
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: FNAKhNjjXGzxmSLmD5tiBiwsSCXj5m+5s+Xgq0dCN8Y=
Subject key identifier: 05:25:CA:CE:B1:7B:AE:8D:96:C3:5E:F9:C6:87:EB:04:D7:1F:3A:8B
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019CA7FCD1D40D8B09ED61B83EC451F03FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 074C
Signing time: Sun 01 Mar 2026 06:01:29 +0000
Manifest this update: Sun 01 Mar 2026 06:01:29 +0000
Manifest next update: Mon 02 Mar 2026 06:01:29 +0000
Files and hashes: 1: 74Dpz122mMMut7bbXL6kEu6zz8E.roa (hash: p7VXpGGYO1rsvZkHdjohiYrbdkLflYguUEoDUa4uT/I=)
2: NHpHHZAIDzgwPpSy6ezW1FtmeD8.roa (hash: np0ySnVq+ohTQoZSQT/qPIOylTE9F9ExAUt5D1kOcwE=)
3: NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa (hash: Q/BQlYDMNejEhVFqRZbNSInpb1ogvcV67Q6DhAARUbc=)
4: NbeD14QOQVqxpCNvyr8gH_GQtrc.roa (hash: oswI2CSKNyAXKvPvhJzaCytbyJezZyC2UppT7NbsjUk=)
5: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: 0QOdMcT/mEMcCKIXAURqiuI+xwgxYGlAmftHYB99VTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:d1:d4:0d:8b:09:ed:61:b8:3e:c4:51:f0:3f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Mar 1 06:01:29 2026 GMT
Not After : Mar 2 06:01:29 2026 GMT
Subject: CN=0525caceb17bae8d96c35ef9c687eb04d71f3a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:f0:c4:42:7e:4a:2b:d1:fd:ba:04:d0:cd:
39:2e:80:39:4d:92:66:8a:0d:b2:42:93:8f:5c:56:
b4:6c:8c:23:69:8b:53:00:d7:c9:b6:4b:07:44:d9:
a2:db:19:b2:6c:c1:ea:ba:ca:10:b1:c4:44:a4:2c:
45:bb:15:13:70:27:37:b1:75:26:b7:df:6f:56:19:
11:bb:94:4f:fe:d9:11:1a:49:a2:30:1c:99:33:d6:
f2:56:15:34:80:43:fb:f0:86:7b:95:ea:ca:0d:64:
3f:59:5b:1c:f1:ee:d8:3e:1b:ce:31:f5:c9:6b:d5:
a0:6f:ff:e0:55:e4:76:17:28:c9:fa:e5:15:c4:9b:
19:d3:b6:e4:18:0e:fc:21:52:b3:0c:1e:c4:50:07:
a0:a9:d6:80:54:3c:45:8f:94:c2:6c:40:fe:18:88:
f3:5e:67:10:04:65:b6:ab:75:0a:d5:aa:d0:12:7e:
e2:b7:8f:f5:84:db:d3:d0:73:6f:f2:3b:65:50:fd:
88:1a:ec:01:40:7b:42:bf:ad:d4:e9:90:ab:4d:06:
02:cd:a3:3b:58:b9:d6:33:a0:78:7e:99:9f:6a:1a:
3f:e3:2c:69:20:a8:52:8c:88:25:91:c8:8a:72:cd:
b7:7b:8d:21:f2:da:23:fa:ce:74:66:68:08:88:14:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:CA:CE:B1:7B:AE:8D:96:C3:5E:F9:C6:87:EB:04:D7:1F:3A:8B
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:9b:fe:78:66:b5:f6:89:11:22:e2:d4:b2:d9:6a:9e:10:
82:dd:e9:8b:b3:2c:28:05:04:38:ee:78:f5:8d:fd:0f:6e:0e:
1a:0b:1d:de:9b:94:e5:11:03:49:1b:99:82:44:0b:ad:05:8a:
76:be:ed:7e:9a:c5:27:1f:5c:9e:7a:8d:ea:e2:f9:b8:93:f4:
3b:73:ad:35:02:cf:04:19:13:4e:1f:33:52:fe:bd:e9:6f:2a:
46:c2:53:2e:f4:f2:f1:1c:be:d5:d7:f4:1b:65:66:a7:9f:24:
6c:72:cf:3b:52:f1:7b:cc:d4:0e:0b:e3:5c:34:ca:2a:78:d4:
26:d8:51:11:b9:b5:63:77:70:05:7e:41:cd:55:d6:1d:03:0b:
28:57:cf:a9:c6:5d:5c:9d:41:65:ed:55:1c:de:5f:b4:5a:a7:
de:c1:bf:c5:dc:b4:b9:0c:2d:2b:f5:83:ee:6d:4a:52:9e:e2:
9f:2e:9f:4a:69:6c:fa:56:f8:41:c5:46:39:f1:2f:75:15:74:
66:7a:dd:bb:98:04:4b:a8:54:49:14:1c:c9:b5:88:ef:70:a6:
05:ab:d0:bd:c2:13:7d:b3:18:2f:82:82:49:8b:08:74:39:a4:
d1:bb:41:81:49:63:4b:d8:b9:cb:4c:c6:35:c9:4d:19:f0:d9:
34:00:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:49 2026 by rpki-client