Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: 31kKwoM3wG7EZUxLVDhIfEFoL+PMl9rceKhw6bMuEFE=
Subject key identifier: 09:1C:73:CA:CD:B5:1D:B9:4E:7F:F3:F5:41:0C:E0:18:3B:F9:71:15
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 019CABD9F61547D1F3DBF8293280BF620A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: l8Y52p5aI63FDuq51m4qJ-mPHY4.roa (hash: wSpWuBqn1Tlul2t7+8SYMlOp535GnFPP8F8ir7MJTSU=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: 6DGO2KOtu57QpmStq1Pqk3c0JVedZd9vR0OVsYTjhaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f6:15:47:d1:f3:db:f8:29:32:80:bf:62:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=091c73cacdb51db94e7ff3f5410ce0183bf97115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:0b:88:95:17:9d:32:17:df:0c:ba:02:84:
90:b6:57:e1:20:1b:f2:83:7b:01:2f:dc:13:1f:65:
fa:cc:93:20:e1:f5:b4:7c:bd:3c:9e:a2:97:60:7f:
5a:bf:c5:17:90:1c:ba:ff:dc:b1:ed:dd:c3:98:d6:
e8:f5:09:ac:50:64:6c:2a:e3:e3:4c:e7:6b:33:27:
a7:a4:96:e4:94:e8:73:5c:1d:2d:40:b1:78:c7:6e:
55:50:06:b8:ea:0d:30:57:ca:e8:c6:95:ba:30:31:
c6:aa:30:ab:12:b5:80:24:ea:9e:70:2e:83:48:74:
e3:73:35:4e:03:3e:2d:6e:29:1f:e1:64:78:e6:fa:
6e:51:da:c3:d4:28:6e:8e:f6:32:d4:8e:15:c4:f6:
4e:e3:d6:99:8b:63:d6:a5:aa:e9:28:e2:6d:88:71:
25:c1:c5:26:49:d1:9f:87:ea:43:2f:af:40:1d:ca:
f4:ff:39:af:4f:d7:7f:3f:bb:46:f9:f9:a8:ed:06:
37:58:52:73:03:35:77:ea:57:56:1d:21:3b:8d:17:
2b:f2:75:e1:e9:3e:43:09:67:95:a3:14:4b:c5:50:
fc:04:70:cd:f6:b0:0f:d4:54:a8:4a:84:64:38:bd:
ad:1c:e6:ca:b9:5e:c7:ee:aa:b9:37:7e:a1:f0:3e:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:73:CA:CD:B5:1D:B9:4E:7F:F3:F5:41:0C:E0:18:3B:F9:71:15
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b4:36:2b:21:84:d1:b6:24:8e:5d:62:ea:64:3d:e5:80:0a:
7a:cc:e7:14:b9:24:d7:a3:96:c2:6a:62:dc:f1:49:7c:b2:c5:
69:a9:89:e5:47:e2:b2:50:13:f3:91:30:7b:77:67:d5:3a:02:
d1:88:f1:3f:86:b8:f5:4f:1c:bc:6f:74:13:ab:c4:b2:94:5c:
ed:e9:28:ee:4a:31:c5:1d:2e:53:6f:27:dc:0f:83:6c:54:d1:
d5:9f:15:d8:9d:2d:37:8b:74:7a:27:a2:da:04:cd:de:e5:ac:
bd:35:69:16:53:b2:41:db:0f:08:80:e7:b3:fd:9d:dc:8d:09:
dc:f8:ab:b3:1f:2a:ae:36:41:f9:94:88:d2:6b:93:0f:05:dd:
c8:93:c4:1c:24:55:1c:cc:9e:e8:d8:b9:6c:09:ab:19:00:46:
09:d8:73:fe:63:45:d0:43:e4:7c:15:bf:17:1c:3a:0e:39:9a:
d1:a1:92:85:db:ce:09:52:fd:ed:1e:f9:a4:f6:61:ce:04:71:
c2:c6:ac:1b:c3:6d:62:39:b0:5e:27:eb:f4:7c:b5:97:a7:5e:
38:7e:38:b6:e8:ce:22:89:f9:ac:a5:07:54:06:1e:7f:5d:47:
1d:44:00:07:f2:3e:f2:2c:4c:8c:cc:69:63:92:6b:99:f6:c4:
3d:3a:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:36 2026 by rpki-client