Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: 2ycbu+LexcVR0nnWslth2fqIZku4WTzdN6YX2+2Lu5A=
Subject key identifier: 55:C3:D1:83:F0:D8:8A:40:13:A1:9A:9F:7B:57:8C:E1:C0:A2:96:A8
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 019CAE355BA0881FD1DCFE0C9F7E3182874E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1793
Signing time: Mon 02 Mar 2026 11:00:58 +0000
Manifest this update: Mon 02 Mar 2026 11:00:58 +0000
Manifest next update: Tue 03 Mar 2026 11:00:58 +0000
Files and hashes: 1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=)
2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: Ajf3iIJcsPoOqJPioz5mnrkBec11AR21cYBst+s07Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:5b:a0:88:1f:d1:dc:fe:0c:9f:7e:31:82:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Mar 2 11:00:58 2026 GMT
Not After : Mar 3 11:00:58 2026 GMT
Subject: CN=55c3d183f0d88a4013a19a9f7b578ce1c0a296a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:c0:6e:b3:40:af:65:69:92:36:1b:1c:3d:
02:09:1a:9d:65:23:78:85:85:05:37:8a:20:35:be:
15:07:69:44:f3:e5:f4:6b:a7:89:ad:bd:fd:ec:6d:
e5:0d:83:d3:fe:16:38:14:95:32:84:18:9e:12:fd:
f9:65:9f:a9:a2:c4:e3:ff:8d:e9:a1:da:21:6a:f9:
26:4f:05:92:c0:fa:ee:95:6e:18:ab:cf:5c:dc:f8:
e3:c5:6b:dd:fa:21:2d:02:56:54:df:f1:3d:59:18:
41:88:82:91:fb:c7:5e:55:b9:36:0d:2d:fb:8a:63:
c7:da:bf:1c:b9:f8:d2:a1:0e:ad:bd:f3:e6:a6:2e:
f4:fa:10:8a:a0:09:b7:7e:71:e6:26:9e:57:ac:6f:
28:05:5a:de:73:09:24:c7:45:01:a6:85:5a:76:c5:
d8:29:b3:9d:e2:42:10:cf:04:a4:65:75:03:39:5d:
64:e8:85:9c:11:df:d8:bb:ea:bc:a8:d5:56:d2:f5:
04:c6:7d:13:d1:89:0b:15:af:23:55:2e:46:63:d6:
67:a7:de:a8:32:e6:46:b2:11:56:6c:ba:7b:f3:41:
29:8d:de:61:b1:7b:55:4e:fa:cf:ab:75:95:e9:89:
26:ad:ff:96:d0:46:2f:a1:05:43:cd:af:e0:3c:b8:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:D1:83:F0:D8:8A:40:13:A1:9A:9F:7B:57:8C:E1:C0:A2:96:A8
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:21:16:7e:ef:17:18:62:e0:ca:b4:2a:47:4e:ee:bd:87:d8:
3c:2e:9b:fc:d5:ef:e6:3f:07:0f:6c:a1:37:1e:1a:f5:fa:8b:
88:46:62:cd:c9:d2:9c:25:4a:c4:aa:2d:b7:46:41:80:b7:e2:
04:89:0f:99:d7:0e:64:3d:7d:4d:fa:f3:77:0f:31:74:18:9a:
df:79:4a:ed:a6:f1:1f:7c:ba:80:da:b5:e3:d7:58:e2:7c:b9:
25:64:95:8b:dd:d7:23:c9:eb:d8:08:ca:06:f7:84:6c:b3:fd:
23:d2:fd:f5:ce:4d:96:41:59:f5:2f:5e:3b:5b:a3:fd:ba:ec:
d2:f2:fb:88:48:b5:1a:1d:43:d8:6f:a4:bd:0f:9e:d9:c1:dd:
f0:5f:31:90:b8:ac:a2:66:dd:dd:e3:95:de:a0:f2:6a:30:e1:
9f:54:77:d0:52:67:d5:8d:37:5b:67:ea:3f:7b:77:05:bb:61:
12:40:eb:6b:07:e2:6f:82:b4:00:d0:19:9e:58:ce:b6:9b:31:
05:de:2b:6a:d5:7f:75:49:91:bc:bb:51:25:3a:87:4e:da:7c:
c5:72:5b:0f:97:ce:01:91:ce:5a:20:d0:e7:c6:57:1b:af:54:
e9:8b:89:05:d6:23:c3:d3:52:de:05:40:65:67:c2:00:2b:ae:
17:58:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:18 2026 by rpki-client