:b3:56:f6:9b:ef:61:6a:6d:46:58:b2:7f:26:
84:64:2d:c7:92:bb:2f:90:0c:df:96:24:9e:76:66:cb:46:25:
0f:cd:47:70:da:67:45:9d:ba:22:24:0a:a2:e7:0b:9c:c8:79:
e7:1e:90:03:cd:03:84:b6:54:c5:bb:41:64:a9:95:52:f9:3e:
9e:e4:3f:29:ce:1b:a5:5e:4b:13:19:47:c6:8a:cd:fb:ee:c9:
b7:78:1d:f6:6e:4d:fd:fd:2e:02:d3:9d:56:9a:7a:5e:5d:4b:
3d:b3:bf:5c:f5:54:8e:d0:cc:a9:11:9d:16:29:96:82:0e:34:
5d:a0:39:16:60:83:db:7d:68:ab:c1:ec:56:c9:37:1e:17:9a:
01:c0:df:07:6b:df:43:2d:3f:ed:3c:9e:f2:85:1c:21:5c:85:
fd:43:ff:16:2c:0d:c4:d0:c8:f3:4a:0b:f9:af:0d:76:97:1f:
14:3b:41:b8:42:8d:ec:8a:9e:3c:26:6e:ea:a6:aa:57:75:eb:
81:6a:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:08 2026 by rpki-client