Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: ewF5xntAaUivKidjNRdco4BWyz0dDz1Up/TNmkvckP8=
Subject key identifier: B5:EC:B7:6E:95:BB:99:D1:1D:C3:CD:89:C0:04:AA:0E:FA:9E:3B:8B
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 019CA9EA882FCD40AC86E6A0EEA495D64362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0E34
Signing time: Sun 01 Mar 2026 15:00:45 +0000
Manifest this update: Sun 01 Mar 2026 15:00:45 +0000
Manifest next update: Mon 02 Mar 2026 15:00:45 +0000
Files and hashes: 1: 4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa (hash: /Aj0axBj9aVxd0CaoZ4TQJb5zpK/Z9ZsET+fz6PD9KQ=)
2: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: N/jaji40rmvO8wfZ25c3HbmAudBqbVTzDENUch8irJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:88:2f:cd:40:ac:86:e6:a0:ee:a4:95:d6:43:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Mar 1 15:00:45 2026 GMT
Not After : Mar 2 15:00:45 2026 GMT
Subject: CN=b5ecb76e95bb99d11dc3cd89c004aa0efa9e3b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:85:0a:2f:14:8a:0e:4c:d7:e3:cb:74:ee:
fd:6f:f7:04:1a:5f:08:90:cc:6f:22:39:c2:db:2d:
54:17:f3:44:32:3b:c7:31:6e:b9:e9:4c:3f:dd:d3:
f3:d9:14:d8:e9:00:75:48:3d:dd:c6:a6:38:6d:79:
93:24:d1:a9:84:e3:06:6c:22:61:8d:69:46:20:17:
c2:3c:23:0c:e3:fd:0b:cd:74:23:35:a3:bc:d5:a0:
62:f5:b7:59:c5:55:31:5f:b8:08:23:64:a8:70:56:
f5:2d:f7:92:c0:bc:34:7f:87:db:6b:45:67:fb:e3:
c6:d8:d5:64:6c:a9:b9:4e:ba:05:71:df:7a:08:c3:
72:cd:c8:48:b3:e5:54:6f:df:2d:bc:d7:00:45:8e:
9f:5a:d6:ab:e8:30:2d:23:02:48:24:8e:97:55:d4:
7c:7d:7b:f3:21:c6:a4:9e:5a:e1:d2:e2:3f:fa:5c:
b9:eb:d0:08:4f:34:55:a3:c2:0b:64:26:9e:43:09:
57:74:f6:f9:ae:fd:79:44:3c:58:6f:dc:55:bb:dd:
84:fa:c5:40:fa:00:1b:a1:7a:73:86:d9:32:f8:6a:
7e:c1:b0:be:59:59:97:4c:e8:84:e7:ed:d8:11:52:
5c:9a:9e:51:e7:f2:ae:3c:29:11:b2:99:dc:38:fa:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:B7:6E:95:BB:99:D1:1D:C3:CD:89:C0:04:AA:0E:FA:9E:3B:8B
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:4a:11:de:fe:9f:60:02:ac:ff:6e:8b:2b:3a:58:42:af:
4a:f0:cd:4b:5b:24:52:dd:41:01:e2:7e:bc:c1:04:32:a2:49:
74:75:9c:83:4f:57:e3:ce:c0:84:14:a9:b4:a0:96:93:ff:a2:
3f:63:17:1c:1d:d5:e4:08:06:c8:44:53:41:54:0f:19:b9:2c:
3f:5b:e6:fb:5e:00:a0:01:3d:d5:ea:47:a2:1b:b2:4c:8f:d9:
21:28:ef:32:7e:da:00:49:13:e0:e9:a2:90:90:c4:94:d1:a9:
af:7d:27:ea:91:07:fe:fb:7e:97:09:45:b2:cf:74:6f:bc:72:
b0:be:52:ce:8d:79:07:2b:dd:8e:87:67:c6:2e:e5:78:99:05:
65:3d:9e:18:b7:dc:a5:0d:ae:db:b0:9b:b0:3c:20:16:68:4c:
58:75:c0:65:fd:14:0e:4a:f1:d6:2a:e4:b0:63:cc:79:c8:8c:
11:a8:83:1d:e7:23:0b:ba:f3:42:b1:f9:47:63:6c:1c:28:66:
61:44:b2:a4:23:1b:56:d3:ee:19:7e:7d:ab:43:d2:43:63:fe:
f9:bf:c4:09:72:65:5f:f1:c2:06:16:75:98:72:63:71:0a:58:
2e:01:89:04:b2:80:7c:f6:e5:85:25:74:b7:fc:63:a2:af:6b:
67:33:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:22 2026 by rpki-client