Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: yobfDPSK9s6P6xw3ooqR6mZn5fxHZ4MQxOIwj+TTt+I=
Subject key identifier: D8:E2:A5:EF:DD:C4:05:18:47:D9:D2:38:FE:7E:AA:09:F6:F7:F2:FB
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 019CAB6B2DA53D2701075E8848BBA2D50221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: O/rk0YRzz5Ld6n9mm9tEHohvOhgNd03tlJtisJLAp0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2d:a5:3d:27:01:07:5e:88:48:bb:a2:d5:02:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=d8e2a5efddc4051847d9d238fe7eaa09f6f7f2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:b1:d4:bf:a9:b6:20:3e:52:11:a1:3d:cc:
06:46:5d:be:67:74:2b:ec:21:b2:7f:a7:df:01:c0:
a3:a2:3f:a6:ed:05:2a:8e:b8:8a:3c:46:9c:3d:35:
83:fd:88:fe:f0:51:7a:41:29:41:77:db:72:ce:da:
c8:3d:23:58:83:3e:87:02:35:81:5a:8c:f8:cb:bf:
f4:f9:3b:48:bf:f8:c6:4a:b1:d6:b1:98:13:91:a0:
84:33:f0:ec:77:f0:22:a2:09:b1:57:4a:f9:f7:8e:
41:79:a2:9b:37:89:a8:ae:03:1e:79:2a:00:35:cb:
7a:a5:82:b8:e0:08:b7:d2:be:30:64:b0:55:65:e7:
3f:8a:c5:25:5e:9f:d9:97:23:a3:53:61:9a:12:52:
61:7a:0f:91:54:db:54:1f:83:7f:fc:2b:9b:71:ea:
ec:9c:dc:56:01:62:1a:29:ad:4f:e0:37:dc:c7:79:
33:0b:2c:86:92:7f:ff:4b:47:b2:e8:4c:78:5d:62:
6a:c4:12:54:6e:70:16:f4:c0:8d:92:bb:1c:db:db:
92:d6:58:37:8e:06:b7:55:d7:30:fc:6f:2c:ed:8e:
c7:d9:7b:86:0a:a9:3f:04:dd:c5:20:1f:75:11:9e:
b4:2d:7f:09:4a:36:20:f3:29:d9:a3:d4:b3:38:9d:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:A5:EF:DD:C4:05:18:47:D9:D2:38:FE:7E:AA:09:F6:F7:F2:FB
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:07:ce:f8:31:f4:8a:27:da:86:97:a4:68:a0:33:05:5f:74:
dc:6f:75:be:ef:75:d5:3a:8d:c6:2a:3d:4d:c5:fe:08:f8:37:
d3:ec:76:5a:04:12:db:bc:72:1c:2c:b5:83:82:0f:bf:90:29:
78:67:db:97:a5:4c:6b:a4:08:2b:d0:ea:9d:a5:49:30:11:d9:
b5:d9:70:c7:3e:16:35:d8:2a:1a:84:af:56:da:9e:f9:73:b8:
d7:57:32:bd:79:ff:8a:c0:bb:92:31:31:4a:d3:f4:bf:2c:9a:
d1:0c:aa:7f:f3:ef:e0:55:2e:19:ef:4d:5f:7b:ab:c3:f2:0c:
b1:3b:cc:84:ff:77:80:3c:bd:c8:f8:48:7a:b9:30:b7:af:67:
36:bf:c1:5c:fb:15:b8:93:13:ba:d9:f1:68:cf:8c:85:db:2d:
8c:74:34:d5:77:d9:cc:46:17:25:89:14:d3:dc:19:67:a0:07:
0b:f3:8b:85:5f:1e:05:7c:05:95:9d:1c:de:7f:b2:bb:e6:56:
32:39:9f:7c:7e:6a:c3:4c:27:b2:58:88:27:66:16:1b:67:0f:
7a:df:7d:53:27:6e:b1:95:e0:98:f4:ee:37:75:5a:32:60:bc:
e0:fc:6b:3d:2c:1d:b3:f9:bf:fa:dd:14:8a:2b:35:bd:29:c9:
ef:8c:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:03 2026 by rpki-client