Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier: 7VtEhU75Wi/AyD1P6zrntV+sF8H5hVBhLsJSrtbO9pY=
Subject key identifier: F9:0C:36:AA:37:BA:E0:85:3B:D8:1A:8A:FB:02:37:BE:0A:B5:54:BE
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial: 019CAB3430D357B2FD20E5AE89E586CF4296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number: 071C
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: bin4sOPD5OKGfACXCfj3DQEIKBY.roa (hash: VnhSf12ZJGOlUh0T6+7Mdxo6I0H2lB8E2bDRpPDL8BU=)
2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: zMhHoyeTsSUpK+RSonksZKvtga51WCl2Ztr+rSsZHHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:30:d3:57:b2:fd:20:e5:ae:89:e5:86:cf:42:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=f90c36aa37bae0853bd81a8afb0237be0ab554be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:5a:b8:ad:c3:18:3b:28:42:67:f6:f5:f8:
8c:d7:6b:c9:a2:b7:a9:ee:07:f7:52:f5:5b:8f:14:
7b:df:1b:dc:f9:e0:6b:f4:df:e2:c3:e4:0a:48:1b:
ac:4a:18:b8:95:2b:01:17:02:1c:54:35:a0:f5:85:
36:05:2c:e2:d4:75:96:4c:ab:30:9c:2b:ce:b6:f9:
9d:bc:0e:11:79:41:32:c2:8a:26:d6:f9:40:65:62:
24:17:c7:17:96:ff:a0:ab:fb:40:33:da:40:a4:ae:
c9:27:af:3b:7e:5e:c1:88:86:8d:a8:36:8a:f0:30:
f8:3a:86:bd:3e:63:f0:e6:d8:27:b0:8e:ff:e2:6a:
8a:2e:73:0e:e6:e5:f5:23:01:de:f3:63:16:17:7b:
89:07:c2:b2:ab:0a:f1:89:b3:97:a5:89:a7:3d:90:
83:0d:58:20:30:90:ae:70:a4:b4:0c:2b:b5:50:95:
c2:c2:46:55:d7:f2:df:54:b8:24:0b:2c:7d:b9:28:
18:9a:f9:32:8f:1b:0a:39:95:42:8f:63:d7:de:29:
3e:a5:ef:6b:48:5e:c6:c1:71:ac:3e:1e:47:e9:7d:
50:17:29:7f:91:99:e0:ef:be:05:4f:9b:2e:46:2e:
12:a5:8d:c3:e4:06:1f:3e:70:ce:49:c1:49:8e:8b:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:36:AA:37:BA:E0:85:3B:D8:1A:8A:FB:02:37:BE:0A:B5:54:BE
X509v3 Authority Key Identifier:
keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5c:19:c0:4e:02:18:1a:be:f0:62:78:e6:67:f5:fa:b3:61:
38:b5:a9:28:d8:a8:a4:e8:f4:a8:ee:a8:29:18:65:f6:01:05:
f0:6a:5c:f0:63:42:15:d2:22:3c:bf:20:cc:18:bd:98:1e:dc:
9d:09:4f:57:c7:8c:9c:95:1f:34:fd:e8:97:06:aa:14:bd:32:
02:0c:48:26:e6:9e:33:cc:1c:6a:6b:b3:87:af:a5:33:fb:97:
da:ef:c6:10:af:7e:49:c5:26:0c:bb:73:65:0c:a6:c9:ab:37:
1a:e5:8c:37:b9:49:5c:a3:e4:5f:98:2f:94:27:5d:19:e7:0c:
36:c3:43:77:ff:13:a2:4d:c5:58:c5:6f:fe:a2:ea:51:bb:f1:
ba:e4:49:ca:21:e1:97:84:4f:e2:58:42:a2:d2:d9:aa:5f:a4:
4e:a0:39:50:0b:b8:de:03:66:c3:45:08:e6:98:18:b5:3d:dd:
ac:15:f0:57:96:db:75:45:fd:0d:f2:0a:af:dc:6a:f4:7c:d8:
6f:c3:88:94:e8:7f:1d:37:a6:05:05:a9:66:5c:62:18:69:cb:
e8:f8:e0:a9:f6:3b:80:55:a4:e2:5f:8c:18:00:4b:ed:5e:70:
0d:bf:d8:1d:b8:b0:5a:7c:da:47:06:d1:a7:78:ef:3a:ff:07:
0a:50:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:38 2026 by rpki-client