Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: gGcOS6egZxbucFoi5eTnlT+tLBCdC9u+mv4U0lGMPQE=
Subject key identifier: 6B:B2:8F:E7:F5:B5:F9:25:1A:27:DE:AA:DB:47:38:56:5B:32:FF:B0
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 019CADFEBBFAA2A67BCD217295950DA23B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 10:01:18 +0000
Manifest this update: Mon 02 Mar 2026 10:01:18 +0000
Manifest next update: Tue 03 Mar 2026 10:01:18 +0000
Files and hashes: 1: 1OlpkuQpAVvITqIzbJCzHhbZuaY.roa (hash: 3R+s0povuTwLbXStSvGlYnJbOVvmE0QK+nYMWxPdz1U=)
2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: S2FDJb0NXvmvSuUxiHef4plqA6ueyq8zbRJlwQTJ7BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:bb:fa:a2:a6:7b:cd:21:72:95:95:0d:a2:3b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Mar 2 10:01:18 2026 GMT
Not After : Mar 3 10:01:18 2026 GMT
Subject: CN=6bb28fe7f5b5f9251a27deaadb4738565b32ffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:99:61:3a:51:d8:fd:ba:88:86:af:e7:be:
46:d0:0e:c0:cc:bc:f7:2f:fb:22:c8:b2:d3:6c:65:
27:7a:38:e1:4f:96:97:fe:51:30:f8:28:bf:e1:35:
d8:79:13:8f:6c:2c:55:a2:e6:9d:df:36:93:8e:77:
b6:1d:8b:8a:08:dd:5a:f8:19:34:a8:57:69:45:f2:
50:e0:5e:ff:3f:6e:0f:24:2b:57:62:ad:7f:4b:00:
ff:be:27:5b:b0:05:00:df:be:8a:76:a7:66:86:2d:
34:be:0b:df:3b:7c:3c:4c:a9:95:5d:6e:35:41:be:
4a:08:44:d6:ac:59:fd:86:38:9b:17:af:8f:f1:0e:
92:ea:91:75:c9:0a:16:83:50:dd:b2:58:fc:ff:9e:
40:5a:35:f8:ca:12:87:28:ee:f2:f4:a8:e8:61:50:
51:4a:ff:5e:ad:e7:e2:54:f3:fd:6f:a2:fc:9a:39:
f1:e2:05:42:ce:e7:3b:00:ef:b9:1e:ee:b9:41:29:
37:45:14:ca:c5:2c:12:68:ac:e7:d7:05:af:73:59:
44:c1:bb:c2:2d:82:6a:cf:3e:8a:25:b4:b4:29:0d:
3a:4f:34:c1:a6:91:92:df:bc:ca:c6:d5:3d:58:23:
31:52:77:9d:e5:e9:49:53:a6:1b:e0:fe:47:b1:94:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B2:8F:E7:F5:B5:F9:25:1A:27:DE:AA:DB:47:38:56:5B:32:FF:B0
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c5:74:35:81:25:49:5d:ed:8d:97:5d:96:42:93:12:24:e4:
28:94:af:64:c5:ca:38:51:57:49:ad:92:3a:e7:e2:1c:d5:dd:
cd:1b:bc:97:2d:18:f1:00:b6:13:0f:15:a0:d2:4c:69:06:9a:
2e:47:8e:d9:ce:93:38:55:0e:4a:89:19:30:bd:aa:9f:13:86:
14:b1:79:8a:0a:34:89:ce:89:65:ae:50:80:19:35:4e:06:5b:
55:a1:24:35:3e:32:50:e8:63:68:5b:51:05:f9:53:ed:04:42:
0b:19:01:3a:42:36:c8:a4:56:03:0a:35:97:c2:11:ac:7c:b5:
c7:a5:50:b6:c8:91:c3:97:d7:aa:cc:42:6c:45:b8:be:15:c8:
32:d5:07:e6:0a:bd:a1:71:fb:4b:a8:af:1c:a3:f8:4f:c8:85:
9f:35:c9:e6:c5:b6:9d:e5:ef:8e:5d:4f:1b:60:bb:b2:f9:c6:
7c:5a:da:f4:99:a2:f9:51:58:19:77:f0:bd:2a:3a:23:f0:dc:
a0:9f:7e:26:b4:25:56:76:17:b4:a4:83:5a:2d:08:95:7c:ba:
25:15:62:81:d9:21:f9:dc:43:f7:d9:8b:4d:fe:09:34:af:1d:
5c:12:fb:2a:93:10:bb:83:af:51:d8:84:50:7e:e5:a1:c8:ae:
5a:09:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:33 2026 by rpki-client