Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
File: q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json)
Hash identifier: 8oVSNj4ZQiPc3nTUse/wBWUEVRU84I4LO18jQepM+Wg=
Subject key identifier: C1:9D:A2:41:15:70:2E:9D:D2:42:E4:E7:C6:C0:21:D9:F9:87:F7:D2
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial: 019CADFE959454DC3F1BE31A365445924C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 10:01:08 +0000
Manifest this update: Mon 02 Mar 2026 10:01:08 +0000
Manifest next update: Tue 03 Mar 2026 10:01:08 +0000
Files and hashes: 1: OKR_E7TefcL1oDsyJAxJw_cLgPU.roa (hash: ss0bijG8zBZLgt7sSgduTwK4b0hk2Jl8W8BVKFPs9e8=)
2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: A8IwNPI/G0DVu1uVeoBQWE/BYZcx/E0TFV9xUrCPSHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:95:94:54:dc:3f:1b:e3:1a:36:54:45:92:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Validity
Not Before: Mar 2 10:01:08 2026 GMT
Not After : Mar 3 10:01:08 2026 GMT
Subject: CN=c19da24115702e9dd242e4e7c6c021d9f987f7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:32:e5:4d:4f:31:df:70:8b:53:79:c1:32:
c5:9c:d8:97:73:a0:58:9a:61:73:a1:ee:d8:73:91:
d7:7d:05:a7:ca:2e:f5:c9:4e:63:1b:38:45:ea:9c:
a5:34:92:51:f8:c0:e9:f7:f7:60:f7:29:7e:58:89:
00:8a:33:fa:df:56:20:a4:52:f9:fd:4e:da:c1:f6:
a6:c7:50:c6:a0:4f:be:37:91:39:d7:93:0b:0c:f4:
04:31:45:1d:e1:d1:f0:8d:bc:69:b6:77:25:22:c0:
b3:8c:7c:96:9a:08:db:a0:3b:b3:47:f5:09:30:2d:
c5:0c:89:e3:4b:71:42:ac:0d:97:e6:c5:45:b2:af:
42:31:f5:25:a0:7c:77:8e:0b:f7:91:3d:5d:7e:c9:
bc:b7:d6:95:53:02:5a:a7:4b:a0:97:67:e9:cd:a9:
cc:7d:e8:d9:3d:24:d3:d0:dc:bb:e5:0b:06:d1:4a:
91:2a:0b:15:07:ec:4a:fa:aa:d8:2f:5d:53:67:6d:
39:8d:29:c3:89:a0:24:e5:d9:50:c1:6f:c3:6c:87:
d1:61:21:dd:59:7e:45:a6:9a:6b:d6:1d:a2:8f:fa:
0b:0c:15:9f:fe:46:a9:00:6d:6e:79:16:db:48:ab:
46:bf:15:cd:9b:01:3e:88:ec:df:e0:b9:41:b4:ae:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:A2:41:15:70:2E:9D:D2:42:E4:E7:C6:C0:21:D9:F9:87:F7:D2
X509v3 Authority Key Identifier:
keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3f:f1:e5:4f:58:f0:af:9c:b9:04:2e:1a:8b:c5:27:1b:b2:
2b:8f:ee:1e:52:10:1f:a6:a6:90:cf:72:1f:48:31:c9:8c:f1:
7d:f6:ba:2f:86:31:33:ac:50:42:47:aa:f5:5f:d2:36:91:99:
f1:f5:48:ba:32:ca:e5:d8:81:04:62:b9:54:da:28:3c:50:00:
49:a6:ac:92:33:db:c4:9c:da:fa:23:b2:c9:3e:cd:32:02:bf:
9d:f3:f6:82:b7:8b:64:be:50:e0:2b:cd:62:a1:f2:ec:f0:74:
a4:c3:73:96:a2:2b:a7:f8:75:b0:cf:d6:0e:e8:34:ad:95:1e:
6d:53:bb:05:7b:4f:e2:ab:c2:98:8e:63:99:45:6f:3b:34:f5:
81:75:06:b6:8e:9c:5a:bc:43:8f:3a:ad:36:dc:cb:de:dd:43:
65:f0:3c:44:34:18:20:aa:0d:f2:4e:25:c8:06:62:48:15:fb:
60:23:8e:04:66:87:da:a5:3d:8b:e4:51:50:4f:ff:df:f3:8b:
19:08:b9:88:c9:9a:46:4d:71:34:2a:e2:88:a8:0a:61:ca:be:
5f:bf:33:02:c3:d8:d2:91:69:db:90:b8:36:a2:93:71:87:21:
d2:cf:3d:f8:56:30:dd:21:e4:b9:64:f4:0f:00:9f:0d:52:79:
f1:44:84:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/pWUVNw/G+MaNlRFkkwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZjBhODRmZjhmNTA1N2Y5NDkxZGVmYmU2YWQ1NWVlYWU5
OGNjMDYwHhcNMjYwMzAyMTAwMTA4WhcNMjYwMzAzMTAwMTA4WjAzMTEwLwYDVQQD
EyhjMTlkYTI0MTE1NzAyZTlkZDI0MmU0ZTdjNmMwMjFkOWY5ODdmN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51Qy5U1PMd9wi1N5wTLFnNiXc6BY
mmFzoe7Yc5HXfQWnyi71yU5jGzhF6pylNJJR+MDp9/dg9yl+WIkAijP631YgpFL5
/U7awfamx1DGoE++N5E515MLDPQEMUUd4dHwjbxptnclIsCzjHyWmgjboDuzR/UJ
MC3FDInjS3FCrA2X5sVFsq9CMfUloHx3jgv3kT1dfsm8t9aVUwJap0ugl2fpzanM
fejZPSTT0Ny75QsG0UqRKgsVB+xK+qrYL11TZ205jSnDiaAk5dlQwW/DbIfRYSHd
WX5Fpppr1h2ij/oLDBWf/kapAG1ueRbbSKtGvxXNmwE+iOzf4LlBtK4bPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGdokEVcC6d0kLk58bAIdn5h/fSMB8GA1UdIwQY
MBaAFKvwqE/49QV/lJHe++atVe6umMwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgt
OTQ0Y2ExYTgwYjE4LzEvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgtOTQ0Y2ExYTgwYjE4
LzEvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADT/x5U9Y
8K+cuQQuGovFJxuyK4/uHlIQH6amkM9yH0gxyYzxffa6L4YxM6xQQkeq9V/SNpGZ
8fVIujLK5diBBGK5VNooPFAASaaskjPbxJza+iOyyT7NMgK/nfP2greLZL5Q4CvN
YqHy7PB0pMNzlqIrp/h1sM/WDug0rZUebVO7BXtP4qvCmI5jmUVvOzT1gXUGto6c
WrxDjzqtNtzL3t1DZfA8RDQYIKoN8k4lyAZiSBX7YCOOBGaH2qU9i+RRUE//3/OL
GQi5iMmaRk1xNCriiKgKYcq+X78zAsPY0pFp25C4NqKTcYch0s89+FYw3SHkuWT0
DwCfDVJ58USE4g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:12 2026 by rpki-client