Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: 4LhH63CkwM8MaAJj3v6qLujyG0UmKJZhrBMElrKvAM4=
Subject key identifier: E9:CF:16:BD:8F:A4:BA:B0:59:94:1D:88:88:AD:31:B5:47:FA:D5:4D
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019CAC7DE6EA8B2A713953637ADA8F6F438E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:00:57 +0000
Manifest this update: Mon 02 Mar 2026 03:00:57 +0000
Manifest next update: Tue 03 Mar 2026 03:00:57 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: Ue1+LyBzaEQU8hDrJ4q6jqaPUkZ4HT1o7SoTFQiLIsU=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e6:ea:8b:2a:71:39:53:63:7a:da:8f:6f:43:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Mar 2 03:00:57 2026 GMT
Not After : Mar 3 03:00:57 2026 GMT
Subject: CN=e9cf16bd8fa4bab059941d8888ad31b547fad54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:44:5d:5f:4e:69:1f:5e:f2:e8:d0:40:d3:
02:bb:c3:fe:b1:ba:41:f5:7e:fb:14:b8:68:66:01:
9a:78:1a:60:5c:fe:97:30:06:e2:36:44:4c:f3:62:
92:be:58:a6:6a:9e:af:fd:7c:9d:52:55:d3:b2:33:
1e:10:b0:4c:69:6e:3c:20:50:a8:eb:ff:99:c0:65:
e0:da:e4:22:90:3a:a2:b5:96:91:9d:6e:a8:34:8f:
72:df:dd:e1:4e:94:d6:bb:a9:8d:40:10:b3:ba:47:
34:cc:0e:d1:75:31:fc:96:98:a9:a1:0e:75:14:76:
6d:65:eb:af:a8:86:e7:97:b4:34:59:39:f1:aa:d1:
b7:11:db:95:db:bb:d7:91:b2:df:f8:79:20:c3:b0:
22:06:10:07:1b:16:e0:e3:b5:00:bd:33:41:19:00:
86:35:87:50:c5:49:db:44:4e:f2:85:e5:d9:90:bd:
5d:ec:63:1b:5a:0f:55:e2:e9:33:67:be:0e:10:eb:
30:82:18:53:97:d4:c1:55:e5:34:bd:f0:bd:75:1d:
0b:a8:10:4d:e7:de:30:fb:f0:c7:5e:3c:a8:a0:7d:
7d:9f:6f:94:b6:e7:35:38:8e:b0:cd:0a:36:cc:c5:
0b:60:10:8c:76:52:3d:15:04:be:19:c8:76:63:71:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:16:BD:8F:A4:BA:B0:59:94:1D:88:88:AD:31:B5:47:FA:D5:4D
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:af:65:1c:eb:4c:05:8a:de:67:83:34:30:b1:43:f5:a0:
77:78:fb:22:9b:e9:1c:ab:17:99:88:03:29:07:fe:c9:b9:42:
a7:e9:20:79:2a:4e:5c:bc:63:61:25:c2:e3:f5:4d:b1:fc:2c:
37:90:c7:47:e0:ea:e1:60:2f:f3:14:e1:74:60:c1:5d:db:15:
8d:09:37:e4:1c:85:e7:f4:89:32:59:df:a5:58:7c:0f:03:fc:
67:84:5b:d2:d5:5b:03:62:ac:4e:76:34:4a:e6:42:92:2b:4b:
fd:e5:d4:18:3a:c9:62:4f:ce:4e:20:0c:db:33:eb:9c:bd:59:
98:91:1b:51:44:e8:f7:a9:a7:dd:40:de:b1:30:6d:82:c9:b1:
64:9a:0d:ab:ad:76:67:c5:1b:6f:98:4b:18:dc:ac:19:86:88:
35:ed:51:df:d7:d8:fb:d5:72:0e:93:ed:07:a4:40:c0:fe:a5:
10:6e:a6:30:78:e3:20:b7:40:19:ec:08:34:14:a6:c1:7b:45:
c9:12:a7:0d:04:cd:c2:75:38:cd:10:c5:7f:5a:b0:5d:de:56:
17:68:22:39:ac:30:30:89:2f:63:46:86:6f:37:d2:55:ad:53:
bf:24:37:4e:38:52:23:79:23:ee:12:48:7f:fc:53:e0:ea:39:
eb:c3:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:10 2026 by rpki-client