Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: oY0zz5Uqc7M5AEBuotWyMyJJYBUq+aY61/WxvYsfuUg=
Subject key identifier: 52:D8:D9:40:79:BB:0F:8D:C6:35:94:44:EE:66:D2:62:6A:7B:35:11
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019CAC10176C976CEC79340A62AD211E1EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 02E7
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: 5K4EoTgQY6wVERfmbp9aFynKsTSC7pomvd6d3bf8b5o=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:17:6c:97:6c:ec:79:34:0a:62:ad:21:1e:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=52d8d94079bb0f8dc6359444ee66d2626a7b3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:ec:1d:7e:b6:7a:c1:f7:1c:db:f1:65:ab:
94:4a:43:ca:7e:37:62:33:63:df:70:b2:9b:eb:fa:
22:c0:5d:f2:0e:9b:0b:c1:2c:da:c4:bd:1c:51:2f:
ba:ec:aa:1d:9e:63:8f:46:77:d5:d6:74:64:f6:76:
b0:6d:5f:74:9f:fe:8d:86:da:af:ea:fc:30:3f:ed:
0b:f4:ef:b8:1a:35:cf:eb:04:9d:1d:bf:ff:53:af:
d8:7b:a1:47:df:d7:fa:51:b0:3c:d4:37:c8:f3:61:
1f:dc:c2:83:9e:cb:ed:9f:99:1a:96:66:c2:c9:86:
e9:b7:d8:7d:33:4e:b9:09:29:19:9a:be:84:0a:ce:
4e:33:e3:39:1d:03:2e:71:36:41:78:50:3f:47:04:
ee:0e:61:c8:8c:bb:51:e0:a7:c2:6a:c8:fe:31:a0:
10:eb:b1:d3:b5:a2:f0:45:19:5c:5c:ec:a1:da:ec:
7d:84:95:d9:3f:18:f9:73:54:8e:4c:b9:08:bb:a5:
94:46:8c:6e:98:cd:eb:48:be:05:f8:79:05:39:bb:
b2:50:d4:78:41:19:46:77:66:d6:07:3a:78:e0:7d:
51:ec:43:29:52:01:fa:f1:ad:21:3d:33:00:46:62:
10:fb:67:af:10:34:f0:5e:50:a6:e9:72:c3:ad:32:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D8:D9:40:79:BB:0F:8D:C6:35:94:44:EE:66:D2:62:6A:7B:35:11
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1b:08:98:27:40:05:b3:4a:5f:a9:51:3a:bf:b2:c2:c0:47:
a4:f2:84:bd:fb:29:c4:12:d0:f3:fd:04:64:6a:f0:09:24:c8:
c5:bb:90:2d:22:4b:19:db:a9:9b:a2:d3:e7:d6:76:46:cf:5a:
a3:73:56:62:57:1b:5d:1c:7f:fc:70:9b:5d:aa:31:6d:a0:15:
19:3f:7d:64:59:3d:29:90:52:f1:dd:af:78:e5:8d:b4:83:7d:
27:18:24:f0:91:c4:f6:db:79:6c:a3:4d:8b:f5:81:43:68:0b:
14:d8:db:0d:9f:ef:d6:be:54:06:88:26:43:e8:de:ee:1c:0c:
15:9c:6e:fb:b5:0d:38:28:89:15:90:4f:29:dc:35:81:a6:49:
1f:c6:11:50:d7:4e:eb:5d:8e:d3:92:f1:9f:b6:63:62:e1:81:
47:57:7d:13:78:e9:ec:17:b5:d9:9d:85:3b:8d:87:e0:fd:24:
00:01:0b:82:7b:1e:8e:94:8f:ab:87:4d:df:0f:7b:e6:f0:aa:
52:19:02:b0:f8:f4:b9:58:77:26:0e:3c:15:af:e8:a6:24:9d:
be:15:d3:b2:80:a3:0c:28:d4:de:24:a8:15:0d:b1:c5:69:db:
b9:54:3e:90:cb:96:1e:21:d6:ab:3d:ad:48:3a:02:b9:1d:57:
3c:a8:e2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:03 2026 by rpki-client