Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier: emM2LQQYaRwM0NJl7J98qNCLz90cmKh8IHDIe1+WlrA=
Subject key identifier: AB:AB:77:2A:EA:CA:08:70:FD:C8:69:BD:6C:BE:BF:4C:64:90:F3:EA
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019CAC0FDA48B6536951B188477089502E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number: 0C32
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: CzW4u1rrcKCYl0G03vqU8cBXz94.roa (hash: /yz/XIWJQxzaieHj+TVvT11gZyxGejhib5PYK9y3aXc=)
2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: +6BGVWOdygaqgt+pTOBL/82VQ2mpcY2xZ2rod4wQe00=)
3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:da:48:b6:53:69:51:b1:88:47:70:89:50:2e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=abab772aeaca0870fdc869bd6cbebf4c6490f3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:dc:ab:7a:08:d0:3a:f7:a1:dc:39:0a:d3:
a3:1a:48:10:27:85:e1:c2:84:4b:61:20:9e:04:d5:
1a:95:e8:c1:fa:b0:3c:5a:03:70:6c:1d:1b:6b:31:
2a:65:24:01:a2:f9:60:02:83:e3:ad:f4:ba:7e:5b:
76:3d:d8:bf:0e:5b:c7:30:4c:bd:38:97:53:f1:4d:
a3:51:df:3c:dc:ea:94:fc:0b:f4:e9:8a:5d:2a:68:
78:5a:ba:a3:8d:7f:27:60:30:8d:2f:6a:a3:13:03:
e0:10:93:31:0e:2c:9d:cc:84:8d:db:95:e4:bb:e8:
a6:42:05:59:1d:3d:72:55:53:52:ab:6e:f5:f6:83:
eb:64:bd:36:73:44:82:c7:94:f9:9d:bd:e4:98:ea:
10:99:95:8b:a0:f2:e8:57:fb:cd:7d:73:e7:9c:71:
b2:16:3d:b3:29:6b:46:52:3a:5d:3b:d0:88:0f:e8:
e4:ac:6c:3f:8f:f8:d8:b2:21:6f:fc:bb:7b:8c:b6:
91:31:fc:aa:f6:f9:25:36:b6:0f:6e:de:c9:93:51:
be:34:2f:06:d3:f4:f5:29:90:a5:64:cc:4c:d8:0b:
f8:dd:72:79:d7:d0:d4:e4:0f:1c:a8:00:75:91:27:
55:a2:e7:9d:58:e3:26:cc:04:99:54:42:d0:fa:a5:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:77:2A:EA:CA:08:70:FD:C8:69:BD:6C:BE:BF:4C:64:90:F3:EA
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d3:6c:cf:46:a6:4b:50:ea:ae:06:8c:c6:5e:25:38:e9:73:
80:f8:04:79:d5:a5:d2:ee:b2:2c:ba:a0:ef:2f:87:8d:a0:60:
97:67:76:a2:84:46:2a:d2:a5:75:62:fd:fa:af:04:7b:a7:94:
40:14:e1:e3:29:08:45:f9:fa:63:1f:28:0c:76:14:8c:23:18:
15:26:b2:1d:8e:f1:a4:9c:97:d1:c5:6a:88:97:82:61:b6:3d:
0b:8b:ab:1c:43:a8:76:12:70:b1:83:37:41:be:f7:70:1f:41:
b6:d7:94:21:2b:09:8c:28:31:c6:76:0e:75:6b:74:49:75:a0:
02:99:79:54:c1:c2:3d:85:74:bc:27:0c:17:3d:06:89:0b:b9:
8d:60:7a:4a:9c:d7:ae:88:b7:90:c5:90:f6:a4:71:7b:5b:53:
a6:2b:ae:ff:c6:c0:8b:cb:59:2f:15:60:c9:60:8f:d1:02:74:
d7:44:69:ba:56:4d:34:e0:92:6b:42:14:ed:2e:f4:ab:0a:ed:
20:ec:ae:74:48:18:43:b2:2d:d9:ab:e8:63:85:f6:cd:60:c9:
b4:b1:54:1c:66:3e:87:38:f5:70:8b:e7:6c:0d:06:93:f6:72:
06:f2:3a:8d:59:a0:a8:64:14:88:5c:ca:21:39:c1:77:2b:c3:
6f:7c:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:28 2026 by rpki-client