Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: vsFG/5LeOmcnzhNgEq1wN+3nFGwBp5Vk+ZdX+P+X+HM=
Subject key identifier: 4E:2B:1E:90:BC:2D:1E:E2:27:F7:4A:00:E8:99:71:F6:20:DB:38:A6
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019CAB33DA4584AC235DDE1C1587C71DA478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 053A
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: Yd5g9YbG4FZw/1tZiy5VmpkOJhReE2MQ1UyQ84Aa2Yc=)
3: UFxRhp6rXzlBMQtD5Wd9fVCgYTk.roa (hash: BYjFBhXX/eZ07tTgYfeFeXjCTlY4dMcpnfMPQHSP3UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:da:45:84:ac:23:5d:de:1c:15:87:c7:1d:a4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=4e2b1e90bc2d1ee227f74a00e89971f620db38a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:36:87:34:91:cb:71:01:2b:96:aa:5e:f9:
eb:c1:97:49:06:78:2e:c0:43:e6:49:6c:89:9e:5c:
d8:cf:20:84:4b:20:44:dc:c8:2b:bf:73:c0:06:d4:
93:13:2f:c5:bd:c8:9b:a7:b3:57:71:ab:8e:9e:c1:
de:2c:9e:1a:0c:f0:e1:c0:c7:85:ad:61:83:50:00:
cc:c0:27:cb:e8:09:47:69:3d:51:66:ab:51:3e:49:
8e:a1:b6:08:bd:2e:55:c6:52:68:bb:52:df:77:c1:
7c:8a:6b:f3:9f:93:fb:85:d0:9d:b0:ca:41:9c:c6:
3c:17:d5:70:bd:14:1a:ce:b0:f8:d2:7b:bb:4b:c5:
03:6f:7d:45:65:c0:fc:0c:dc:23:8a:94:c0:ac:72:
60:aa:36:8c:b1:1f:23:3c:16:3b:15:97:8f:3e:0e:
5d:6a:bc:64:31:cb:9a:64:0e:2a:8e:d1:a6:d4:10:
4e:5a:c5:55:af:97:ed:20:f6:d6:b4:45:36:58:48:
61:db:00:ff:26:44:d9:96:d5:db:eb:6c:4b:0b:60:
d1:a2:07:ea:96:d6:49:f8:25:46:4c:98:28:6e:fe:
1e:4d:76:57:9d:a8:3a:f7:a8:b1:d9:d6:70:5d:fc:
9e:e6:eb:f2:d4:da:f3:68:8b:68:b7:b8:34:cf:96:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:1E:90:BC:2D:1E:E2:27:F7:4A:00:E8:99:71:F6:20:DB:38:A6
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e1:12:a1:ab:4a:c2:67:9f:58:c0:c5:ae:ed:41:44:b6:5e:
18:4f:6e:61:a8:13:2e:85:82:bc:ed:8a:27:03:3b:5c:f7:8b:
a3:aa:2a:31:89:cc:45:e7:55:8f:94:93:03:6b:e4:7a:5d:47:
9d:79:be:ee:8d:de:d2:13:89:82:49:ff:63:7b:c6:c9:ae:6b:
3f:c5:15:4c:27:40:97:96:8d:50:12:a3:00:e6:c6:56:28:20:
21:4d:c5:c7:19:50:29:16:ee:c6:45:34:97:89:97:fd:06:68:
aa:f1:2f:c9:23:e3:58:b0:d3:54:fb:a0:0a:2d:8e:ef:42:23:
b3:0b:29:df:08:e6:f7:a1:9e:3a:af:e9:13:29:b6:85:7b:5f:
60:25:7d:8c:60:14:b3:ba:69:4d:8a:46:02:de:da:0d:70:08:
e7:31:6d:0f:32:dc:e6:de:b5:b9:8e:1d:cf:78:45:fc:e0:3b:
7d:5a:a6:28:64:49:87:c4:71:4c:d2:b5:81:a8:08:da:5b:d6:
cc:93:22:50:00:34:87:da:9a:6d:78:98:f5:a1:25:23:2d:a6:
04:be:e8:29:d7:5b:88:db:d9:4e:e6:99:da:31:0f:79:88:d4:
f8:2c:fc:9a:80:cc:c8:69:9c:e8:2a:df:d6:0a:c5:e7:eb:b8:
eb:d2:e8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:10 2026 by rpki-client