Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: +BFmz8TByLyHU42CTMfjEhEFS83+j61LVY3rX1UMhIo=
Subject key identifier: 85:09:72:E0:94:EB:5B:FB:F1:C1:2F:8B:9F:32:B2:7D:F9:2D:76:BB
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 019CAD90913D2EDC9EA24080273C7D5F2F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 178D
Signing time: Mon 02 Mar 2026 08:00:58 +0000
Manifest this update: Mon 02 Mar 2026 08:00:58 +0000
Manifest next update: Tue 03 Mar 2026 08:00:58 +0000
Files and hashes: 1: DsEiDbdONX-wlDkZ_X-1g9jpCQg.roa (hash: OA/21KHBKcEIJSTWxQCJ0tkhioZ536fK4ENW6PbwjpI=)
2: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: Lh4WtoF1xjJ4ELvpDmZPxk5FYDEFlDaRP/a4nR1CmPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:91:3d:2e:dc:9e:a2:40:80:27:3c:7d:5f:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Mar 2 08:00:58 2026 GMT
Not After : Mar 3 08:00:58 2026 GMT
Subject: CN=850972e094eb5bfbf1c12f8b9f32b27df92d76bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:6e:da:c4:6e:72:05:10:4b:9d:5d:36:06:
1a:48:02:4b:75:7c:3d:ee:20:d6:cd:1c:48:4f:ea:
91:a2:92:aa:17:fc:75:cc:9b:d7:fc:06:44:f4:8f:
63:c7:45:16:37:81:15:05:70:91:b3:a9:69:97:25:
e8:02:56:2e:f1:68:4d:3f:09:b9:89:71:78:7f:d7:
b5:74:93:0e:c6:51:06:9a:57:e8:6c:cf:3a:9a:a0:
8a:ea:a7:99:ed:d4:e4:84:3e:2c:e2:f6:0b:86:ea:
d3:b3:45:eb:d7:85:5b:86:03:82:44:3b:a4:72:6b:
84:fc:93:8b:b8:91:5f:33:e5:ef:cf:5f:b7:f9:7a:
69:a5:55:69:3c:8b:30:c8:4b:ab:f8:77:a7:7a:8f:
2f:8a:3e:79:12:d7:af:bb:ad:25:36:bd:09:8f:87:
48:fc:8a:01:a4:ff:15:59:12:f4:c1:13:f9:2d:cd:
46:57:7d:93:38:8a:08:eb:c7:cd:30:84:fc:e9:ae:
98:94:a4:97:39:63:c4:a8:fa:3a:e5:ef:22:06:1f:
d1:2a:71:39:d7:f0:cb:89:29:8f:fa:a6:38:3d:8b:
38:ca:29:76:92:c3:d2:9e:f9:d3:7e:18:8d:b4:92:
40:4f:4d:b0:f6:3e:95:2a:23:58:9d:35:9f:6f:58:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:72:E0:94:EB:5B:FB:F1:C1:2F:8B:9F:32:B2:7D:F9:2D:76:BB
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:8e:31:d4:4f:c7:20:d4:8e:a0:1b:4f:dd:a6:4a:dc:3c:
8a:fc:36:3c:68:50:56:6a:7b:f0:25:cd:ba:44:5d:3c:f3:22:
98:9f:b5:fe:0b:b6:2d:cd:2d:51:a2:ca:a2:7e:f9:4f:cb:6d:
d2:0b:72:c5:94:03:24:07:e0:16:d3:a4:f6:ee:f8:06:40:37:
75:1e:8f:ae:af:33:d1:2b:0f:8e:7b:9c:b4:79:91:a0:a3:93:
16:09:d3:9c:05:60:cc:98:9c:ad:8b:9a:5f:5f:dd:67:61:f3:
49:96:16:d6:c2:36:42:71:29:6f:53:36:da:28:d0:ce:24:a0:
9b:39:99:6c:de:81:65:8b:99:bb:9f:74:da:aa:13:4a:4b:8b:
d2:d3:fc:2b:79:47:7c:b5:dc:fb:8e:b9:fd:4b:f5:f1:0b:47:
f4:9e:3c:99:77:c4:7c:de:da:44:77:c9:88:f6:46:29:51:76:
18:7b:d5:29:8b:37:00:2b:fc:f5:41:27:db:94:a4:f9:e1:94:
ea:a4:d5:55:a0:50:37:75:58:10:15:cc:7b:24:37:77:57:61:
1f:c1:c4:88:a4:2a:71:b6:27:c3:00:78:e7:da:0e:33:f4:63:
d1:e7:c6:b0:40:12:ac:20:43:ff:7e:d3:5a:2a:c1:a2:f8:8a:
ed:27:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:45 2026 by rpki-client