Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
File: Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft (raw, json)
Hash identifier: hVRvywR5yCQmu+CPciypWmhFuYA4Y5SCWgkHEdpZYnU=
Subject key identifier: DA:DB:7F:F1:89:72:E8:9D:E7:85:51:1F:7A:6A:61:68:40:0B:A9:25
Authority key identifier: 43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
Certificate issuer: /CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Certificate serial: 019CABA23F63CAF352B9E08118B7D3003CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl (hash: qtidndbQ5QVdLhUzicbSvyL0CBi/M5LrZVkFqFLEc8w=)
2: QyZa0nXuZdTRYOcamDUuEXlxJrw.roa (hash: fY3crQbaUbhZWemSvo5lCgx+xQL5kp/7I3vPr0MN5Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3f:63:ca:f3:52:b9:e0:81:18:b7:d3:00:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=dadb7ff18972e89de785511f7a6a6168400ba925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:cf:36:fb:7d:a1:fb:cb:bb:a5:79:50:05:
4b:95:2f:17:72:c1:31:f9:4e:a3:1a:7f:7e:63:d9:
8e:78:12:74:03:18:2e:b4:8e:69:71:60:c6:51:38:
bf:ea:5f:48:72:c0:d3:78:eb:3f:80:e5:51:33:cc:
e5:13:a8:d9:5d:d2:a8:b5:c6:9e:75:d0:92:02:f0:
08:d6:0d:0f:51:1a:1b:25:53:c2:86:87:7b:52:ee:
e5:75:4b:67:9a:d0:41:db:d0:11:8d:dc:4b:8d:cf:
09:6b:4b:e9:1c:15:01:cd:12:80:24:d9:7b:8a:43:
25:0e:2a:00:dc:3b:c1:3e:4d:40:65:d5:28:0a:a1:
e1:59:35:0d:45:85:f3:b5:37:c1:be:bc:42:94:1e:
da:1e:99:1c:b4:e5:86:ee:a1:6e:1d:97:cb:e9:77:
f7:87:ca:9e:09:f5:91:93:c0:8e:0a:d9:8b:a1:55:
6b:2d:ad:3d:cd:27:76:f0:ec:5d:0f:e8:43:21:44:
0d:1c:5e:7b:4b:60:73:e8:14:41:be:74:b1:d3:f5:
c7:2f:a6:d5:b6:0f:2b:69:16:9b:b6:1c:6c:95:51:
d2:22:02:1c:bd:a7:a1:ff:a2:60:42:8e:6a:7f:d5:
dd:c5:51:08:e6:e2:3c:9e:cc:89:59:2f:64:05:c3:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:7F:F1:89:72:E8:9D:E7:85:51:1F:7A:6A:61:68:40:0B:A9:25
X509v3 Authority Key Identifier:
keyid:43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f2:ef:49:2a:21:2b:e3:8c:c1:cd:eb:cd:23:b7:bd:1a:e9:
c2:39:a5:2f:99:01:05:73:d9:32:a1:70:60:b1:44:b5:e0:bb:
e4:7c:f3:f1:bf:9b:8f:8b:29:a9:c2:6a:e7:a1:f9:83:77:78:
1f:37:36:82:08:35:d7:98:eb:87:42:b8:5b:c9:1c:38:63:38:
47:8f:3d:0b:0a:87:24:24:e8:80:b9:7e:ed:74:4b:02:c0:7c:
91:1f:d6:ef:b0:d8:03:37:d2:92:4b:e0:5a:36:fd:38:d6:a3:
5d:63:78:82:01:37:87:94:d8:02:9b:90:bf:9d:14:a5:11:a9:
d7:77:a2:e0:65:7c:8a:6e:1e:b6:cc:18:fc:fc:ef:f0:a7:20:
a5:e4:c4:d1:22:1b:ea:54:fc:b2:1c:8e:46:22:f6:37:58:d4:
ef:ea:b1:9e:87:2b:7c:48:13:9c:b4:f5:15:6b:44:35:fe:b5:
d5:5c:15:2c:92:7b:6a:77:d3:62:20:87:7f:63:37:43:77:69:
a9:a1:1a:36:4e:b3:09:e6:60:c0:c7:1b:25:c3:74:5d:6c:7e:
58:9d:6a:8e:fe:8c:4f:9e:d0:92:b2:48:14:2b:d2:ee:ad:7e:
c6:f7:d4:4d:6e:34:e4:95:6d:d6:47:3f:d3:ff:b5:c1:84:6c:
3d:cd:32:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:18 2026 by rpki-client