Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: LtKLILqcmJKasGUK9xfauh/HDGI+PBmH9kWexQtLQNg=
Subject key identifier: 7B:48:84:99:79:7D:21:3F:9E:45:88:2D:73:D7:B2:C8:EE:5E:9A:46
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 019CAA582557947F7E38C79FA6B52B2EB9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:29 +0000
Manifest this update: Sun 01 Mar 2026 17:00:29 +0000
Manifest next update: Mon 02 Mar 2026 17:00:29 +0000
Files and hashes: 1: e9ATf5sPxhIIrZkXrfrTWItTCA8.roa (hash: 9bYZXPWqJ0NbEhPnRTTZ2nAWZSD7VDe4KmSotczV1Og=)
2: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (hash: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss=)
3: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: RnE2SNvNRPBX819GH9ZZI+uz0qHzJrU7Na2mNgpZ654=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:25:57:94:7f:7e:38:c7:9f:a6:b5:2b:2e:b9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Mar 1 17:00:29 2026 GMT
Not After : Mar 2 17:00:29 2026 GMT
Subject: CN=7b488499797d213f9e45882d73d7b2c8ee5e9a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:76:fd:fc:bb:4e:79:b0:4d:6b:44:57:43:
96:4a:75:87:7c:98:19:ac:9b:c7:3e:f9:70:5d:af:
c7:6e:f7:ed:c1:da:52:bf:86:45:0a:d0:1c:1a:73:
a6:ab:70:fa:be:8b:50:ed:fa:fc:f8:20:09:e0:a1:
43:b5:4f:b0:94:bd:b7:47:ee:35:b4:ec:b1:92:a8:
77:e0:00:e6:4c:39:d2:2d:8f:18:0a:1f:f0:c1:d6:
34:7d:e9:46:18:31:ad:25:83:0f:64:11:e3:f0:d0:
cb:7c:b0:eb:f4:fa:15:83:bf:57:2d:c0:9a:95:03:
4d:64:fe:a8:9a:9d:05:37:96:f7:0f:59:d0:d7:d6:
67:0e:79:1a:97:32:61:a0:4b:21:68:1d:08:66:94:
f9:e6:a0:bb:0f:4b:83:34:23:37:d1:43:de:90:77:
f5:0f:84:28:34:7e:2f:d7:22:1c:df:08:ad:d8:08:
0d:fa:1d:11:e3:5a:d2:fa:76:00:2c:7a:5b:ea:4a:
d6:c2:b8:01:eb:e1:53:c6:62:ab:80:35:0b:b4:4c:
c2:d6:30:67:ae:da:dc:cb:aa:d8:ec:9c:88:cb:0a:
6d:a7:c1:f8:83:10:e0:9e:14:6a:a8:33:13:3d:d5:
9a:e0:7c:1e:50:a4:83:19:cc:28:b6:3e:90:3a:c6:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:84:99:79:7D:21:3F:9E:45:88:2D:73:D7:B2:C8:EE:5E:9A:46
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:1f:3a:25:dc:6b:6c:c0:da:cd:36:42:a3:07:d8:50:38:
04:92:a7:99:c1:18:cc:8f:c7:64:df:ae:d2:08:08:58:33:b5:
54:7d:c5:90:1a:5a:e4:33:8b:c1:e1:56:f6:c4:9a:4d:07:f9:
a9:43:ba:7c:39:8d:a7:c7:0c:a3:94:e0:dd:97:67:35:73:2e:
8b:1c:98:0c:6b:e5:38:03:ce:3c:c8:c6:43:d6:23:a8:cb:61:
d1:9f:51:cd:0b:87:5a:cc:1e:aa:78:e4:72:84:69:47:51:e5:
31:b7:7d:45:39:09:af:13:8c:70:c2:a3:97:28:40:94:2f:3d:
33:d2:b4:eb:ca:f5:71:8d:f2:b1:52:87:9d:f6:39:0d:7c:e2:
89:1d:f4:1f:e7:bb:0c:1d:ca:96:a5:84:1f:f0:d7:2b:fb:f8:
39:85:3b:88:05:ee:15:91:89:5e:97:f5:4b:9f:c6:1e:a5:6b:
34:c0:d1:2f:5d:51:68:bb:14:00:ec:1f:47:ea:e5:b8:71:cf:
ac:19:e7:23:95:95:b7:73:b0:46:3a:bb:49:bd:e0:5e:e9:68:
e6:55:38:fc:6d:c8:99:88:c5:9c:1a:c5:69:e7:5e:7d:44:87:
c8:7b:bb:46:b7:32:35:e8:46:04:df:42:d6:ad:6e:f9:56:63:
e6:d6:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:10 2026 by rpki-client