Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File: p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier: /lFes3DzVqgdzjlDPKPpONC0NiJkbjFGKro3CubZKok=
Subject key identifier: 1C:0F:2F:E6:6A:08:2A:4D:73:9D:E9:2B:80:CB:F3:FC:EA:D5:2E:3E
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial: 019CAB340B59AFBB1DBF2B932FDC5ECB3931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number: 1598
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: A4lpGLBnbJPZu92NPkeOWAB2LBNAAKe3heVACvkhIa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0b:59:af:bb:1d:bf:2b:93:2f:dc:5e:cb:39:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=1c0f2fe66a082a4d739de92b80cbf3fcead52e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:bb:e6:f1:9f:e9:30:d3:b9:64:3a:4e:ea:
31:47:e0:21:50:c7:5c:35:d1:ce:8a:7b:77:b6:e7:
10:a5:7e:27:ef:05:6c:7c:54:58:54:52:4c:2b:db:
db:5d:6c:1e:c6:b8:c6:33:75:26:b8:ca:e9:99:cf:
1b:3c:88:60:52:f8:15:6e:47:a1:0e:63:dc:8c:1c:
38:7a:5e:8e:ea:93:77:87:ef:ab:c1:1c:ac:f5:a1:
85:27:d1:7d:7c:f9:fc:ee:ac:b8:8a:f6:23:5e:d5:
64:28:56:c8:4c:26:d8:e0:01:ee:ab:6b:a2:d6:27:
9b:0e:14:52:e0:bd:97:56:85:d0:66:71:00:6a:2c:
a5:ef:e6:07:3a:7e:c5:60:9d:19:1f:a3:b2:e1:57:
b8:44:90:2c:61:85:73:f0:9d:2a:eb:e8:4d:e7:c5:
63:83:e1:49:4c:d8:9c:b4:36:ee:38:c2:8b:2f:e3:
f4:ce:59:ea:c6:47:85:6f:32:97:89:70:97:4a:b8:
de:45:8b:90:a9:5f:e5:93:96:89:6d:ba:32:b8:de:
17:ab:7d:32:48:70:5a:b1:6d:a7:96:00:08:00:4a:
09:57:dd:56:0c:b3:a6:0c:8c:b3:28:b1:ad:9e:e6:
ee:0c:b7:06:13:48:9b:95:32:c3:9d:87:bf:96:6c:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:2F:E6:6A:08:2A:4D:73:9D:E9:2B:80:CB:F3:FC:EA:D5:2E:3E
X509v3 Authority Key Identifier:
keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:11:1b:e5:85:d9:ca:a7:a2:9d:e7:a8:f1:71:b8:09:fd:0e:
ef:d5:0b:a5:69:27:d8:b2:d3:8e:d2:be:43:0d:7a:9e:b4:38:
f7:13:64:b8:f1:17:18:fd:2b:e4:58:8b:95:ec:22:ba:0a:ed:
8f:e2:79:72:83:52:7d:5c:dc:ff:b2:81:09:e8:97:15:65:3f:
a6:6a:2e:74:28:80:69:6a:a4:43:8f:dd:a7:27:c6:f9:d1:6d:
8a:96:17:47:ea:34:21:12:0e:90:bb:7b:19:22:24:f5:5e:44:
95:18:83:37:82:2f:5e:ec:94:27:78:49:95:77:3e:a3:59:e2:
71:13:ba:61:95:19:fa:10:b3:20:90:55:11:1b:24:4d:f5:2f:
15:44:84:08:35:80:4f:47:07:d7:82:0e:87:41:48:31:c8:5f:
56:22:3f:c2:b1:3d:f3:a6:fb:2e:24:19:69:0b:7e:12:a6:8e:
b5:40:98:f1:82:74:5d:49:ab:50:b0:53:7d:59:0a:64:91:ac:
dc:26:46:db:e1:3c:2a:a2:b0:01:de:c2:4a:29:2d:16:34:03:
f9:70:5f:92:64:3f:e5:e3:e5:15:40:94:78:78:fc:35:a7:32:
a9:2a:1a:b9:cf:29:f4:62:00:e4:09:5d:c9:f6:b2:6e:20:e7:
61:89:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:36 2026 by rpki-client