Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: w0qwKBbd3RgW/cyQhgiaOmQL4KLiilOHkbPcrDKWwwY=
Subject key identifier: D9:4D:0E:67:31:C3:49:9E:77:8E:9B:51:42:C2:D3:63:77:26:75:C0
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 019CACEB9B7F94EA7109D3208C49B6EFC529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 01F2
Signing time: Mon 02 Mar 2026 05:00:47 +0000
Manifest this update: Mon 02 Mar 2026 05:00:47 +0000
Manifest next update: Tue 03 Mar 2026 05:00:47 +0000
Files and hashes: 1: 0kO4HDhs-Z05CdJzgp5tseLyhSU.asa (hash: /YkuI+YVFPmtxpbrJU27qGqrMqF1Tro9Xx9l6QKKoAU=)
2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: X3OxRQEz87pq5kq7veetXZR6rZOe2BDa0fcMl/hlEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:9b:7f:94:ea:71:09:d3:20:8c:49:b6:ef:c5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Mar 2 05:00:47 2026 GMT
Not After : Mar 3 05:00:47 2026 GMT
Subject: CN=d94d0e6731c3499e778e9b5142c2d363772675c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:61:43:d3:79:66:ec:2e:4f:aa:c3:93:9e:
7a:71:98:c3:ef:8b:bb:7b:e0:a8:b8:5d:24:6f:41:
a1:8a:0f:e9:d7:61:e5:d9:0a:fe:77:54:c9:c9:c7:
43:02:d7:48:aa:de:63:4c:45:9c:64:b0:5b:ab:99:
2b:6c:fe:35:0b:38:70:a1:21:bf:01:cd:8e:3b:75:
4e:0d:61:47:ba:46:79:be:7c:8d:bb:75:e7:ab:f8:
eb:ef:a2:91:c0:2d:63:f7:53:5b:62:ff:a5:1c:86:
b9:5b:b7:8a:99:bc:14:a7:d6:e1:60:41:39:ef:6e:
71:80:f7:62:4b:18:0f:6d:18:e4:cf:87:10:2c:fb:
eb:a2:0e:dc:48:18:a8:3f:d9:b9:b5:32:de:29:eb:
e3:cc:ec:47:1a:07:91:aa:e3:91:7a:33:36:bc:1e:
ad:c2:d7:1d:24:e3:74:9e:e1:64:3b:3f:7f:42:45:
40:a8:c6:68:ed:81:0e:d2:7f:eb:ab:67:68:5c:af:
ca:e3:af:87:57:32:fc:ba:05:ee:5d:94:cb:85:96:
fe:62:2e:56:03:3a:5f:84:7c:44:4c:ba:44:b5:c3:
ce:37:2a:60:bf:c4:f9:71:d4:6b:99:7a:72:87:94:
70:3d:55:a7:dc:c8:ec:f1:f4:e1:84:0f:15:55:b8:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4D:0E:67:31:C3:49:9E:77:8E:9B:51:42:C2:D3:63:77:26:75:C0
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:db:0c:84:a2:3b:02:df:c9:18:cf:48:77:dc:11:d7:29:82:
75:db:10:4d:a6:60:34:ae:fa:d1:83:1c:97:1e:4f:79:77:b1:
08:a3:98:34:e1:0d:d0:c6:40:49:a4:2f:d1:38:e6:d1:3b:25:
e9:7b:8c:03:72:59:3f:69:35:89:7e:45:a4:44:93:74:07:05:
56:e3:1e:64:1b:56:00:63:bf:d2:28:f6:f3:52:28:a5:2a:fd:
49:01:b5:01:6d:eb:a9:5a:56:a8:6f:b2:3d:bf:3b:c7:c1:50:
80:14:4a:f4:43:93:4d:29:b8:bf:02:b4:81:10:95:33:c9:0a:
23:fb:c6:65:7f:b9:72:19:7a:42:d1:bb:e7:f4:ae:8a:f8:5e:
8d:ec:af:95:72:a3:98:98:d7:33:02:ea:b6:37:b7:10:75:45:
2c:d1:70:45:3d:72:db:6a:fc:de:58:1f:b7:05:af:30:ed:ed:
bc:45:68:61:5e:78:b9:d6:a4:59:78:96:21:24:e6:99:65:d3:
c0:a2:f4:b4:da:72:3b:d0:3a:a9:0a:a8:54:47:8a:14:a8:e3:
e7:41:62:d7:1a:53:10:e7:db:bf:95:58:57:0d:6a:de:82:45:
06:6f:c1:ee:e1:4a:04:c3:c2:4d:f0:97:a9:85:e6:80:e3:a0:
b4:bf:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:25 2026 by rpki-client