Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: /av/NUUGXWxCtnaulYm3Fht23pBqr4XL2k0uSrjD1zs=
Subject key identifier: 9C:18:D7:E7:69:3B:15:70:97:20:72:F5:5A:BE:13:A9:42:22:1F:5D
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 019CACB558804831B237632CBBFEDC0080C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0DB5
Signing time: Mon 02 Mar 2026 04:01:31 +0000
Manifest this update: Mon 02 Mar 2026 04:01:31 +0000
Manifest next update: Tue 03 Mar 2026 04:01:31 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: K+JlAzXOAuiXmxi3hJxYlm4J/fZ+/bx269YUr2mzaNM=)
2: qkoAr_KuXYuK5zR2LayC2hJcN9Q.roa (hash: QgFzqo+zZRD3aFWIozFXdcVEC6p5YunAVsbUCMVWzNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:58:80:48:31:b2:37:63:2c:bb:fe:dc:00:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Mar 2 04:01:31 2026 GMT
Not After : Mar 3 04:01:31 2026 GMT
Subject: CN=9c18d7e7693b1570972072f55abe13a942221f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:f3:4e:39:ba:cf:67:4d:1a:74:d7:46:12:
d5:84:e1:93:22:63:d8:78:af:78:d3:17:d7:16:87:
02:64:7a:6f:78:7c:22:6e:54:71:0e:62:4a:dd:1f:
b7:f4:20:d2:80:e2:4e:b0:4d:a5:f1:99:36:d1:d3:
bf:4f:3a:99:f1:27:70:99:37:fd:cd:1b:0f:60:ab:
ba:f5:f3:f4:a0:ef:42:74:bf:0f:a1:7a:52:bf:42:
8e:e3:a4:74:46:d6:e1:51:4f:76:5b:89:fc:3a:95:
9f:92:18:ef:c9:b8:12:06:04:d2:f2:5e:bc:f8:9a:
d5:88:e3:5e:e6:85:e5:25:c8:66:be:7e:67:a6:bd:
1d:dd:72:ca:e5:e1:13:d8:7b:8c:c0:46:f7:be:23:
ca:b7:de:8c:61:7e:d7:24:c1:f4:af:51:ea:c9:97:
17:d9:6a:be:1b:7b:bd:6c:42:c2:41:3f:5d:b9:59:
b5:3a:34:f2:8e:0a:a5:5d:1b:0d:bb:ac:db:3a:aa:
4a:71:ea:b8:27:75:ec:c6:be:75:e8:d0:d0:f2:09:
70:37:66:92:66:58:6e:0a:32:98:2e:09:be:3d:5c:
07:57:b7:d5:39:05:ee:63:66:61:92:98:d9:86:88:
2e:71:3a:be:c1:94:55:49:bf:11:76:00:28:b1:0e:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:D7:E7:69:3B:15:70:97:20:72:F5:5A:BE:13:A9:42:22:1F:5D
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:1d:b9:b6:4f:cb:44:c1:56:b0:fb:93:04:ac:4c:ce:f3:
30:50:8a:28:79:a1:6f:26:b3:6f:a4:15:1c:25:4b:3c:a9:93:
b1:7b:7e:ef:28:3c:51:03:b8:25:3c:1e:fa:38:f7:3c:e6:f6:
0f:47:c9:65:8b:be:4d:00:a7:32:b4:7f:0f:0b:42:86:28:56:
b1:ed:cb:5b:d9:f6:4e:69:f0:79:dd:5a:c2:e0:8e:80:39:49:
c2:76:6a:2e:e8:6f:d7:7a:a9:2f:6e:53:09:c4:ff:fe:c3:30:
4e:e7:fb:60:12:a9:1c:5b:58:92:61:e3:30:b2:53:ba:39:65:
50:58:f3:d5:94:40:b5:24:b8:4a:4f:03:f0:b4:69:fc:2d:5f:
2a:8b:80:90:0f:07:91:d4:3d:31:57:40:ac:cc:8e:62:60:e3:
6f:6e:db:5a:e1:41:29:17:02:e4:dc:d5:df:3a:8c:16:b4:82:
9f:b3:f2:26:4a:c4:2a:8a:c8:ef:94:0a:44:9e:80:cc:94:38:
4b:41:3a:1b:4a:90:bb:e8:49:b9:5e:0d:a3:16:b8:a1:5f:e5:
ee:74:57:45:ac:69:87:9f:b8:84:d9:a8:28:62:ce:55:90:0c:
30:68:1f:f3:0e:d6:55:cc:60:1d:38:1a:30:17:d1:ac:55:d0:
c8:e7:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:40 2026 by rpki-client