Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: JNDmcwmvWzHKEUXE9TzP6pTcbuT8ONNU2ccdCSl9vyc=
Subject key identifier: 06:3B:C0:AD:F6:1B:37:3E:C3:10:88:5A:75:89:E4:80:94:57:BE:F8
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019CAE6C6D2451BA231C0B75836899E71995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 35
Signing time: Mon 02 Mar 2026 12:01:07 +0000
Manifest this update: Mon 02 Mar 2026 12:01:07 +0000
Manifest next update: Tue 03 Mar 2026 12:01:07 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: ZtAiWfVH3i2kkgIPMm7UxJrETwRgbFC9/GKkl4DRyec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:6d:24:51:ba:23:1c:0b:75:83:68:99:e7:19:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Mar 2 12:01:07 2026 GMT
Not After : Mar 3 12:01:07 2026 GMT
Subject: CN=063bc0adf61b373ec310885a7589e4809457bef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:7a:cd:85:53:70:6b:cb:3c:c1:d0:87:fc:
fe:0d:34:73:09:78:05:ee:cc:6f:26:07:55:aa:dd:
e9:03:b5:b4:33:0b:00:18:e8:fa:0c:41:6e:27:ab:
74:f8:d3:4c:84:b6:1c:ac:8a:48:29:8e:2d:a6:cc:
3e:a4:d6:2e:97:44:a9:24:a6:7b:25:ec:22:1c:07:
30:ca:37:34:b2:d5:bc:7a:33:be:e0:a0:35:71:d6:
82:08:8d:db:c5:23:d3:5e:61:81:50:52:24:36:cc:
0a:0b:b4:70:81:ac:cd:39:f6:b9:96:e5:c1:d8:ca:
1b:8b:e8:d3:c3:36:78:b5:dc:33:2e:59:ca:a3:9a:
93:02:ec:f7:fc:62:31:8d:10:c1:0b:2f:2e:e9:7e:
cd:0d:96:c5:92:fa:7e:9b:63:5b:ce:f0:9b:ff:74:
e5:f9:94:26:a9:73:f0:76:67:ea:5b:93:c5:cf:17:
48:b8:e2:21:21:01:2c:b9:a6:bc:5d:63:e2:15:1b:
d0:1b:e1:32:0b:60:b3:56:b9:e0:5b:06:35:93:32:
74:0c:63:3e:16:98:d7:e0:e5:75:81:3e:6f:9a:73:
57:2a:fd:ba:85:8e:cc:a5:7a:35:90:c1:78:a0:17:
b4:65:88:ec:52:da:40:d8:a7:c0:0a:af:be:8e:dd:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:C0:AD:F6:1B:37:3E:C3:10:88:5A:75:89:E4:80:94:57:BE:F8
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:9b:18:5f:a8:74:f0:70:0b:76:c0:aa:75:23:7d:97:7f:
20:db:27:6e:f9:c8:54:1e:c7:3f:48:e5:50:51:40:d6:a7:a8:
c2:12:97:ee:a0:8d:09:6d:94:85:e0:2a:1e:bb:9b:44:76:41:
a7:be:3b:bc:6d:29:79:32:77:2a:6a:78:05:7e:26:cd:62:c3:
c8:6c:a5:c8:9b:8e:6e:d3:0c:37:ec:7b:f0:70:f1:de:b5:99:
dc:bc:10:5a:0b:34:8e:b8:b2:e0:83:b9:ba:6c:60:3c:13:6a:
af:a1:66:a7:a2:bc:44:5b:00:da:0b:99:48:23:85:53:4b:c1:
85:28:be:40:f3:32:b2:51:e7:e2:25:11:11:1c:24:26:ca:35:
12:de:d2:9d:64:86:9d:cb:2a:39:f8:9c:f9:3b:71:a0:64:8e:
d3:81:46:54:73:b4:b3:14:3b:81:30:26:ae:eb:33:46:44:da:
5f:30:95:b1:5a:b5:f9:e4:b7:35:f1:05:72:b3:9c:1b:93:2a:
4a:d8:44:e7:dc:9f:1d:1a:7a:14:ef:83:f9:6f:c3:72:f3:08:
fd:92:2d:17:70:32:41:ac:56:ed:d5:a9:12:83:77:40:49:6f:
91:ab:df:96:ad:77:b3:00:55:18:01:08:74:1b:c3:29:1f:6a:
45:eb:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:01 2026 by rpki-client