Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: 9rY+5L+Dg0gDC8k6bqpBvMkKQ+QkjeBM25mBqOg/gYs=
Subject key identifier: F1:D9:4D:2E:29:1A:F1:84:8F:89:D1:35:F0:04:D7:CE:FE:5A:74:45
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 019CAD230B1799DB796A40EED96D9912B6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 17DE
Signing time: Mon 02 Mar 2026 06:01:20 +0000
Manifest this update: Mon 02 Mar 2026 06:01:20 +0000
Manifest next update: Tue 03 Mar 2026 06:01:20 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: VcYChVDiAkPk4cRR/bwPnRcrZgrjBAD0CMeUXHv/a/I=)
2: ekViUfVjeX96GOzSolN__8-4A4k.roa (hash: YyzGmywtQBLblhHE3rDDlveGwps6u/nY6w46Xdc6qtY=)
3: meH9o9i7-j2R-Vcd-oY44f90eGc.roa (hash: jMkC1VRwXkD+Vzq7AX9qpzMXsW5ynXfkYRel0vHaW90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:0b:17:99:db:79:6a:40:ee:d9:6d:99:12:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Mar 2 06:01:20 2026 GMT
Not After : Mar 3 06:01:20 2026 GMT
Subject: CN=f1d94d2e291af1848f89d135f004d7cefe5a7445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:27:c8:be:cc:2b:3f:4d:d5:d0:3a:31:b9:
b0:1c:83:12:1a:a0:47:04:fa:91:21:05:16:8c:c4:
a9:61:c4:2a:a0:21:df:64:b2:04:34:c1:8f:da:af:
c1:f0:09:ba:21:de:a1:f6:9f:a0:4c:13:36:4e:67:
ce:35:19:40:8a:f5:f4:45:f1:74:0b:d7:4d:12:a8:
63:03:f1:86:d7:1d:f0:3b:a4:8c:4e:8e:c9:ed:30:
0e:94:c4:05:b2:f3:a7:1e:27:77:3e:54:5b:8c:80:
d7:f1:d5:44:88:a7:f0:ea:e9:42:52:c6:af:09:ee:
d9:b2:ab:38:f8:39:fa:07:67:b4:1e:6a:51:63:eb:
5f:bf:c3:f5:67:df:c3:da:9c:9f:b8:07:a1:33:87:
cc:55:ca:e4:11:bc:7d:0c:d8:e9:16:f2:ba:b6:d0:
1f:4c:fe:0d:63:9c:dc:3f:d8:5e:70:f3:6c:39:10:
6d:c0:d2:48:a7:d4:c0:c5:f0:f2:2e:6a:49:de:5f:
e8:2c:08:9a:90:ec:7d:32:9e:76:1f:29:1a:e5:9c:
f4:3e:3d:61:3d:7a:a5:2c:4e:44:24:c5:13:56:7a:
1e:ae:5f:b2:3d:a2:c4:6c:21:09:2c:17:30:a5:c2:
c0:1a:ac:49:69:99:18:92:9a:fa:61:03:5e:9d:57:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:4D:2E:29:1A:F1:84:8F:89:D1:35:F0:04:D7:CE:FE:5A:74:45
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:52:57:f8:e4:57:ae:9c:82:ab:2c:5b:64:a3:4b:4a:0a:c0:
5e:9c:bd:11:5b:e7:a0:4b:c4:73:c7:93:6d:fc:af:29:1d:8f:
94:4a:00:2b:54:1b:15:9e:fa:94:af:73:27:ef:5e:33:35:3a:
47:44:06:34:ac:40:78:a3:34:66:d8:88:04:4e:f6:f2:86:b4:
51:67:a4:d2:82:d2:95:23:fb:c6:ab:8a:8a:c2:d9:a7:0d:ed:
05:49:f8:51:86:19:97:53:11:7e:38:e5:a1:06:a1:27:8b:4b:
d0:5a:a1:d6:47:59:ad:29:6a:c1:d3:cf:be:e8:4c:90:0d:97:
9b:ac:11:7b:5c:1b:a8:12:e5:44:05:f8:72:b9:ec:69:ab:30:
7b:aa:4a:49:15:91:60:60:c1:72:0d:10:c7:7d:74:5a:45:9a:
a8:03:c2:ac:96:3a:f7:84:b6:e3:5f:9e:15:bf:7e:16:5a:1f:
e7:56:0b:7c:ec:83:ed:fb:f6:06:b7:85:e2:30:f1:15:ea:ec:
5d:7b:ce:7a:b2:69:74:8c:2e:09:fd:6e:ff:40:8a:20:77:1b:
92:a5:c3:8d:21:c9:19:c2:8d:7d:eb:d6:f2:be:ae:1d:e8:e9:
98:fb:73:49:9b:de:f9:20:e4:4b:9e:9b:7f:74:a2:ad:ca:3a:
49:ce:69:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:27 2026 by rpki-client