Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: 0E51koinXzru/VaozmULmyJUEQh+yqqNuhWMRofGn50=
Subject key identifier: 4E:2A:84:5E:22:2B:D1:20:AD:1C:C1:75:3E:24:D0:19:DE:88:71:8D
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019CAC46E0EA99EC43B7028C6C55551560F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 153C
Signing time: Mon 02 Mar 2026 02:00:52 +0000
Manifest this update: Mon 02 Mar 2026 02:00:52 +0000
Manifest next update: Tue 03 Mar 2026 02:00:52 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: soiHoKMi8I8F9zN2t/+ccjzM+Q0MhSgQWcct1viKGo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e0:ea:99:ec:43:b7:02:8c:6c:55:55:15:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Mar 2 02:00:52 2026 GMT
Not After : Mar 3 02:00:52 2026 GMT
Subject: CN=4e2a845e222bd120ad1cc1753e24d019de88718d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:9a:75:08:ac:50:72:fb:e0:50:cf:83:69:
fc:9e:a8:10:0d:9f:b4:17:0e:5c:eb:91:fe:eb:25:
1e:70:d4:f3:43:20:1b:02:b8:d4:cf:5b:59:a1:e1:
e9:da:f7:c2:57:5c:53:87:d4:79:c6:e9:3c:0b:a0:
e3:d8:24:2a:c2:15:6e:84:a4:a0:09:1b:f0:3b:0c:
c2:c3:9b:de:a3:e1:a0:a0:14:4e:27:ec:fc:fd:aa:
6e:db:d8:95:3f:00:29:96:99:8e:b5:17:5d:3d:62:
1e:80:16:d0:d9:de:8c:60:ae:72:e4:aa:b1:34:a5:
92:5f:1e:9e:ec:b3:ae:75:04:08:4c:07:10:fa:ed:
ea:8a:e5:5c:23:b7:3a:64:31:df:da:ca:2e:ee:2f:
6a:1c:33:f6:27:34:22:79:8a:b6:7c:7b:61:a7:49:
06:b3:1c:46:1a:fe:51:46:bf:e0:5a:5b:13:e1:c6:
0f:36:ca:7c:e0:10:ba:74:92:b4:38:fb:02:6d:19:
60:e6:36:36:41:9c:83:cc:24:f6:0c:ed:20:87:79:
13:4d:3e:f6:8d:96:15:5f:7e:7f:15:77:65:df:13:
fe:ad:eb:19:3b:63:27:74:7b:20:fb:4c:c7:0b:41:
8a:c0:47:48:86:64:e8:46:a0:1b:02:8b:ac:1e:6f:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:84:5E:22:2B:D1:20:AD:1C:C1:75:3E:24:D0:19:DE:88:71:8D
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8c:4d:d9:17:1f:68:66:bb:4f:0f:30:8f:9a:2d:2c:8a:2e:
73:97:9e:1b:f5:fb:18:9b:52:2c:58:38:af:95:cd:af:fa:8d:
3c:61:5c:b5:d1:6b:78:5d:d4:e9:ff:39:d2:ef:82:a9:01:62:
74:8f:4c:4c:7f:33:39:49:a4:dc:e6:5f:5b:f8:b7:01:ad:3a:
c2:3d:f5:04:71:8a:59:25:e3:bb:82:24:52:df:27:d4:74:25:
4c:6b:d0:da:d7:80:0f:b2:bf:9b:48:18:ef:25:65:e6:ff:45:
10:7e:65:5e:5f:e7:d9:b9:5c:7c:f3:34:2c:7c:98:54:df:1e:
12:9d:3f:73:fb:af:ef:ea:90:cc:9f:b8:1b:e1:a3:e5:08:e6:
d6:bf:52:d0:11:3d:25:78:cf:7f:d0:4f:db:c3:6b:77:08:91:
7b:66:6d:9d:45:1b:7b:7d:23:77:11:0a:ce:39:c9:a7:0c:a7:
a0:16:43:44:b2:21:c8:c0:b7:e9:a0:6a:ed:44:74:13:c8:43:
e0:75:8e:e8:4c:3f:27:74:82:16:dc:3f:6d:83:a8:42:98:ef:
2b:3d:f2:0f:ef:42:43:7f:b4:38:c5:ba:76:01:b3:14:fd:dd:
e6:df:4e:72:41:19:6b:38:a9:50:ae:5b:ed:cf:7a:9e:10:12:
b4:de:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:38 2026 by rpki-client