Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: CWrsXqr+7M7XvD97VNdRF0Mb0aJ9VvCK+6BAJyKeYgc=
Subject key identifier: C4:B2:8E:37:74:C2:89:35:D6:5E:95:48:BA:B1:36:28:7F:C9:02:5A
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 019CAB6B1E54450261CF3599A5B0C66ED8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 034C
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: pz8CoQ1N2M8bH21qMBTISpQnRdk.roa (hash: EBcWBMCcIbmPQ9/rGL1rZqapFT721I6YKN15f9JRiiQ=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: X+U/lyWUAODOL7yO088Hei5WjXns2PCSlhGaUr3LbUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1e:54:45:02:61:cf:35:99:a5:b0:c6:6e:d8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=c4b28e3774c28935d65e9548bab136287fc9025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:ed:1d:10:f0:fd:01:9f:7d:99:0a:ae:a3:
c2:d5:09:6c:a4:32:45:44:50:0b:40:ed:42:67:a4:
fc:91:f1:60:d9:fb:c3:5b:12:5b:a0:fb:5b:2f:65:
fb:a9:b7:7e:2d:95:98:8c:bf:e1:03:2e:d4:b7:62:
14:ff:87:5c:4d:65:7b:92:a2:d9:7f:c2:64:85:50:
5c:bf:4b:1a:47:7d:0c:b5:a3:cf:36:2c:ff:a4:f8:
d2:25:25:12:57:68:6e:47:8f:6f:d6:d6:b5:5f:ad:
ae:ba:ef:dd:d1:4b:66:2d:30:b3:7f:be:5c:77:fa:
63:88:0a:4b:08:84:aa:6e:9b:05:22:5c:5c:02:16:
92:7e:28:16:a9:85:04:1e:a6:b0:62:75:27:27:05:
d6:31:ed:b3:77:db:22:bb:27:27:c8:45:ee:c7:ad:
cd:24:e8:57:26:06:f3:59:5b:66:f5:4e:3b:07:13:
85:0b:48:98:29:80:e0:02:16:ef:e2:df:ee:e3:d3:
14:93:17:8a:5e:fd:49:33:a1:30:93:41:09:ce:72:
5a:40:71:08:04:6a:dd:e8:65:d5:7f:75:cf:d0:e3:
2f:35:5d:a6:bc:25:bd:9d:90:33:ab:af:58:fa:65:
00:b0:d9:4b:f9:fb:73:33:9b:98:20:14:96:cb:c6:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:8E:37:74:C2:89:35:D6:5E:95:48:BA:B1:36:28:7F:C9:02:5A
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7d:11:bd:81:2a:63:da:37:2b:f0:17:86:23:07:f2:93:46:
83:a4:89:06:d9:1e:c2:4a:02:44:04:3c:17:10:70:77:be:ec:
17:1c:9c:04:df:4e:07:17:5b:91:62:ca:c3:ea:a7:34:b8:ef:
1c:86:9b:79:14:a7:be:91:9e:cf:96:fa:da:04:88:16:cf:d7:
ca:17:04:3b:33:60:be:5e:71:83:c5:df:cb:e6:c1:a7:ff:a0:
b8:6c:f2:a7:0a:d7:b2:9b:35:72:58:8b:88:e0:96:bc:b5:43:
91:95:10:b9:f0:b6:fd:fe:d2:b0:c0:55:83:7e:e5:d9:86:10:
47:c2:d7:a9:5c:f3:6d:e6:48:49:1d:73:0b:38:03:da:02:f4:
4e:a0:2c:4f:a5:90:47:aa:c3:00:35:b4:91:49:d5:05:94:e1:
b3:cc:a1:cd:06:6c:75:cc:63:64:ef:ab:9e:8a:3c:33:ff:8a:
8f:d6:5a:32:58:7c:dc:c1:67:e9:31:50:33:8c:a3:df:69:53:
87:4e:bd:18:f5:19:dc:68:dd:3f:ee:32:e8:09:3f:e0:4e:5f:
8e:3e:59:69:e9:a6:a8:f1:6f:28:27:7c:c3:70:a4:73:c8:d9:
ca:54:25:00:35:78:c0:55:15:db:d6:8b:af:9b:29:0a:13:08:
bd:bc:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:42 2026 by rpki-client