Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: hQLqCmbE9rWUC+EGBNwFdNyTm6aDKtd0CljZx33kGIk=
Subject key identifier: A1:A7:91:6E:14:D6:98:3B:10:0D:06:53:23:88:10:F0:97:4E:08:62
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 019CAFEC5725EAEEFADFBBD8E410570F750B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 0681
Signing time: Mon 02 Mar 2026 19:00:27 +0000
Manifest this update: Mon 02 Mar 2026 19:00:27 +0000
Manifest next update: Tue 03 Mar 2026 19:00:27 +0000
Files and hashes: 1: OEKZs0V1OvPJXM--EEoOQzvnjxU.roa (hash: IA4xXF3SM3MMssScw4atGZl6MKvdjLCpQTou+Su+nF0=)
2: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: EB9GeBGX4lxVrcrtphlE+Oj3zO1ypWtlK+U+GT4eV0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:57:25:ea:ee:fa:df:bb:d8:e4:10:57:0f:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Mar 2 19:00:27 2026 GMT
Not After : Mar 3 19:00:27 2026 GMT
Subject: CN=a1a7916e14d6983b100d0653238810f0974e0862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:04:71:8d:38:9f:97:0d:84:08:47:b2:48:
86:95:e5:89:2d:4a:50:45:98:a3:d5:69:bf:c5:60:
25:c6:07:0e:72:78:8b:7c:fc:33:14:05:ab:8d:09:
ea:55:57:04:c6:fb:5a:3b:7a:7f:98:01:f0:d4:bf:
f5:14:e9:6d:13:5c:82:6d:ba:4c:f6:dc:25:3b:fc:
c3:6b:8b:1a:77:7d:1b:40:e3:df:7f:4c:c5:96:2d:
b8:eb:dc:da:3a:70:71:6d:66:c1:de:18:fd:89:cd:
be:e6:15:6e:d4:d6:49:b1:1f:cf:a5:24:e9:03:2c:
b0:77:6e:36:cc:5a:bf:35:31:13:3d:34:5b:37:ac:
3a:5c:a0:37:20:39:5f:25:96:0f:f9:89:f0:1a:37:
68:dd:77:0c:0f:98:ad:70:76:5e:20:49:fd:42:aa:
fe:56:b1:cb:bf:d0:21:fd:98:1e:c4:1b:63:9e:0a:
3a:91:3c:3b:9c:21:a5:dd:4c:ab:78:58:4f:aa:0c:
43:ff:33:12:27:b4:af:d0:93:64:dc:1c:11:e6:6b:
b3:f9:6d:ac:22:75:75:e4:c4:f8:64:fa:47:f6:a8:
59:16:b5:49:80:28:d8:96:00:67:c0:0b:9a:16:e8:
03:68:ed:a5:87:6f:c0:df:e2:45:e7:d3:41:29:91:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:91:6E:14:D6:98:3B:10:0D:06:53:23:88:10:F0:97:4E:08:62
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:bc:e0:e9:4f:64:34:51:65:62:33:34:06:b7:17:20:b8:
83:3d:2d:6d:1a:85:54:43:b7:e7:30:f2:a0:0d:21:e0:cf:6b:
d3:04:62:68:4b:e6:27:cf:68:69:99:ee:22:55:65:d3:ea:e5:
2d:a6:5c:51:ce:80:03:0f:64:d5:5c:06:e3:9c:b5:5f:14:e7:
9e:27:17:25:26:74:f9:0e:13:a3:f8:2d:88:60:bd:33:07:d0:
87:42:7c:f4:81:47:d6:a3:73:20:77:26:20:51:79:15:cd:6a:
ef:e8:8f:53:57:77:ae:e8:20:92:bb:67:ad:a3:da:31:a0:b7:
68:5d:e1:c7:72:05:08:e9:54:03:a6:4a:fc:48:5e:d2:d5:f1:
f9:a7:97:a4:b0:85:69:8f:ac:f0:fa:e0:86:a3:09:8d:fb:35:
a2:d6:b5:b8:b8:bf:26:df:a4:6c:e8:1a:18:e7:40:f9:87:0d:
d0:6b:a7:49:79:f7:f0:90:c9:d8:f2:3c:fd:60:31:75:3c:da:
2e:28:a1:34:77:9d:58:f3:05:70:5d:93:28:69:ad:e3:ae:68:
7a:a1:8e:7e:d0:2a:ba:59:7e:16:60:ac:db:d7:d6:39:c8:c7:
2e:4c:9f:fe:90:b6:1f:69:30:9d:4e:79:67:41:e9:e5:bd:6e:
10:8a:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:29 2026 by rpki-client