Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: lmLkyU64G418lOIxloxXJxHD6HzdIysM0f4+C9hSHDU=
Subject key identifier: B6:F1:37:20:A9:C1:09:B6:C1:48:B9:EF:CD:A3:C9:DA:6F:DF:68:22
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019CABA25D9A97799C1F71532E8F3704E7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: Dn0U1UkEwofbtUcVAwqJYawShmuDOu6y1IfM8xPzPHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5d:9a:97:79:9c:1f:71:53:2e:8f:37:04:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=b6f13720a9c109b6c148b9efcda3c9da6fdf6822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:3c:f8:99:f6:52:ff:f2:c9:2a:c2:b8:cd:
9f:2a:25:62:70:33:47:26:6a:0c:93:3b:6e:f0:51:
54:bf:e3:45:9c:44:cc:8b:e0:76:c1:f6:13:47:c5:
f8:d5:9d:e9:2b:ea:bd:cc:67:ca:85:d4:74:09:b8:
f2:f1:5f:7d:52:e6:64:96:00:3b:87:6e:19:10:2e:
a7:3d:ee:0a:8f:71:88:c6:75:1b:33:88:78:7b:7e:
18:da:08:07:08:10:d2:3d:5c:32:60:49:31:c7:b8:
b9:c2:81:d4:90:60:7e:fb:dd:6d:89:e7:b9:64:51:
fe:8c:75:1d:fe:25:ce:a4:8e:f9:e7:aa:67:db:f3:
ba:50:28:e7:42:8c:4c:fd:52:27:73:12:08:ba:6e:
fa:38:be:4e:c8:24:ec:26:ca:f5:ab:d9:c4:89:ca:
0b:45:37:d9:9b:64:13:a7:cf:67:df:fc:09:ae:08:
92:00:78:b6:18:1f:3e:df:d8:51:1b:e3:7e:74:79:
c2:14:b8:40:69:ef:30:d2:bc:24:d1:0f:6a:52:c9:
60:59:b2:ed:d2:e1:69:44:67:a1:8a:38:60:65:5a:
60:73:0b:ec:62:f8:72:f4:42:d0:a1:fd:6f:c0:cb:
03:18:c9:3e:37:c7:45:cb:2d:62:1e:fb:aa:49:fb:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:37:20:A9:C1:09:B6:C1:48:B9:EF:CD:A3:C9:DA:6F:DF:68:22
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3a:7f:87:63:2d:dd:35:c5:74:e6:1f:21:8c:a5:4c:54:65:
e9:13:5e:19:a9:12:1e:3a:ee:1d:12:98:a1:25:6d:e9:1e:4e:
56:ae:8e:c7:8f:52:83:ea:83:bf:a0:3d:ca:97:b5:3d:4b:b7:
48:c0:00:c9:b0:d4:a0:37:f8:fb:b3:7a:aa:55:95:ca:5d:d1:
a0:70:3c:2b:2e:01:dc:3d:08:a5:03:c3:55:73:a8:bd:4f:9c:
af:58:c0:14:3a:7c:45:84:05:4b:57:d2:5b:0f:ac:4c:11:1d:
25:d2:74:ae:47:fb:a1:24:40:1c:86:b3:69:d4:06:dd:c4:7f:
b2:79:c6:ab:aa:c5:31:c4:65:43:33:7b:98:5e:e6:b5:ce:dd:
02:55:5a:b0:13:97:0f:6f:67:ec:9a:0b:78:69:ef:d1:dc:67:
b3:ad:f6:2d:30:85:61:f2:76:70:4c:ab:80:c2:3d:24:b5:a6:
6d:3b:47:54:b8:b5:a5:d0:36:04:6b:84:38:80:f8:23:51:d9:
47:23:d9:48:27:40:1b:aa:34:e4:7d:3f:7c:7a:af:57:fa:5d:
58:c0:6e:b8:b6:7d:2b:15:e8:6c:3d:ff:03:4e:81:e6:82:d7:
ea:83:17:3f:09:f2:d4:ca:96:d4:98:df:b3:7e:81:72:8b:e9:
d6:14:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:06 2026 by rpki-client