Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: /DfjOgLi0mgRaxQockhHK28oY+N/+eMKjBL2MbryWhs=
Subject key identifier: 07:3D:C4:C4:88:3E:DD:19:45:01:AF:A3:42:09:20:77:3B:23:7D:6A
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 019CAA8F5FC4BDF4E45D81C23974BA56CFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 133A
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=)
2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: F18PQpFcNyj9Nh0RPj8l600XV4ElETJdOEEvMD/YPpg=)
3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=)
4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5f:c4:bd:f4:e4:5d:81:c2:39:74:ba:56:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=073dc4c4883edd194501afa3420920773b237d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:ad:b9:fb:0b:57:13:a9:c3:61:df:70:84:
b6:3e:49:29:37:4f:dd:95:24:94:98:e7:06:70:18:
3c:0a:bd:77:8b:f7:66:aa:2e:04:0a:93:50:a1:49:
da:bb:44:84:58:18:53:42:7f:16:17:8f:e2:f9:ac:
ee:c4:e0:69:93:63:18:44:80:34:32:fa:6c:90:87:
4c:fe:20:3c:79:87:e0:21:51:7a:60:f8:53:59:fd:
0a:45:c3:64:89:e4:d3:6e:5c:3c:bb:97:e8:c1:3e:
4c:76:e1:04:f3:00:32:a0:fd:a3:92:5a:53:f3:4a:
8e:47:43:2d:3e:40:15:e8:b1:30:cb:93:bd:a7:e1:
bd:99:6e:27:40:35:9b:01:f9:e6:9e:6b:f4:eb:b3:
9e:b6:e7:90:39:b2:71:ed:57:21:27:c0:60:1d:b4:
6e:97:bc:f5:6b:0a:a8:05:2d:aa:a9:5a:df:e5:4d:
24:63:22:61:9d:b8:92:5c:ca:fa:8e:46:5a:96:aa:
f4:67:e8:cb:89:fc:30:f3:2b:f5:c1:99:46:51:30:
42:6a:9a:fa:df:12:af:8f:74:88:4f:dd:f6:62:5f:
81:03:e8:c3:4c:ad:8f:ff:ee:bc:3f:3a:9c:de:2c:
c1:8e:a8:5f:34:2c:1d:e1:be:0e:c1:cf:3b:b7:d3:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3D:C4:C4:88:3E:DD:19:45:01:AF:A3:42:09:20:77:3B:23:7D:6A
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:87:d7:5e:66:e6:e7:19:8a:5d:c1:f6:79:2d:dc:cb:20:ca:
11:72:96:46:13:a3:98:3d:8d:2a:08:d7:ca:99:a9:1a:1f:21:
d2:96:af:38:96:08:3f:72:35:e1:6c:d0:2a:71:a3:2f:db:78:
da:4b:fc:1c:e1:f4:fb:7c:97:29:93:ab:1f:80:21:95:0f:f5:
61:4c:5d:ea:7a:e6:fc:4b:72:8e:e7:bc:82:86:ec:94:6d:d5:
f3:cb:49:30:59:bd:f5:b5:1f:46:b0:9b:7f:67:29:51:cc:4e:
7a:a4:99:08:53:a7:23:6a:c2:ad:a6:96:26:8d:0e:44:8c:c6:
97:ec:d0:5d:7c:23:98:e9:da:9d:d8:14:b2:b1:cb:88:fc:9c:
c2:10:0c:48:9a:74:98:15:c0:18:8e:9a:06:37:50:3b:b6:96:
38:87:bb:94:10:9b:70:83:05:41:c2:85:d5:86:f7:9b:71:0a:
9f:ec:af:df:e1:fd:1a:8b:eb:44:76:cb:10:ca:82:b6:5e:df:
ce:10:83:ba:8a:18:73:0b:00:4e:5f:15:2c:fc:f3:db:78:94:
59:e3:03:35:2c:23:16:b8:db:b1:78:fc:17:35:d0:97:50:f5:
fb:5a:64:13:25:28:69:0f:4c:3f:9f:c2:d4:d7:a5:45:98:a2:
d1:62:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:01 2026 by rpki-client