Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: D6ITrJmXWvi1OGXUbZ19Q7jJbskExyCbWP2la8Ll9XA=
Subject key identifier: EC:92:35:DC:13:97:79:C4:D8:67:ED:1C:01:E1:EF:9B:D0:57:0F:C4
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019CAF1115A1E8D1C0C5C6C50E327A844527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 04F6
Signing time: Mon 02 Mar 2026 15:00:58 +0000
Manifest this update: Mon 02 Mar 2026 15:00:58 +0000
Manifest next update: Tue 03 Mar 2026 15:00:58 +0000
Files and hashes: 1: BMVk-OA-2PhTMA5A-sORM1prfMQ.roa (hash: E5dCIP4UxhH+T0A81jHL6M9IWvcHzJuPi1U0SLcMSqE=)
2: MBMbLrsZWEsBNYoYuyLSlAPF2WE.roa (hash: BixX2lk4Zd4GgNurHhSn7REJ4Le+26ZBWj1SCXORrcE=)
3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: XxI1C5x8S3ex2YCjo003HgYYlRRMwrEQ34qAkLUTg2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:15:a1:e8:d1:c0:c5:c6:c5:0e:32:7a:84:45:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Mar 2 15:00:58 2026 GMT
Not After : Mar 3 15:00:58 2026 GMT
Subject: CN=ec9235dc139779c4d867ed1c01e1ef9bd0570fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:72:db:39:45:2a:72:7c:6a:94:e1:72:4c:
c6:9d:3a:69:fe:88:87:3d:aa:b8:e2:75:18:e3:e1:
c9:3c:f3:86:c0:50:87:85:55:13:00:66:86:da:b8:
c4:3c:b4:44:eb:2d:f6:6f:78:4a:21:30:1c:66:4b:
93:5e:45:9e:23:86:b1:17:e2:ab:ae:00:a5:17:a7:
01:9f:44:f1:4d:ee:33:78:7c:16:9b:fb:e5:07:68:
2b:b2:db:b7:dd:64:2e:b9:18:de:70:f4:87:71:42:
12:fd:da:21:94:c3:aa:d8:4b:b6:5a:f0:63:c6:07:
a7:65:86:c2:8c:c7:0c:12:e0:47:e7:6c:99:0b:d9:
b9:78:d8:a1:41:21:56:6d:c3:ca:98:71:07:33:a5:
26:d2:a1:c9:17:26:d5:78:19:b3:f4:a9:14:e8:2e:
d3:3c:92:17:58:4d:a7:60:19:f1:e9:d9:91:07:72:
76:70:3e:d3:48:7c:bb:67:1d:6c:f3:d2:de:fc:7b:
5c:08:7d:b9:f4:e7:65:a8:de:86:d8:93:56:6b:b2:
78:67:89:e5:45:4b:b4:81:7c:04:e2:aa:92:34:b4:
c1:55:9b:b6:f5:91:69:03:e4:bd:10:ef:77:7b:f3:
85:5f:db:22:77:49:65:2a:30:f6:85:d0:ed:2d:7a:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:35:DC:13:97:79:C4:D8:67:ED:1C:01:E1:EF:9B:D0:57:0F:C4
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a3:1a:43:aa:1a:5b:36:88:05:23:f1:72:75:c4:9a:aa:0c:
44:3b:9c:6f:c0:8f:11:42:65:43:b8:53:c2:f7:55:c5:f6:68:
ed:c0:3b:e7:e2:08:97:26:5e:41:f4:6a:1c:ce:41:0f:6d:ca:
da:10:58:00:18:6f:c7:b0:a4:d1:aa:5b:81:77:45:fc:83:ed:
80:d7:d4:c2:3f:87:30:6b:f3:60:f3:80:6b:95:0f:20:de:88:
be:81:14:14:41:3b:c7:bf:ab:62:66:38:83:45:6d:c4:69:cc:
77:e0:6b:73:6d:cb:5f:fc:ca:ae:68:b9:6a:8a:7f:3d:c9:96:
2a:d6:3a:58:26:84:c9:ba:ae:97:50:cd:51:d3:3e:18:40:80:
1d:0d:13:cb:e5:3a:33:14:5d:b4:45:54:e5:fb:d5:8c:27:46:
d8:85:20:3f:93:b6:b6:31:8c:95:1c:9a:e0:cd:4f:d1:4e:87:
e1:38:76:10:a8:70:c0:8d:9d:6b:6e:b8:97:b9:e6:81:bb:af:
0e:73:0e:17:f3:ae:d3:4c:04:35:eb:ae:bc:ba:4b:03:4c:2e:
2c:b0:90:85:f4:04:51:0c:cf:e9:d1:b9:6b:f4:42:f2:0a:c1:
91:b0:62:1d:ea:2c:70:b5:7c:a9:2e:ce:40:a2:a0:c9:5f:4c:
1a:ef:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:49 2026 by rpki-client