Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: r19qPdlu28eE+YedNGG4PAMPpqPQTR58XgcMNtZh0rE=
Subject key identifier: 9B:C5:90:82:F3:A7:30:20:86:01:D1:13:4B:84:1B:95:4B:CC:CF:7A
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 019CAEA31A60DEE4F79D6AF25F47EB7D063F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0843
Signing time: Mon 02 Mar 2026 13:00:50 +0000
Manifest this update: Mon 02 Mar 2026 13:00:50 +0000
Manifest next update: Tue 03 Mar 2026 13:00:50 +0000
Files and hashes: 1: EWYJbFjQX31oYWlD58OJv_l9B30.roa (hash: 2Mav6QQLVSCd9edMOwHxUMX2MqYRij3v85DASHfIvYU=)
2: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=)
3: ow6igTPRlqbGU9GWr5GsAICpDvc.roa (hash: M2OOGjwOx0AiSEzEWO1U/xWbG8Khv5JvliFIW9WxDrw=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: tXthKumG9Xp04xvMG9A90d6KWw+ipy3KpGmBItwrbtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:1a:60:de:e4:f7:9d:6a:f2:5f:47:eb:7d:06:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Mar 2 13:00:50 2026 GMT
Not After : Mar 3 13:00:50 2026 GMT
Subject: CN=9bc59082f3a730208601d1134b841b954bcccf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:35:05:08:db:a5:94:b8:43:ae:bc:17:15:
79:41:3f:a2:dd:81:b6:5d:92:3f:bf:58:0a:f6:0f:
05:7a:ed:f4:c4:e6:13:5f:a5:ec:6c:4b:50:69:cb:
d4:6f:62:80:85:1b:3b:8e:28:b3:47:9f:bb:42:34:
39:c3:27:98:f0:7a:26:0b:3c:0f:43:d0:09:0c:0b:
06:5f:fa:68:21:64:5e:ff:16:ff:60:f3:3a:a7:64:
60:61:1d:e8:a9:33:48:1f:61:24:4b:5f:1e:4f:74:
87:05:a3:3b:ad:f8:c3:81:b4:0a:95:10:65:10:95:
b4:88:45:9f:53:ad:5a:8c:f4:bc:04:5a:1e:1b:18:
38:45:31:00:cd:27:d0:90:b3:fe:eb:62:02:83:a5:
11:ab:26:41:82:69:4e:b0:93:0d:cf:f6:5a:41:60:
03:7c:fd:8e:7e:1c:87:c4:49:2d:20:97:7f:a6:e2:
f9:d7:d7:ff:dd:73:bc:7c:da:9f:45:4d:5f:f4:91:
e3:82:47:49:97:eb:ac:62:b9:40:a8:af:19:23:c6:
a7:0b:5c:f4:98:a7:e9:04:7c:aa:4d:2a:0f:6b:e5:
d4:bb:a1:b9:2a:7f:22:0c:98:47:0c:ed:95:8b:e6:
54:f8:bb:06:40:31:15:fe:a9:e1:af:70:bb:76:09:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C5:90:82:F3:A7:30:20:86:01:D1:13:4B:84:1B:95:4B:CC:CF:7A
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:68:f1:5a:4b:54:4a:3b:d5:ce:05:73:5f:20:a2:1b:18:3d:
5f:cc:5c:f2:5e:ad:c4:15:56:3e:99:28:c5:c6:68:06:7c:2e:
89:d8:10:8f:a8:16:fc:32:6c:d1:94:a9:51:9b:db:62:2c:42:
e8:eb:e7:dd:90:f9:9f:94:e3:32:f4:17:f1:06:ff:ad:f4:ba:
b0:de:bf:73:c8:67:a3:93:11:6c:a6:ed:82:4f:62:34:83:12:
e4:fd:c9:f7:08:5b:17:4b:07:2f:0d:cb:21:b6:61:17:b6:75:
b2:1a:ca:b3:a3:0e:4b:97:41:d3:28:c9:83:cc:67:7f:45:65:
aa:f1:60:b7:e0:a1:d7:15:a8:47:c2:ed:90:d4:86:74:db:32:
68:03:1f:bd:e8:5d:50:05:41:2d:57:95:18:ff:6e:cc:35:63:
74:5d:46:32:f5:49:47:ca:25:19:6c:db:ae:74:74:7d:1e:5c:
b0:05:f9:7e:d8:29:de:8a:b5:32:55:d0:66:1e:fb:c2:da:ff:
ef:11:79:4d:4d:39:28:04:63:82:46:43:a1:da:14:bf:a5:1b:
63:39:55:a5:47:06:4c:cd:0d:9f:cb:61:52:a9:63:a9:3d:15:
8a:66:08:dc:60:29:7d:d3:76:30:08:60:bb:eb:cb:bf:f5:20:
0c:b5:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:09 2026 by rpki-client