Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: Vdk5nBh3HhDI+94NAp/TMWRVM2ldHORQWGKCqzRGYIc=
Subject key identifier: E0:A7:61:46:BE:4D:A4:02:6D:3A:31:4E:4C:A7:1F:D5:E3:02:BB:B7
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019CAB6B632EA630C9FE4F171BCA76E5D42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: VuN139WFArxkxI93aMAqkC9L/HxCEhfJDqucZJA4wac=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:63:2e:a6:30:c9:fe:4f:17:1b:ca:76:e5:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=e0a76146be4da4026d3a314e4ca71fd5e302bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:4a:7d:b8:3b:7f:7f:c2:2d:13:54:a6:c8:
43:2f:eb:69:26:c4:16:e0:b8:61:7d:b2:c0:0f:3a:
62:23:40:a4:37:c0:b8:10:58:aa:25:5c:c7:ce:d9:
e8:28:97:2d:e5:14:25:11:ea:66:3d:42:40:14:e5:
ca:6d:1c:ff:52:89:e3:98:1f:71:b1:57:77:88:13:
f9:3d:5d:70:7b:d7:3d:0b:3f:4e:34:37:11:c4:c2:
b8:fd:97:5d:f2:ef:d8:f9:d5:69:43:aa:36:12:aa:
f9:a1:cc:ac:66:9d:8b:06:9d:47:ec:e2:41:26:2a:
80:ca:b1:2d:35:a2:48:d3:80:ab:01:d8:30:79:3c:
62:bb:f9:a9:93:3a:32:02:c0:4b:1e:fa:70:bf:18:
40:26:d4:80:0f:84:49:06:8f:19:80:32:67:e8:21:
04:70:ea:d1:0c:88:6e:f4:ae:b1:17:49:e6:38:e6:
f2:4e:30:68:79:16:96:5d:e9:94:b7:10:6b:25:0c:
d6:04:4e:7a:9d:06:79:55:ad:a6:a8:89:47:84:c6:
50:64:df:60:fb:d5:9e:56:2d:35:f6:17:90:e3:ac:
ab:4b:12:88:fb:f4:03:53:19:81:51:6e:ce:76:1c:
e7:37:cb:0c:5a:c7:72:4f:03:82:89:8a:cf:37:e2:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A7:61:46:BE:4D:A4:02:6D:3A:31:4E:4C:A7:1F:D5:E3:02:BB:B7
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7c:d1:c0:6d:dc:84:48:c0:53:47:c2:d3:bd:3e:88:30:f0:
29:80:5f:8c:5e:e7:24:af:26:22:f5:26:e9:e6:52:c8:8a:45:
b2:45:6c:ac:33:dc:ea:53:54:00:fb:2a:e8:b2:b1:cf:df:bb:
66:3a:03:38:2f:ea:7a:48:be:03:08:26:eb:90:1b:86:1e:71:
f2:ce:05:16:3f:2d:fb:52:46:60:ea:73:68:ab:d6:88:77:f0:
82:fa:57:bd:c8:a7:73:ec:4b:58:42:f8:39:45:61:45:da:98:
ac:0d:91:60:cf:b0:23:ee:53:84:5e:02:88:1d:43:f1:53:e2:
ba:66:03:4b:fb:d6:e5:27:8f:17:a4:06:47:bb:0e:c3:50:e8:
34:f2:34:9a:df:f6:a1:e1:01:70:39:39:4d:fc:59:d2:b2:09:
16:cd:f7:3e:64:d4:6b:e6:15:ae:21:5f:d9:ec:af:6d:24:2e:
df:3c:2c:11:07:13:d5:3b:d0:8d:f7:af:cb:21:7d:3b:cf:08:
11:d9:e7:f4:fa:bd:83:f5:6e:da:e7:96:77:bf:7f:25:28:eb:
36:68:f4:cc:d8:96:51:28:44:9c:35:37:5d:e3:d2:1c:f7:1b:
28:12:93:6c:4c:b7:46:17:cc:6b:df:b3:89:4b:97:b9:3e:4e:
c5:2d:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:08 2026 by rpki-client