Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: 5wG8CjlJWSRM6WlLrG2Fji+j7N8HOrMdJ2QddCDnSe0=
Subject key identifier: A9:F8:44:E4:D1:9A:C1:0D:71:61:E8:D5:48:4B:4E:A1:D6:C2:B6:97
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019CAE354526D7D6CFEA3F38CCF0FBC8490C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 14BB
Signing time: Mon 02 Mar 2026 11:00:52 +0000
Manifest this update: Mon 02 Mar 2026 11:00:52 +0000
Manifest next update: Tue 03 Mar 2026 11:00:52 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: mQQGt8gM1D3NMMpod2a107orS82RxNUotZoCbFPfvVk=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:45:26:d7:d6:cf:ea:3f:38:cc:f0:fb:c8:49:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Mar 2 11:00:52 2026 GMT
Not After : Mar 3 11:00:52 2026 GMT
Subject: CN=a9f844e4d19ac10d7161e8d5484b4ea1d6c2b697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:23:7c:a5:33:5f:06:36:5c:c1:c8:da:c9:
d2:f9:f0:3f:1f:88:f8:9b:28:9e:ab:6c:03:14:f1:
84:27:48:7a:30:96:39:61:96:50:c0:bb:75:81:a9:
62:11:e7:8e:50:99:01:f6:3d:df:77:39:6b:27:7c:
01:51:cf:b1:cf:9e:3d:cd:03:31:a4:57:23:de:a4:
34:1e:ef:e2:ae:4c:99:f8:85:07:cc:15:d6:77:00:
6c:28:ca:64:c0:a7:c8:12:c0:87:fe:b0:fa:ab:63:
bf:c0:c1:fa:ef:41:d6:80:e6:b1:05:95:12:9f:ee:
25:45:72:a6:ea:65:9b:5d:e3:d1:93:dc:1d:e9:32:
be:0b:34:a9:05:6d:04:a5:5e:c0:dc:f4:f2:c1:0d:
ef:12:96:a0:bc:36:b8:2a:96:86:a6:99:6c:23:fe:
48:dc:b2:e4:f4:5e:1b:e2:37:a9:49:45:c7:8c:1d:
8b:33:e7:a0:7b:96:82:de:72:6b:b0:dd:83:b5:dc:
6a:11:da:52:7f:6c:ca:e2:c7:3e:9c:7e:1a:0d:57:
c3:4a:cd:5a:f1:4f:c7:78:0b:ed:cb:da:a9:f7:5b:
4e:7a:b4:4a:c1:e9:05:f6:3c:1e:ba:6e:d4:4b:74:
17:c5:0d:28:82:8c:2b:ba:2d:ed:0c:c1:c9:a0:39:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:44:E4:D1:9A:C1:0D:71:61:E8:D5:48:4B:4E:A1:D6:C2:B6:97
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0d:93:e6:2e:37:ac:14:ce:c6:22:62:b4:d1:4a:c4:12:26:
76:1f:aa:a6:df:2b:4a:5b:f7:15:90:d7:b7:91:4f:f4:2f:ce:
b9:44:e2:5e:07:6d:23:72:1b:36:36:e5:b4:05:65:b3:59:50:
1a:69:b8:f6:c4:75:f1:7f:85:f5:64:b6:73:58:73:7b:4c:81:
b0:fd:e8:ec:30:0c:24:b9:93:8f:d8:1a:27:2a:d4:5c:77:f4:
f5:b8:34:12:0c:3e:00:84:6b:8e:9a:d4:1c:0c:b0:a3:57:d6:
38:9f:35:73:83:96:18:bd:d0:02:08:80:09:49:21:0b:1f:a0:
ee:0a:63:99:41:6b:29:cf:10:1c:2b:25:10:13:01:82:95:cb:
f3:eb:12:b3:33:17:b6:0f:a7:ce:9f:87:ce:2c:9a:39:2c:09:
0f:b7:1f:08:2a:35:a4:84:ee:8c:09:b9:02:2d:cf:17:3d:4f:
83:38:9e:48:6a:35:18:d7:7f:5d:58:f6:a8:4e:0d:18:75:7b:
8f:d7:4b:4a:68:7a:23:2a:76:2b:6a:4b:57:c6:9d:12:da:7a:
bf:fe:df:e0:3c:68:04:ee:c8:34:1a:4e:ef:63:10:da:e1:2b:
12:c6:70:91:a0:a9:86:36:55:27:ed:74:b4:18:dd:aa:98:31:
bb:34:e1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:56:25 2026 by rpki-client