Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: MP7d0YEiUq0dyhcPAXAy6zaNe+8R9G45J5WIrJLyHK0=
Subject key identifier: 5E:ED:3A:D7:BA:C1:10:6D:A4:A7:7E:B9:27:6F:E9:1A:73:71:10:DC
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019CABD96AFA99F13FFC6588A6427CAC22D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: 5E
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: dwVhAbQ1kZxWVn7X5GVByg8tXWAiA02gH12xKetvkEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6a:fa:99:f1:3f:fc:65:88:a6:42:7c:ac:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=5eed3ad7bac1106da4a77eb9276fe91a737110dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:26:f5:87:ec:c4:02:2a:e8:48:c0:91:77:
e5:cc:a6:9f:04:57:0c:bc:dd:6d:9a:00:cf:d5:d0:
8c:99:33:9b:f3:16:62:f3:fe:15:25:01:37:28:c6:
1c:2f:4b:9a:28:85:3e:89:be:b3:97:68:6a:f2:3c:
1f:ec:69:72:fa:c1:43:55:12:ff:74:ab:6f:fc:93:
89:42:0e:a6:4d:e4:2f:12:63:5d:87:14:c3:ee:1b:
44:ed:5e:a1:af:aa:d4:e6:ec:86:f8:d7:15:7b:f8:
73:c0:f5:72:27:ae:ac:5b:d8:9e:2a:d0:d4:17:dd:
85:e7:30:ff:a1:bf:04:97:97:b5:e7:3a:d3:e6:4f:
d0:e7:37:0c:a2:18:f8:47:1e:c1:b7:ec:e7:61:e1:
f4:42:ff:80:f1:a9:c1:17:d1:48:3b:59:c7:e2:bd:
24:c2:1d:9f:37:27:a8:ec:44:87:3f:5f:a1:64:0e:
db:d9:04:48:a8:0a:a1:e1:4b:25:17:36:9b:12:a9:
f2:3e:7b:5e:67:8e:bc:25:96:24:8c:f5:9e:27:f0:
49:ff:a2:a9:ba:51:b9:eb:18:9b:e8:0e:8b:cd:0a:
cc:20:7c:4e:9b:65:de:78:50:d1:13:e2:87:b7:66:
a7:80:d1:4b:ae:c5:cc:f4:84:4a:97:31:af:85:a1:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:ED:3A:D7:BA:C1:10:6D:A4:A7:7E:B9:27:6F:E9:1A:73:71:10:DC
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:55:9a:57:8e:87:d8:a7:46:72:f3:93:15:06:4b:55:35:e7:
da:a1:7d:c7:1c:76:18:c0:30:dc:47:e7:e0:1c:1f:ce:25:a2:
43:f6:5c:55:51:ab:bd:b2:d9:18:30:cf:37:a2:b7:50:f2:97:
c6:60:71:3f:e9:df:ff:ed:51:70:85:bd:ae:1d:d3:4c:21:1d:
7a:f6:03:a9:c8:c3:49:0b:5d:ec:23:f9:cb:53:1b:88:96:8d:
89:85:94:cd:0e:e0:01:41:70:25:10:66:89:5f:9d:cc:7c:14:
ca:7e:78:af:f2:b3:c1:38:b7:3e:61:68:3a:33:e6:03:b9:45:
28:db:f9:19:7e:b7:46:fc:8d:f1:ef:20:4e:77:d7:49:cc:0c:
78:66:05:15:8e:80:e2:17:8e:9a:83:e8:61:9d:84:06:b6:6c:
8c:0d:e2:83:06:ce:93:eb:d5:65:97:71:cd:a4:43:25:85:ec:
c9:94:6d:7c:f1:fc:a4:10:2c:50:68:26:3a:02:e7:4e:6e:7c:
93:2d:6e:ef:7f:55:d9:ea:9d:c4:85:04:2e:35:a0:27:5d:a3:
65:9b:f2:19:24:6e:1d:93:c5:47:43:f1:e7:d1:89:70:f6:74:
50:64:ff:6c:06:3e:f0:48:61:0a:c0:f2:92:dd:61:19:da:7d:
6d:19:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:10:58 2026 by rpki-client