Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
File: Q9JznRqU2rlXbiF80N-FdyBLIwA.mft (raw, json)
Hash identifier: mKQT61MBx1D0GbkbbSw8n+evQ5IFuj2kfEogHMJJEMs=
Subject key identifier: EF:B3:A6:F2:3C:82:66:0D:FD:32:20:CC:FA:D4:2D:03:14:FB:68:F5
Authority key identifier: 43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
Certificate issuer: /CN=43d2739d1a94dab9576e217cd0df8577204b2300
Certificate serial: 019CAB6B02560931FA6E0F204F7DCE590CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
Manifest number: 059D
Signing time: Sun 01 Mar 2026 22:00:42 +0000
Manifest this update: Sun 01 Mar 2026 22:00:42 +0000
Manifest next update: Mon 02 Mar 2026 22:00:42 +0000
Files and hashes: 1: Q9JznRqU2rlXbiF80N-FdyBLIwA.crl (hash: hDWBAK4sd357a8Mob+kBS4K+9BRu5BT8wiNr96C1U9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:02:56:09:31:fa:6e:0f:20:4f:7d:ce:59:0c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d2739d1a94dab9576e217cd0df8577204b2300
Validity
Not Before: Mar 1 22:00:42 2026 GMT
Not After : Mar 2 22:00:42 2026 GMT
Subject: CN=efb3a6f23c82660dfd3220ccfad42d0314fb68f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:c5:75:a0:30:4f:b9:97:6e:f2:d2:66:1d:
fa:00:31:87:58:75:f2:4d:c6:e1:b2:fc:36:2b:ad:
10:83:63:9a:ed:42:5d:7e:02:84:aa:ce:f7:7e:e1:
00:a6:5a:d8:47:a8:df:a9:92:99:a2:f1:70:27:28:
b2:ef:bc:08:24:c8:a2:73:48:8f:4b:ab:80:84:b5:
e6:da:ec:5e:6a:32:77:8b:e6:6a:79:0e:46:02:1f:
0a:19:b3:b9:80:a6:9c:a2:8c:87:75:b1:80:d2:68:
f4:5f:c1:d7:9d:30:7d:1d:5a:d1:65:06:cd:4f:09:
13:dd:9e:b4:15:70:b9:0b:60:e1:c7:2f:83:3e:3a:
70:88:18:32:46:4d:fe:1e:c0:9e:ac:3f:d3:db:ad:
d9:ef:cf:09:70:44:d0:55:98:ab:1d:d5:8d:7e:67:
70:43:f4:d7:af:9e:54:05:19:6a:ec:d9:eb:95:1c:
64:a0:f1:33:9a:dd:63:22:cb:19:45:c1:2c:6a:6c:
bc:39:7b:a3:02:36:04:7f:2b:f3:c2:5b:2a:8b:04:
16:3b:f9:7e:a7:14:0f:b8:f7:28:ac:46:da:4b:88:
f2:e0:22:f5:e8:c2:17:b6:97:0f:a6:1a:9f:15:b7:
36:f5:4f:0c:8f:d1:fc:85:41:37:07:e6:aa:d4:17:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:A6:F2:3C:82:66:0D:FD:32:20:CC:FA:D4:2D:03:14:FB:68:F5
X509v3 Authority Key Identifier:
keyid:43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b0:4d:28:48:e6:4e:51:c4:86:96:e2:a3:db:c2:5b:08:9e:
1c:2a:3c:d3:4d:e7:7a:ad:32:8d:b3:69:64:ff:b0:d3:75:14:
39:6e:4f:ef:f6:4d:51:b1:9f:de:cb:22:62:84:3f:d2:ec:31:
11:51:91:3c:f6:d8:a0:20:c2:37:69:01:76:0c:ef:98:0a:16:
b7:26:66:f0:8a:6a:f8:50:c4:21:48:ee:9d:61:6d:13:fa:27:
aa:24:33:db:d8:9d:43:d3:57:0f:ac:b3:d0:19:f8:12:8e:e8:
3c:9d:fb:97:73:f3:22:97:72:03:8b:2c:5b:45:57:84:c3:dd:
57:b1:9a:45:d9:5f:ba:b7:80:99:74:f0:74:22:3b:6c:19:d0:
1b:cf:94:d1:2e:7b:9f:ae:50:f5:0b:0a:b6:ea:aa:bc:29:ef:
3f:df:05:50:a0:2e:48:18:cb:d5:c0:61:fb:a6:d9:1d:70:8b:
3c:d6:39:e5:be:c0:bc:22:54:ed:2c:7a:e1:ca:51:30:22:e9:
e4:cb:a8:17:71:48:f8:3b:04:17:c8:0b:3f:b2:0c:21:4f:59:
c9:7f:ef:6a:54:62:c5:3d:7a:47:12:64:20:e8:61:22:83:5a:
67:98:1c:b5:db:07:1b:f0:78:77:2a:0b:93:f0:1a:53:54:8e:
d2:f4:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:12 2026 by rpki-client