Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File: dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier: sKksE4edBNdeK2diEQoq7xRdHAFI+rjpXX/qa5AtU2k=
Subject key identifier: B5:39:CE:24:5E:2E:E5:D5:98:9D:9B:CA:4B:05:91:33:85:28:02:87
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial: 019CABD9EC4BF158F193137BC7A7A482C9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: 5iGXFd8bZG+Y9c8Ga/rtY16MN/IFAYyF+FB0xKuOMN0=)
2: wVQATVneJGNgeJdEAAt8JoUma-o.roa (hash: 0T7EKoEIVpeyvaEceVoNM5TEKal0WHNVbKVS5qTgZTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ec:4b:f1:58:f1:93:13:7b:c7:a7:a4:82:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=b539ce245e2ee5d5989d9bca4b05913385280287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:54:5d:64:c5:03:f1:e7:64:53:d5:f9:64:
5d:f1:c8:b2:1f:11:e4:b4:9b:43:60:14:3e:a4:75:
d1:76:78:8d:fd:96:40:ab:c0:c2:ca:41:9b:a4:56:
88:a3:24:f9:08:70:ee:39:ba:45:9f:5c:f2:f6:fc:
b1:c2:97:66:55:c9:e0:04:5b:2a:5d:bf:db:64:95:
54:73:bc:53:67:f8:4d:51:1b:55:21:af:08:95:0d:
2c:e6:cb:08:5b:81:38:3a:e7:b0:a9:56:99:eb:ea:
33:9e:32:00:6e:d6:6c:73:70:c6:6f:b2:ee:49:b3:
6b:92:a8:78:c0:1d:1b:37:bc:27:98:9d:57:ba:81:
f4:76:84:94:d5:46:f4:c7:f2:a4:f7:f2:1d:ae:42:
44:ce:25:26:00:3b:1a:a6:6a:78:4e:c6:bf:c0:c1:
00:17:5d:7b:85:b7:b8:17:25:ef:7f:d7:e4:37:5b:
0b:3c:2f:7c:ca:c5:3b:df:44:fe:7f:2f:85:ac:ab:
7e:42:36:1b:3d:50:5d:89:ff:57:83:be:c3:40:a6:
91:84:bc:4a:4f:0e:95:52:8f:71:f2:18:40:7c:72:
1b:9c:aa:d2:e4:40:98:14:fc:48:aa:fd:e2:6d:f1:
22:2b:45:98:0e:ff:21:49:5f:6c:b8:0a:f7:23:5a:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:39:CE:24:5E:2E:E5:D5:98:9D:9B:CA:4B:05:91:33:85:28:02:87
X509v3 Authority Key Identifier:
keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:65:04:0d:a8:86:0a:30:19:65:8b:80:a3:08:f1:83:01:
1d:b3:73:8a:ed:de:36:e9:be:08:36:2b:1e:a4:d5:a3:98:05:
6b:d5:96:27:e3:49:a0:55:c5:2d:dd:97:ed:2a:80:15:cf:94:
2a:c3:c0:f9:4a:02:d1:42:ec:80:d2:61:77:e9:b4:5c:ef:72:
37:89:4f:87:e5:74:4f:c6:35:63:22:36:46:22:63:41:4c:d4:
a6:1a:97:fb:d0:c9:36:db:5f:b4:e4:56:96:25:17:1b:7b:97:
70:67:f1:be:e1:58:d3:4a:34:0a:c7:55:c3:7a:6e:b9:ff:34:
67:c3:ed:58:e8:02:48:90:28:68:74:bc:54:62:9c:cf:be:09:
9c:b9:7a:41:36:ee:e9:5e:8d:29:39:15:85:2f:26:76:6b:0a:
b7:71:65:c1:d3:ce:0d:23:7e:4a:13:b6:59:94:88:49:6e:e4:
f7:a6:f9:4e:fe:91:55:53:8c:cf:18:d0:29:19:1b:cd:4f:e5:
0d:cc:e3:16:a4:ae:6d:64:7c:5b:06:b3:ae:75:b7:dd:c3:9d:
58:3f:e2:12:fa:b4:c5:30:73:fa:24:66:aa:e3:f1:0f:92:45:
ed:e1:1d:ef:02:cb:5b:11:09:96:30:d6:c9:bf:d2:50:02:ad:
7a:b4:fc:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2exL8VjxkxN7x6ekgsnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YWE1MWYyMDE0ZmEwZmQ3MTE3MDY5ZDg4YTY3OWYxNjcw
YzMyYTQwHhcNMjYwMzAyMDAwMTUxWhcNMjYwMzAzMDAwMTUxWjAzMTEwLwYDVQQD
EyhiNTM5Y2UyNDVlMmVlNWQ1OTg5ZDliY2E0YjA1OTEzMzg1MjgwMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDhUXWTFA/HnZFPV+WRd8ciyHxHk
tJtDYBQ+pHXRdniN/ZZAq8DCykGbpFaIoyT5CHDuObpFn1zy9vyxwpdmVcngBFsq
Xb/bZJVUc7xTZ/hNURtVIa8IlQ0s5ssIW4E4OuewqVaZ6+oznjIAbtZsc3DGb7Lu
SbNrkqh4wB0bN7wnmJ1XuoH0doSU1Ub0x/Kk9/IdrkJEziUmADsapmp4Tsa/wMEA
F117hbe4FyXvf9fkN1sLPC98ysU730T+fy+FrKt+QjYbPVBdif9Xg77DQKaRhLxK
Tw6VUo9x8hhAfHIbnKrS5ECYFPxIqv3ibfEiK0WYDv8hSV9suAr3I1pTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU5ziReLuXVmJ2byksFkTOFKAKHMB8GA1UdIwQY
MBaAFHaqUfIBT6D9cRcGnYimefFnDDKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUt
MjUxZjVkY2U3ZTRkLzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUtMjUxZjVkY2U3ZTRk
LzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABitlBA2o
hgowGWWLgKMI8YMBHbNziu3eNum+CDYrHqTVo5gFa9WWJ+NJoFXFLd2X7SqAFc+U
KsPA+UoC0ULsgNJhd+m0XO9yN4lPh+V0T8Y1YyI2RiJjQUzUphqX+9DJNttftORW
liUXG3uXcGfxvuFY00o0CsdVw3puuf80Z8PtWOgCSJAoaHS8VGKcz74JnLl6QTbu
6V6NKTkVhS8mdmsKt3FlwdPODSN+ShO2WZSISW7k96b5Tv6RVVOMzxjQKRkbzU/l
DczjFqSubWR8WwazrnW33cOdWD/iEvq0xTBz+iRmquPxD5JF7eEd7wLLWxEJljDW
yb/SUAKterT8sQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:39 2026 by rpki-client