Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier: dyDBdobHIa7XmpHkJbMgCvdAFhBqUZ+9E0psYlfHK4M=
Subject key identifier: F0:1E:3A:9D:65:05:41:73:58:4D:CB:82:31:76:8D:30:0A:49:9A:4D
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial: 019CAD5A39886C00FB40BFDB589A046E0D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number: 0733
Signing time: Mon 02 Mar 2026 07:01:37 +0000
Manifest this update: Mon 02 Mar 2026 07:01:37 +0000
Manifest next update: Tue 03 Mar 2026 07:01:37 +0000
Files and hashes: 1: ibn8bNQQz7BgdWQGJtHjkoVEvpE.roa (hash: BoHl0eq6h4PEPopUgDa/zkXPmdyvWksghSbqXzV9YdE=)
2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: KNnqLr5ih1/vyjrQTeGw+pohy5G9cH79eP1g2vr2fYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:39:88:6c:00:fb:40:bf:db:58:9a:04:6e:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Validity
Not Before: Mar 2 07:01:37 2026 GMT
Not After : Mar 3 07:01:37 2026 GMT
Subject: CN=f01e3a9d65054173584dcb8231768d300a499a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:a1:d9:42:b5:10:4e:e9:a7:2f:5b:f8:d2:
07:b9:0f:3f:d1:19:d8:5a:a8:0f:a0:f3:bd:5f:91:
83:cb:21:13:d0:8e:ed:ca:f3:4e:d4:72:32:23:3c:
ed:77:46:fc:7f:f8:6f:37:ad:9b:4c:28:b9:65:a8:
ec:e4:9d:81:58:80:87:35:80:3b:0b:f4:03:98:4a:
ea:30:08:b5:d4:9f:c5:6e:36:22:67:94:af:27:ab:
a8:e4:b2:80:34:a8:6d:32:96:e1:a2:6a:67:2e:75:
09:63:18:66:e3:42:60:48:2d:c9:92:dd:62:6f:e3:
3d:25:49:1d:1b:70:ea:4b:ac:3d:0a:be:00:5e:b0:
c9:11:65:c5:ab:5e:fc:77:78:1c:11:3b:e0:b0:2d:
67:85:f0:36:fb:67:fe:22:0c:39:94:3c:90:b4:6a:
11:6f:30:81:4a:bd:ca:3a:69:ec:07:0a:6f:98:b9:
bd:5f:c0:f2:01:3a:d9:40:bb:18:a6:9c:5c:15:75:
ff:a4:38:16:e7:ff:9e:5f:2e:88:f0:1b:e5:dd:15:
cf:ae:84:df:83:92:a8:e6:bc:c6:ee:0e:a5:e8:9d:
20:78:fc:41:96:e7:67:19:9e:7a:ec:8f:72:73:7c:
8a:20:ff:16:a6:78:d9:96:95:94:74:94:20:09:c2:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1E:3A:9D:65:05:41:73:58:4D:CB:82:31:76:8D:30:0A:49:9A:4D
X509v3 Authority Key Identifier:
keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a6:e2:8c:14:b4:9b:1c:8b:b2:c6:f7:2d:fd:5d:ea:9c:03:
71:8d:79:57:f5:94:19:91:34:39:06:ce:24:93:55:bd:c3:1f:
7b:c8:4a:6a:d6:4c:a5:6e:bb:94:c1:42:e7:32:7f:46:3c:e4:
3c:c9:d3:12:4a:5c:da:d5:98:78:c1:c7:d0:6c:fa:71:39:28:
53:47:72:ed:80:d5:93:7b:28:35:c9:f0:c9:6a:2b:54:0e:18:
4e:ea:43:84:ee:64:34:cf:6b:2f:7f:02:b2:7b:9a:4a:cb:d7:
eb:d1:ed:f8:33:c8:6a:27:f8:81:dc:67:dd:f2:a3:d1:7d:9b:
90:f1:04:ce:64:c0:f3:02:6a:de:f6:a9:46:16:bb:45:0b:ba:
ba:6b:2c:0d:89:9e:07:b6:94:c8:b2:23:e4:a1:40:b9:e4:ae:
1b:57:3f:39:44:b9:cd:8b:14:a6:9e:0f:8a:3d:8b:31:db:e2:
62:a8:d3:fc:3e:14:29:6d:13:d8:21:a8:f2:2a:c7:97:a0:8f:
96:cc:c5:3c:a8:05:69:12:19:b4:5a:3e:aa:1e:cb:af:55:d1:
1a:14:f9:74:39:92:7d:fb:fb:a0:c6:af:d9:83:bb:25:2f:81:
37:d2:79:d2:61:ee:3f:65:b6:dc:00:87:ea:7c:5a:f4:a0:0b:
c6:06:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:37 2026 by rpki-client