Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: eEZWku5QacEabXFJ6dw+l+gqg4gAsErbGQRqN3kvFDc=
Subject key identifier: E6:2B:82:C2:4A:AA:F2:1D:82:E6:47:E1:71:3E:AF:0B:BC:F6:54:28
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019CABA24C52CAE67A34D0A10F2EE52F69F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0E79
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: RTpAswz88izfSMqZzYbZokovV7StcmFUGW15NeSVBYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4c:52:ca:e6:7a:34:d0:a1:0f:2e:e5:2f:69:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=e62b82c24aaaf21d82e647e1713eaf0bbcf65428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:ec:95:d5:7e:12:bd:cf:e5:2d:d2:4d:01:
6b:a1:f7:0b:de:30:6e:9a:ce:60:6b:e2:fc:04:dd:
8f:c8:e9:b0:29:0d:91:e4:b5:35:9e:c6:b3:a9:5f:
01:6a:e4:dc:6f:5d:49:2b:3a:eb:64:cb:7c:e7:39:
4e:1c:44:ec:f9:78:95:a9:b9:c5:00:a7:a4:dc:0c:
c7:4d:a5:ca:3b:16:bf:25:ea:f6:63:af:1e:07:85:
98:18:02:9e:43:bb:9d:08:d4:f5:d1:4f:c1:fb:31:
c5:0c:07:6a:e8:6e:a2:ff:95:7d:e2:f2:13:34:68:
62:89:75:2f:c4:bd:08:24:cf:70:85:2d:9a:18:ec:
79:af:37:97:1e:69:88:87:9d:c7:18:13:a1:48:ab:
45:73:df:dc:a0:be:42:40:94:e5:31:26:93:f2:8b:
b9:97:98:0b:c4:ec:1f:62:50:d0:87:be:54:41:bf:
34:6a:ac:19:3b:65:68:27:fe:ab:91:20:c7:86:a6:
7c:57:15:92:f7:5c:40:fa:78:51:2f:ae:ef:5d:86:
74:d5:3b:88:47:bd:14:87:68:e0:d4:92:83:35:58:
48:70:92:03:40:96:23:86:2e:4c:85:fa:3d:00:b7:
64:56:3d:88:41:ca:a7:bf:9c:14:17:1f:5e:ca:62:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2B:82:C2:4A:AA:F2:1D:82:E6:47:E1:71:3E:AF:0B:BC:F6:54:28
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:f4:65:f4:6d:da:8b:14:53:57:69:e2:81:b7:29:a0:4c:
bf:0b:20:97:2d:ee:90:30:f5:81:90:96:5c:37:ff:14:2b:08:
d8:c2:b8:b7:35:9f:e4:48:5c:57:78:f6:97:c0:f9:3e:40:f7:
db:06:73:36:ff:31:57:ad:bb:19:06:f0:8d:cd:b2:7d:b1:dc:
9a:95:0c:9d:d7:14:30:4d:05:ad:b4:41:0a:e5:86:d1:48:e6:
04:ef:04:43:5f:31:45:f9:80:d1:46:61:de:59:8d:c7:5b:ce:
23:3f:e7:5c:80:da:e0:23:7e:af:c2:18:64:d0:32:3a:7e:2e:
ee:95:17:a8:8d:4e:58:a3:28:14:ba:fb:c8:be:d5:1d:31:e3:
52:dc:4f:c6:e3:dc:b9:ca:35:ea:7b:45:04:03:8b:1c:2c:86:
31:6e:d0:fc:b6:77:4b:ce:92:ec:b6:cb:1d:63:2d:0a:15:f6:
c6:e7:14:ce:be:70:7c:75:0e:8b:ca:c0:d5:31:e2:aa:2c:c5:
e2:bc:10:8a:5c:27:12:d1:08:96:98:9c:e2:57:ad:cd:f2:43:
96:dc:55:23:e5:b6:5c:07:b7:06:6c:7f:d4:01:29:69:8a:d0:
1a:48:6b:3e:4f:41:9d:7c:a8:15:a0:24:ce:e1:ba:22:1a:33:
bc:dc:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:43 2026 by rpki-client