Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: RGhmK29cln0GWnzV17Ltl5KxhQ9Ws7ms0oJyrPffxNw=
Subject key identifier: E3:48:FC:06:96:1F:7B:24:AA:36:5D:72:C0:A7:C1:D7:B0:FE:9E:CE
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019CAC103595FDFF722AF380E4B2CBA5F285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 09DD
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: LcS7iGhiMbzDK8IDwVjtw5DfqNcpjkVfXQY6RjnVLJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:35:95:fd:ff:72:2a:f3:80:e4:b2:cb:a5:f2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=e348fc06961f7b24aa365d72c0a7c1d7b0fe9ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:2b:9a:d0:ce:6a:c5:1d:b9:40:ba:47:81:
e7:29:bb:c7:f3:f6:66:62:66:b9:b6:40:6f:5a:0f:
64:60:e3:b4:70:ba:c9:fd:a0:d2:6a:6d:d5:22:ed:
d9:0b:c0:86:2b:70:c8:a8:b9:5d:32:65:1b:a6:9e:
78:5e:c5:12:46:0b:91:22:d3:2b:38:6d:50:05:2c:
80:09:1f:6b:02:fb:e8:3f:37:ee:3b:ae:d7:0a:d0:
a8:b1:8b:59:3d:51:ae:7b:51:c5:46:e8:cc:b0:32:
fc:c3:37:57:3c:62:86:2d:85:4a:2d:06:be:dd:40:
d9:23:43:db:34:f8:12:b1:b2:21:9d:50:0d:a4:d9:
13:57:d8:19:23:f4:fe:d4:01:24:6c:cf:6f:67:a3:
94:f8:42:79:53:bd:2a:81:0e:a4:09:2d:1d:0b:04:
62:32:4c:21:b2:a4:02:f0:e0:2a:bf:68:25:f2:94:
29:ab:20:41:9e:66:e1:b4:96:fb:3b:98:fa:91:f8:
aa:15:20:7d:dc:7d:3b:62:9d:f5:30:2b:1a:80:37:
0b:e4:4f:6c:ac:36:9a:83:8f:45:be:b5:3f:fc:38:
78:0e:fb:b0:89:23:fd:9f:5d:b7:48:67:6d:0f:e7:
05:83:0e:68:51:91:9c:b8:e0:6c:d5:3c:32:d3:ac:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:FC:06:96:1F:7B:24:AA:36:5D:72:C0:A7:C1:D7:B0:FE:9E:CE
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e7:c9:82:2f:ee:4b:92:9b:15:6e:8e:e6:59:1e:35:03:79:
00:4f:fe:c2:87:c4:1e:f5:89:50:de:dd:99:fd:8a:67:d6:37:
ea:9c:bc:9b:5c:01:26:83:5d:38:2a:14:55:82:b6:9f:93:b3:
08:40:16:03:4f:a6:43:25:ab:08:9f:cb:ac:a8:c7:c0:60:df:
83:97:d7:23:b4:01:97:51:70:26:74:e0:84:41:b2:7d:1d:1f:
c8:da:b5:2e:40:30:48:92:8c:9c:55:e0:b9:c1:e2:47:69:17:
a6:73:9f:2e:15:83:0a:e9:af:7b:98:7a:40:3b:f0:61:35:d2:
2b:36:8b:10:8c:8e:89:f0:86:47:1e:1d:a8:cc:5a:43:a5:0a:
b9:b5:55:16:07:ce:9c:1d:4e:be:fd:fe:a4:53:b8:d7:6d:95:
6d:0d:d3:75:7a:ad:8e:45:b9:27:14:92:fd:6e:60:19:bd:e5:
85:b8:14:d8:3b:e5:39:1f:ac:c0:f8:83:f6:d4:22:9b:9f:9d:
45:43:04:83:4b:30:06:6c:a5:73:ea:29:d0:ce:00:5a:eb:4e:
7e:54:91:58:f6:b4:86:0f:98:8a:8c:72:5a:6f:21:08:cd:f4:
62:0a:b2:6d:c5:94:16:c2:7c:98:fc:6e:a9:af:21:27:40:ba:
f4:e7:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:29 2026 by rpki-client