Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: kwUCnsV1vqZ6lp1hQ25CuzPu0BzsHNW2FFifEQ9Lwe0=
Subject key identifier: 49:31:6A:41:23:77:2A:BC:E5:A5:FC:32:BC:B2:0B:AD:E5:93:59:6A
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019CADFE5E10357BC098EB7781ABE1511F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 10:00:54 +0000
Manifest this update: Mon 02 Mar 2026 10:00:54 +0000
Manifest next update: Tue 03 Mar 2026 10:00:54 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: A/Xv1x9/F2xZZu0BydJuYyV4DBbPZXg3f1l5Id2ZvW8=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:5e:10:35:7b:c0:98:eb:77:81:ab:e1:51:1f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Mar 2 10:00:54 2026 GMT
Not After : Mar 3 10:00:54 2026 GMT
Subject: CN=49316a4123772abce5a5fc32bcb20bade593596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ef:95:47:b0:55:88:a5:d6:79:dd:c3:5c:42:
42:d4:f6:5b:da:85:41:4d:1b:c4:0d:5e:13:20:28:
69:19:86:40:49:75:d1:55:61:63:e3:52:38:50:b8:
01:3d:08:af:bc:5a:0a:61:db:69:eb:43:4f:fd:7e:
1d:7a:69:4b:6c:e4:66:a4:e0:28:e5:a1:ef:6e:8d:
60:ae:58:d0:75:ab:73:62:3f:5d:be:f4:1b:0c:24:
2b:55:ba:78:8e:18:d3:15:4b:11:99:64:55:16:a8:
90:4a:4f:a6:50:98:12:6f:42:8f:c9:61:93:1d:3e:
e6:e7:23:e7:a5:fc:68:d0:e1:25:98:23:74:bb:49:
08:cf:d7:61:39:ad:7d:d9:71:32:2b:55:c8:6d:81:
56:30:6e:37:ba:f7:c8:f2:49:4c:ab:76:34:59:92:
b4:87:62:98:75:37:c0:1d:77:f6:db:f5:fb:65:21:
a8:54:9c:05:5f:c7:83:47:2e:7a:66:7a:74:d0:7e:
85:a5:5b:e3:cd:d6:32:f6:b1:d7:32:0f:11:74:7e:
a8:91:c7:a5:ea:62:42:8c:0d:22:d4:8b:8f:cb:02:
e7:a2:b2:a9:6f:a0:c8:e5:1a:e9:e5:12:cb:24:2f:
3f:db:0a:43:67:cc:7a:f3:7a:7a:91:77:c4:8d:ef:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:6A:41:23:77:2A:BC:E5:A5:FC:32:BC:B2:0B:AD:E5:93:59:6A
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:59:c8:3c:70:08:1c:04:f5:71:4a:9f:a0:ad:23:6b:53:14:
c9:4e:32:0a:05:ca:a4:ac:5c:a1:fb:a5:34:98:b3:2e:1b:79:
b5:8b:a7:93:da:9b:12:f2:c8:3f:08:c4:1c:12:64:b7:6a:66:
25:9f:46:a1:c4:b3:2e:88:c1:f4:ef:4a:d2:f2:01:6d:a7:71:
5e:88:dd:3f:9e:d7:bb:fa:62:40:d4:66:f4:52:69:f9:6c:9f:
aa:a8:55:d6:eb:af:60:09:bf:ff:7f:bc:4f:4c:ec:03:68:33:
4a:46:e1:3d:e6:f2:a9:a4:00:52:e1:12:51:fa:5e:61:4f:3d:
21:87:35:02:a6:82:b1:52:f8:14:e8:b5:eb:ee:26:91:80:82:
09:3f:65:f3:6a:1a:3b:f8:0e:32:bc:c6:0e:64:2e:f8:85:7d:
f9:37:17:cd:14:ac:0b:fb:6c:81:0b:d3:4c:32:d8:61:06:50:
25:25:d5:95:87:10:7e:6a:03:13:e7:fb:f4:41:82:98:cf:f8:
3d:99:ac:6a:e3:0f:51:99:c3:0a:d4:39:2b:1a:7a:4e:66:cc:
84:72:53:d0:ef:9f:eb:15:2b:b7:83:88:c6:a9:be:78:0b:2d:
29:e3:ca:58:df:9d:44:8c:f3:74:8a:32:31:14:c0:39:c5:ee:
5a:9a:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:07 2026 by rpki-client