Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: ng/Fg9MaSUwg4OvjEC8VIrcHUJy7ujCfX4asxp8cx6A=
Subject key identifier: 35:33:99:1C:AD:75:A5:BE:65:90:30:7E:6A:B0:1F:0C:90:75:ED:1E
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019CAB6B74400DA4024104FCD507EABD96DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:11 +0000
Manifest this update: Sun 01 Mar 2026 22:01:11 +0000
Manifest next update: Mon 02 Mar 2026 22:01:11 +0000
Files and hashes: 1: kEStRgFFvUE-F5ouVzsvLSOaSko.roa (hash: CPss/SLu7PEcptxsMsF+R9khBX0xPafGY3ozU4mC0YU=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: FuG9zCN8AWlxHWtTkXqcLPRbfDvFt0NlZ94s+V9V9Q4=)
3: ybcCspNcqCQ33fBea-dujuXdvYA.roa (hash: VgxSvwLJO5sqIYu59D65/gIjVJTVHdASRnQ/3xkt0AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:74:40:0d:a4:02:41:04:fc:d5:07:ea:bd:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Mar 1 22:01:11 2026 GMT
Not After : Mar 2 22:01:11 2026 GMT
Subject: CN=3533991cad75a5be6590307e6ab01f0c9075ed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:81:68:9a:cd:a6:63:df:b3:64:83:40:bf:
35:b2:07:35:d5:18:0f:f0:33:0c:33:1e:bb:0e:83:
c1:28:1b:b4:f7:61:28:11:91:65:1b:c8:e9:ae:c6:
85:fe:85:54:5d:f3:34:09:7b:ce:90:5b:bc:cf:82:
b8:2a:25:2d:2c:2b:10:ad:63:3f:f2:e5:19:b5:32:
84:35:4c:f6:f7:90:19:b1:23:8f:6a:b3:81:10:46:
33:13:f5:61:cf:79:4b:db:dc:67:07:77:6e:af:19:
8e:d0:ab:57:ff:2a:d3:2f:53:86:e3:71:2d:5e:2a:
86:38:55:14:fa:60:2d:ce:c7:48:fe:0b:70:4e:45:
0c:ce:41:3c:76:c1:d9:00:54:8e:59:9e:1f:a3:96:
65:c1:95:b8:98:43:75:e6:4a:c2:16:f1:a7:b8:77:
44:4d:bc:d4:51:ae:20:5b:42:0d:5c:d9:6a:9c:e8:
9b:92:ea:6d:ec:3f:91:60:f1:f3:5b:e4:8a:67:c2:
e6:2b:91:f4:9f:9a:f3:af:01:a9:6c:05:dd:1b:f9:
66:26:cb:ed:12:59:d3:0b:cf:51:a1:4a:e9:a7:69:
4c:f7:a7:6c:17:1f:6b:aa:2a:db:8d:ac:78:d2:e1:
87:c6:d6:42:e8:fc:fa:e0:10:a6:52:45:48:c0:8c:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:99:1C:AD:75:A5:BE:65:90:30:7E:6A:B0:1F:0C:90:75:ED:1E
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8d:b4:f7:67:8e:91:e2:e6:63:fb:22:c4:ec:21:a9:3a:f7:
59:bf:d0:be:6d:9b:fd:13:93:f7:0c:7f:3b:72:95:e2:c8:c5:
bf:ff:92:dc:68:11:52:d6:3b:30:34:42:d8:71:0c:3d:27:58:
3f:f1:f2:71:27:1b:82:77:d1:73:30:98:67:d9:a7:84:b3:91:
e2:99:fa:cd:c6:6d:99:35:2c:89:36:8a:45:60:f1:5a:94:c4:
71:a4:e9:bd:f5:7d:a6:63:a8:dd:99:ae:65:cc:34:b4:9e:17:
53:e8:5c:01:28:b9:20:e9:6e:7c:84:7d:67:62:c9:d1:e9:a6:
58:d7:4d:20:1a:9c:22:77:a6:e6:b0:61:75:30:1e:eb:d8:45:
06:31:83:03:ea:88:40:c0:4c:cf:cc:bb:0a:e5:f1:f8:71:d9:
56:57:fc:51:08:77:d1:8e:f3:c0:c8:8e:11:11:bc:28:47:e4:
e1:a3:55:4e:98:63:36:b0:35:a4:91:31:a8:f9:14:f7:69:e1:
f4:9b:a4:17:54:f0:be:02:3f:9d:d2:1c:36:b7:1a:51:b2:cf:
2e:11:95:fa:78:b7:3a:43:4c:af:c2:14:ae:07:28:6d:bc:f6:
35:eb:06:0f:b9:1d:49:04:e4:ea:5b:b9:1d:72:c2:8b:07:58:
f1:36:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:11 2026 by rpki-client