Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: m2hTZg4KAqnmYWUAJnxHUHeaBXRMCysUeciPc7ekHhw=
Subject key identifier: 61:B1:A7:B9:D8:BA:0B:AD:CE:0F:46:87:B5:28:B0:86:50:ED:3F:FA
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019CAE34F0CBF30C2E762E12C31F2BF910FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:00:30 +0000
Manifest this update: Mon 02 Mar 2026 11:00:30 +0000
Manifest next update: Tue 03 Mar 2026 11:00:30 +0000
Files and hashes: 1: E3Abz8c2x25X2p1IuNZFKekLDzE.roa (hash: DciKvL6unAo5I4YBQh4SUA/jwjzYuA3QTOA40FWqmwU=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: 5corJZ8VgrgW0Z1Pb+6YHCWkFjTpIrdmjG+uxHW0SAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f0:cb:f3:0c:2e:76:2e:12:c3:1f:2b:f9:10:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Mar 2 11:00:30 2026 GMT
Not After : Mar 3 11:00:30 2026 GMT
Subject: CN=61b1a7b9d8ba0badce0f4687b528b08650ed3ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:c4:a2:2a:79:d2:84:78:59:34:a2:21:e0:
94:2a:e1:e7:90:7b:40:f1:2a:81:59:a1:cf:cc:44:
1c:3e:bf:0a:bc:a1:12:82:cc:fc:6d:f4:ab:8c:d5:
43:b6:cf:b1:f7:dd:1e:f1:84:88:ed:dc:b0:31:1c:
72:e2:d0:a7:f8:d4:45:5f:b3:2a:98:06:7d:35:b1:
19:e3:a4:11:c7:9d:3e:aa:fc:1d:1c:98:18:78:fa:
b3:ff:72:e1:ef:11:72:c5:6c:0e:79:73:ad:86:d6:
d2:5b:bb:b1:fb:6e:43:e8:bc:c9:0e:ce:f1:67:bc:
44:e4:58:d6:7a:59:de:d2:d1:59:3a:0f:a8:20:76:
78:30:d8:6e:bc:22:b8:ca:86:9a:c1:bb:7c:2f:48:
30:06:08:08:ba:53:fa:49:e1:56:ff:8d:54:88:ba:
78:42:44:ed:f6:ec:89:9b:f2:a2:00:88:fb:9a:6f:
a5:80:0a:09:99:d7:dc:98:64:99:ca:d2:3b:05:79:
f2:3f:b1:ce:fd:18:be:f8:f8:d3:9e:f6:29:38:fb:
33:68:8d:a7:ea:a1:59:c4:40:ee:1f:d1:ed:46:11:
41:9e:7d:ba:70:8d:29:77:de:cb:7c:89:ec:47:3e:
08:9e:3f:9d:65:c8:29:df:89:5d:a3:1c:19:e8:63:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:A7:B9:D8:BA:0B:AD:CE:0F:46:87:B5:28:B0:86:50:ED:3F:FA
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0a:9d:59:8e:29:22:af:30:91:3d:60:b4:cd:4b:2f:1d:71:
bb:89:ce:ad:69:7f:84:1b:04:20:8e:14:8e:be:e6:b7:c8:ba:
ab:a7:0d:25:0b:eb:48:a4:fb:10:45:f7:b4:c4:34:33:ae:71:
f6:c5:a2:e4:2e:6f:c0:17:4c:d8:95:5f:9f:d1:f6:d5:eb:83:
b2:52:60:7f:0d:13:33:86:1a:08:19:b7:53:d2:4e:d8:06:be:
aa:d7:0e:3b:8b:83:db:a6:b2:3d:e4:fa:93:e0:08:cf:e5:ee:
16:09:95:b6:4b:68:ff:f8:c8:fd:93:06:c1:bc:3a:44:c2:fd:
f8:bb:ec:26:7c:eb:71:72:ac:eb:04:40:6b:a8:4e:13:fc:bd:
bb:d9:a2:66:cd:8e:26:db:3e:66:04:d5:26:7d:fb:1b:f6:d4:
a0:07:8c:cc:94:3d:15:3d:05:20:ec:82:16:cb:ba:3a:a2:88:
53:46:ab:c4:ca:0d:c6:1d:5b:2d:2b:58:66:bc:be:9b:b7:3e:
a5:65:f5:49:46:bd:dd:cc:33:8a:92:1c:9a:7e:2c:23:56:1b:
32:5f:eb:8a:59:6e:6c:bd:60:b7:73:14:eb:ee:d2:db:88:e9:
d1:44:2c:65:fb:8c:71:b1:47:85:c2:ad:f1:73:df:8b:56:6e:
de:14:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:37 2026 by rpki-client