Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: m3hNlnC7U7SOk6TGY0xIGiqDYYyZEkKy+0Di++N2pjo=
Subject key identifier: 84:18:5B:2F:9F:D0:77:23:42:A8:E8:84:A5:8E:79:C7:70:82:D9:8A
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019CADFE00E4C1678B155A2DED2A87BB2F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 0278
Signing time: Mon 02 Mar 2026 10:00:30 +0000
Manifest this update: Mon 02 Mar 2026 10:00:30 +0000
Manifest next update: Tue 03 Mar 2026 10:00:30 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: Io/OakeS98gPJ/H3xS8Fhov0DlHMmYFIxwmcAt9eTbE=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:00:e4:c1:67:8b:15:5a:2d:ed:2a:87:bb:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Mar 2 10:00:30 2026 GMT
Not After : Mar 3 10:00:30 2026 GMT
Subject: CN=84185b2f9fd0772342a8e884a58e79c77082d98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:8c:0f:f2:49:1b:b4:fd:ee:78:48:f1:92:
29:97:01:07:2c:b7:6f:d2:2f:da:bd:aa:c9:e0:8b:
7a:d3:a7:c1:31:af:97:a3:0c:ca:0d:bd:6a:27:28:
c9:10:23:fc:b3:65:de:94:99:74:c4:5c:5a:a9:19:
1c:aa:8a:87:5c:cf:8f:ce:61:39:fc:58:77:f4:43:
8b:ef:bb:fd:d1:b8:53:91:80:79:a8:41:de:05:17:
52:bc:d7:cf:a9:99:2e:ae:c2:83:10:c6:3e:1d:7c:
e9:62:91:1b:d7:93:9e:44:3b:e6:d4:df:5e:7a:6e:
ee:fd:2b:8d:99:5b:a0:08:e2:ff:a9:56:c5:1e:eb:
d0:d4:45:67:eb:66:8d:11:a8:af:56:a6:ac:28:01:
75:1b:75:58:92:9f:32:fc:ba:b2:01:cb:96:f3:64:
68:77:1e:0c:54:10:02:e9:e4:ca:f8:32:a0:e0:b9:
ff:69:f1:40:f5:ac:05:9d:95:9b:96:ec:00:15:be:
12:7e:e8:66:33:d6:ad:7c:aa:89:50:55:0a:46:7e:
a4:fb:7d:d0:e1:2f:10:af:24:54:cc:c2:24:3a:85:
c6:a6:1c:46:bb:8d:e6:6b:65:d4:e7:7b:54:ca:00:
7e:32:33:4e:0d:4a:73:1e:85:1f:72:db:a8:06:12:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:5B:2F:9F:D0:77:23:42:A8:E8:84:A5:8E:79:C7:70:82:D9:8A
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b4:26:75:c1:49:cd:75:04:2d:e2:ea:4a:92:ec:72:cb:99:
b4:71:fa:34:90:f3:24:1b:d2:da:92:af:47:b6:a3:a9:26:90:
67:48:c1:a8:47:01:11:92:62:d0:6e:2e:10:e6:34:41:13:bb:
bf:d0:fb:26:c1:25:50:40:a4:da:21:42:fc:9c:b9:36:f0:a3:
a9:01:5a:0e:32:2d:78:b2:e2:bd:94:b5:25:cf:15:da:6f:52:
b4:fe:ae:fe:7b:04:33:8b:6c:f5:4c:bc:e7:18:d9:7d:45:1e:
99:8a:3c:13:10:f7:16:41:bb:fc:eb:cc:90:39:f0:aa:7b:3d:
bf:be:f5:4c:cc:1b:aa:97:bc:27:87:65:9c:26:80:75:70:c7:
a0:4a:20:9a:ff:1b:ca:ee:05:0d:c8:ce:18:01:3a:88:d5:08:
c5:80:b1:d5:90:7e:42:c5:5b:5c:80:ba:29:e5:ab:15:a6:b2:
c2:e8:76:ca:04:4d:8f:24:2e:e2:a7:98:b6:90:13:a8:7f:da:
e3:85:96:fb:e4:2f:4d:b5:6f:6b:f8:1e:86:58:03:1b:12:15:
8e:f8:ec:19:93:58:e1:93:ae:78:ea:ea:c2:66:f6:f4:2c:97:
a4:5d:44:0d:67:c2:1a:1b:2c:31:29:c8:09:e3:a9:a0:2b:92:
6a:4c:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:13 2026 by rpki-client