Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: 4i8FMJpVizBxIwjAhAF5oJEBBic+nLPFhHM1POYQOlI=
Subject key identifier: 2A:39:62:B1:E7:07:D2:3C:DD:1C:58:1C:45:77:FC:71:53:C1:91:FC
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 019CAA2139A9C92CEAC6321ADD41B0506606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 111A
Signing time: Sun 01 Mar 2026 16:00:29 +0000
Manifest this update: Sun 01 Mar 2026 16:00:29 +0000
Manifest next update: Mon 02 Mar 2026 16:00:29 +0000
Files and hashes: 1: DDoVbi1hwK810Q3__yAihbTnUzQ.roa (hash: hkNUL3Jk8I6ohEW5lxLRCD9KCBglyppacl/pVvgBeSk=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: pmk5UmxkwoLWPfHLMxVouahlRsefHh+zZ34AoFIMFJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:39:a9:c9:2c:ea:c6:32:1a:dd:41:b0:50:66:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: Mar 1 16:00:29 2026 GMT
Not After : Mar 2 16:00:29 2026 GMT
Subject: CN=2a3962b1e707d23cdd1c581c4577fc7153c191fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:3b:7f:33:88:d5:8c:3e:e4:ee:40:0a:68:
fb:2e:0d:da:0e:26:f2:e3:c0:48:11:94:ef:29:cf:
f6:1b:05:6a:ff:dc:9b:9a:33:54:f5:69:74:2b:11:
95:60:ef:94:29:38:5f:bd:21:d4:e1:04:51:a8:9f:
2b:6f:ec:01:4b:a3:0d:20:37:46:93:97:5c:cd:63:
36:0b:7f:e3:4f:9c:f7:55:ac:a6:c3:1d:16:19:9f:
ce:8f:c4:e2:b8:46:38:f8:98:a2:67:93:c9:64:ce:
ef:5e:82:27:38:00:cf:68:71:70:8b:0f:e9:5c:82:
b7:64:f9:7c:82:3a:f5:c3:6c:90:96:de:db:62:d6:
e9:43:a0:3f:d9:d4:38:fa:ac:79:4f:7e:16:53:9d:
27:3b:3b:bd:d8:f6:d8:0a:ac:89:7a:8c:bc:e1:db:
42:c9:68:b1:8e:6c:4e:8d:38:60:7a:12:4b:f7:8e:
8e:f1:2e:2f:7a:c9:2c:ce:02:81:fa:98:22:48:b4:
72:ba:f3:28:70:40:7c:41:47:b2:07:46:1f:f8:ea:
0e:7d:9c:bd:ef:0b:b6:63:c8:8b:69:c4:14:f6:83:
c7:aa:51:a7:db:61:0b:35:e0:d3:5c:e5:b1:eb:20:
c8:24:0d:1c:21:10:0f:48:8c:f9:24:3a:86:7f:aa:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:62:B1:E7:07:D2:3C:DD:1C:58:1C:45:77:FC:71:53:C1:91:FC
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:20:07:b6:3b:09:d3:95:22:7e:2f:8a:bd:64:8c:03:9a:
51:7c:b2:d6:f1:47:2d:73:8c:de:58:48:0f:d4:f5:4a:94:8f:
87:1a:0c:8c:85:fa:cc:5f:88:6f:b8:9f:01:eb:69:fa:6b:f3:
9e:c1:dc:9d:b7:f2:12:6d:60:41:8e:a4:43:eb:21:e9:6d:6a:
aa:f7:98:59:f7:90:48:d5:a4:94:45:4c:35:80:1a:17:a0:4d:
35:7b:9b:26:04:b1:4b:d0:36:40:10:3a:68:ef:a1:83:c4:4b:
f7:11:94:d5:de:df:a7:45:af:6a:04:c8:21:67:54:6b:b7:dc:
58:35:70:b2:5f:bf:a7:fd:bf:fd:3a:a4:0d:da:73:89:16:ee:
40:11:85:8d:89:c5:85:b7:71:02:70:3d:d0:59:52:20:84:d9:
89:75:70:56:64:3b:f5:ca:f2:36:e7:9e:22:e0:5b:4a:db:90:
35:ac:3c:5c:d2:3b:61:e6:18:4c:28:0e:5a:04:5a:cd:49:32:
a3:f8:4f:f9:e3:ad:e1:ad:99:46:3d:36:99:d4:eb:a3:db:59:
8f:79:89:d7:d5:36:80:f4:5d:11:75:ad:6f:c6:fe:02:9f:6a:
27:59:1c:d0:fe:a7:09:3b:24:98:61:25:65:f2:82:08:9a:59:
b7:0f:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:40 2026 by rpki-client