Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: 0UWOAsfU6PVlFN+/Emo/DuDf8T2EtnZKr87USwZgUoM=
Subject key identifier: 90:42:41:88:45:8D:E0:83:EF:7A:CE:F3:CE:7B:C9:B1:4A:77:18:FB
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 019CAE35DAC2E133E0D9D5AB103264E59EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 068D
Signing time: Mon 02 Mar 2026 11:01:30 +0000
Manifest this update: Mon 02 Mar 2026 11:01:30 +0000
Manifest next update: Tue 03 Mar 2026 11:01:30 +0000
Files and hashes: 1: arEWxGjVNSq334y6Ktt8aDjalyE.roa (hash: TaWGOyG5nBxY0egiO8Xs2dGnWrPRgWPcphWefnhZTWM=)
2: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: wY3nF6nP4fJwoBVon1GTruo/lsPVIVJGi+9MlfV8rT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:da:c2:e1:33:e0:d9:d5:ab:10:32:64:e5:9e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Mar 2 11:01:30 2026 GMT
Not After : Mar 3 11:01:30 2026 GMT
Subject: CN=90424188458de083ef7acef3ce7bc9b14a7718fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:93:c8:37:84:a0:7f:b5:5e:b1:7c:7f:ad:
77:9d:e3:13:5c:79:23:93:d5:db:ee:0d:a6:0c:3a:
17:18:23:db:ea:ac:86:a3:8b:35:43:3f:5f:a3:4a:
f2:d3:28:24:98:a2:8c:ce:14:42:cf:60:12:22:31:
2d:d7:ec:de:8a:51:84:0e:78:a4:7f:9f:c8:bc:d8:
fc:e4:ca:3c:26:db:a9:02:10:68:0a:73:90:b8:c1:
66:da:80:f5:b2:93:96:b3:93:29:c8:d1:ef:c9:5c:
c7:ad:af:37:9f:69:20:ab:6b:8c:ab:4a:4c:81:1a:
98:6c:52:3d:fa:6f:28:3b:81:51:aa:ae:7c:3c:1c:
3a:fc:5d:90:a3:fd:29:81:cd:26:e6:f6:45:7c:68:
11:c1:1a:bd:3d:49:e7:66:42:93:c1:c3:0e:2d:d1:
e4:7e:b8:88:f6:cc:f9:d3:bf:42:25:cb:45:7d:52:
57:f1:6c:35:fb:a5:41:fc:67:f6:5b:a5:f9:af:34:
be:f8:22:83:c4:92:49:b3:07:7c:ea:45:91:92:03:
92:a3:00:6f:56:55:c2:12:6d:36:c3:12:a0:f5:01:
c7:5f:d6:1a:d0:87:81:9d:6b:0e:4a:3f:1a:df:34:
00:a1:52:96:d8:55:ae:68:24:37:92:f4:37:2d:b0:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:41:88:45:8D:E0:83:EF:7A:CE:F3:CE:7B:C9:B1:4A:77:18:FB
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:13:0d:27:62:89:2d:af:8c:7d:58:7f:58:10:89:84:88:e9:
b0:fa:a1:11:4a:32:5f:d8:0f:99:c4:43:65:2f:3f:ee:8b:3b:
bc:f6:e6:03:d9:e0:69:b8:c4:c5:a9:f7:6f:2c:07:4b:08:ad:
a0:59:07:fa:1e:96:dc:3f:d4:bd:94:70:06:f1:73:36:18:9d:
83:99:bf:cd:44:7b:be:a3:2a:29:08:58:60:e8:50:1c:4d:06:
f0:77:19:c5:11:a9:c2:c5:f0:47:c3:ce:fe:3c:65:c1:f6:8e:
b8:dc:61:f2:e0:34:df:d8:ef:fa:84:65:01:76:4a:01:95:45:
57:69:f0:dc:43:9e:93:02:0c:d7:79:75:1c:2e:d5:4c:d9:c6:
db:3e:87:70:e2:38:ba:fa:1e:63:0f:83:fc:f7:ec:2c:99:fa:
c5:11:3d:9c:d8:33:39:58:0d:ef:dc:14:ad:f2:01:ec:87:b3:
e8:af:3e:1a:01:76:21:8f:d2:03:1b:f8:e9:3c:94:5e:8a:10:
7e:b0:30:d4:c3:26:23:e1:d9:f6:8b:9f:6c:2e:59:28:8a:e5:
03:fb:61:85:a4:7f:34:c6:6f:4e:a5:a7:af:0f:20:1b:5d:e4:
5d:ff:76:9f:75:eb:3a:4c:5e:3a:b3:0f:16:4f:04:7c:31:37:
cd:a0:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:36 2026 by rpki-client