Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: ZXSZ48wmz51dFTuBI4titrX/isXjL/CpXgMMLvJXjwY=
Subject key identifier: 39:2D:BA:A0:CE:90:5D:19:3C:A0:50:F7:98:19:9D:56:A5:57:17:33
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 019CADFE83EBBE8CAC6C6C271A3DAC257840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 10:01:04 +0000
Manifest this update: Mon 02 Mar 2026 10:01:04 +0000
Manifest next update: Tue 03 Mar 2026 10:01:04 +0000
Files and hashes: 1: 89B9QRpsAYslipobPKLMe4rYzLU.roa (hash: sMU4kNtcmn2Zuj4Vpvbkloa2tK9j6EDzNo9Vzz7bFFo=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: FxXfdKlKMGLNniV4tb0YU6BL9eQ+2YcBl/DK2PvwuB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:83:eb:be:8c:ac:6c:6c:27:1a:3d:ac:25:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Mar 2 10:01:04 2026 GMT
Not After : Mar 3 10:01:04 2026 GMT
Subject: CN=392dbaa0ce905d193ca050f798199d56a5571733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:86:c6:53:58:f0:23:43:04:9b:fb:09:53:
8b:bf:95:37:9a:b3:a7:78:3e:15:4d:d7:2c:17:ff:
3e:ea:b7:ad:24:4c:03:c4:07:90:39:f0:06:63:b9:
27:1b:a8:d9:d4:34:3a:20:67:9c:77:f6:7e:89:47:
45:29:6c:ed:6c:8e:a2:ec:2d:80:cb:64:14:ba:28:
a4:73:d6:42:b3:26:a0:da:b5:8a:ad:15:ae:a7:b6:
7b:08:29:b9:e9:20:fd:36:ca:9b:8b:b8:d9:7a:6f:
b9:9a:56:7e:6e:e0:36:bc:a2:7f:3a:e6:77:be:38:
3e:a9:f0:f2:f9:1e:32:cc:28:31:0b:97:17:5a:2a:
11:00:5c:5d:20:5e:35:77:0a:db:f5:6c:2f:bf:b4:
23:ca:1d:c6:13:d6:c4:c1:9c:42:f6:6f:6c:a5:d3:
8a:6d:bc:61:03:95:35:02:34:74:58:de:47:bd:ff:
01:17:3d:16:0f:11:7f:47:19:5c:33:8a:b8:c3:a0:
b8:a5:ed:14:d1:42:76:6b:33:b0:d6:cc:93:db:9d:
92:4d:da:7c:e0:2d:0a:df:27:2b:37:be:12:1c:d9:
ec:26:a0:95:d8:ec:f8:d7:5b:08:05:d6:c0:fd:57:
a2:77:c7:14:f1:1e:b3:ea:41:f2:63:77:4d:57:a9:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2D:BA:A0:CE:90:5D:19:3C:A0:50:F7:98:19:9D:56:A5:57:17:33
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a3:17:3c:dd:9f:ca:05:29:59:c8:ac:68:4f:ea:ac:c7:65:
5d:9b:27:64:b8:bb:aa:0e:a5:36:af:42:63:42:9e:9d:19:c3:
39:e6:76:e2:ca:50:49:7d:dc:d9:ca:28:ed:87:61:dc:a9:37:
a7:e2:2f:b1:7f:2e:12:e0:5a:dc:92:bb:11:7b:27:86:0c:03:
54:30:dc:08:d9:11:25:d4:21:b3:96:04:b1:14:67:cd:b9:bf:
36:de:ad:1a:6a:ff:a1:04:db:e5:d9:ee:26:d0:63:a2:75:50:
83:23:8a:85:7a:3d:b5:0a:92:c0:40:36:61:02:1d:02:8f:f7:
52:1a:ba:85:4d:53:87:79:2d:63:16:94:ee:d4:de:5d:c3:59:
a8:90:7b:99:87:5e:c4:0d:1f:0d:aa:8c:d3:ea:46:18:db:df:
67:86:48:b6:26:7b:1d:3c:4f:9e:59:98:02:1b:4c:0c:87:ab:
26:5b:00:c3:bc:b6:a1:a9:0d:6c:37:a2:c6:b8:70:0f:94:e3:
a8:c0:af:e4:e8:b3:d7:95:32:fb:43:8b:98:10:2f:78:58:57:
08:66:5b:0c:cb:ab:14:10:6a:97:6f:22:e4:b7:58:80:74:dd:
20:d3:1d:4b:85:d1:cf:a0:5c:40:72:2d:91:e9:73:7a:24:98:
a3:48:b6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:47 2026 by rpki-client