Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: N+HLBqujFSIQDK3HG8mJ+BiwJ/SYsGkA+OoKfHjPkJk=
Subject key identifier: B3:2D:30:B5:20:EC:47:D2:BE:10:6C:03:AE:A4:20:73:EE:B9:B8:E9
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019CAAC6BD2C35456F970658E92AFB281499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 1375
Signing time: Sun 01 Mar 2026 19:01:17 +0000
Manifest this update: Sun 01 Mar 2026 19:01:17 +0000
Manifest next update: Mon 02 Mar 2026 19:01:17 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: ujnPf/g2P77hHxIq7c0L542BOqsb5N6pd/iV1hcQHBA=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bd:2c:35:45:6f:97:06:58:e9:2a:fb:28:14:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Mar 1 19:01:17 2026 GMT
Not After : Mar 2 19:01:17 2026 GMT
Subject: CN=b32d30b520ec47d2be106c03aea42073eeb9b8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:6b:fe:1d:33:1f:1f:24:e7:55:ef:7e:67:
4a:97:39:8c:8c:85:9f:b6:d4:33:9d:b2:0e:f3:1e:
43:3c:f0:0a:c2:2a:90:a4:1e:d5:8a:47:cb:94:2c:
02:69:38:26:d5:64:ed:f3:2e:c9:38:e7:0a:ed:5d:
a9:7f:ec:e8:5f:a8:07:d7:37:40:43:e2:d3:cc:89:
a0:e9:92:a9:71:7a:40:25:c9:bf:64:a6:8e:09:9b:
26:5b:22:ff:26:5f:1e:4e:63:07:73:7b:f6:ec:6f:
a8:c2:09:51:be:79:fe:bb:ce:da:bd:db:3a:e8:5e:
4b:57:e3:ee:34:d0:84:0a:26:ed:f9:4c:14:ec:bf:
76:2f:7d:00:61:12:37:f2:a6:9e:a1:40:24:0c:81:
a6:8c:71:ae:51:49:73:6e:60:a5:ca:e0:35:34:32:
38:d5:2e:d8:69:31:ba:47:10:4c:cd:03:df:8b:72:
cf:1b:ef:b4:65:43:9e:3d:79:7f:f4:92:0d:db:12:
72:b8:68:17:b7:4f:cc:7a:3e:4f:a5:6a:4a:e6:26:
02:d0:47:e9:ea:a9:6c:fb:4e:04:a9:5c:cd:ff:fe:
fd:6e:90:0a:79:10:0c:b3:7b:1a:4e:a7:5a:e2:db:
23:67:03:72:0a:8f:a1:e3:82:51:50:c7:cc:b8:63:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:30:B5:20:EC:47:D2:BE:10:6C:03:AE:A4:20:73:EE:B9:B8:E9
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:ce:c6:91:eb:a0:18:1d:8a:b1:bc:37:60:ae:97:ca:90:
b3:5a:c0:89:83:c7:8f:9b:ed:69:51:92:9b:2a:2c:71:8e:90:
dd:c9:0e:83:69:a5:7a:e6:0a:ff:03:4d:f9:55:1a:97:21:a6:
db:4c:22:e2:42:71:10:f7:1a:f6:cd:55:5a:bd:1e:7d:31:67:
1b:58:d9:25:b3:96:23:e6:03:ff:3e:3b:ee:87:dc:aa:ee:c3:
d7:95:1c:06:1c:3f:0a:56:4c:9d:30:6d:46:b8:5a:2e:40:39:
e7:66:e2:8f:63:d0:34:14:a0:81:ed:85:a2:03:54:52:7d:a2:
4f:6c:95:2a:61:2f:8a:35:26:06:79:3d:a4:1a:37:5f:f8:a8:
50:ce:2c:25:4f:84:ca:3f:8b:3c:04:e7:c8:20:04:2f:ae:48:
48:24:73:23:bb:d8:48:54:73:a2:48:80:2a:e5:88:2f:65:d0:
cb:b0:e7:ad:2a:41:21:ef:3a:3f:c7:f7:d5:99:16:67:4e:90:
5f:78:f8:a1:8c:73:64:7e:2a:aa:25:13:0b:84:6d:d2:e3:9d:
dd:5d:b0:3b:10:2b:63:ba:b2:7d:1a:d2:b4:e1:d6:ff:0a:57:
d7:e4:68:7a:36:37:5f:a3:7e:e7:59:81:ab:8d:5b:44:22:28:
f7:16:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:26 2026 by rpki-client