Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: L8RGbc2o8oMMmYJtdQiw5ey4cNf55kMrl8IfAvVoj8k=
Subject key identifier: C7:4E:9A:46:C3:15:93:0D:16:35:48:B0:70:13:FB:7E:86:D4:CB:A1
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 019CAB3442CF38393A37DE61FF615BC5D775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: QSFYbQ/3HXKbr8zP/TOAf/sKjDwMt89rb+LGwYM2FtQ=)
2: VpxDxilNFo6QDK_norEdW_OneKc.roa (hash: eM+dyL5sYA7YmYI63S6dG6sSIhkE5TG0Z5qosr3fK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:42:cf:38:39:3a:37:de:61:ff:61:5b:c5:d7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=c74e9a46c315930d163548b07013fb7e86d4cba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:e1:f2:dd:04:ea:92:0b:a9:6f:91:29:ad:
84:ec:d2:6b:4e:4c:63:8a:34:56:4f:36:e8:24:05:
c7:1a:3f:bd:93:b1:3e:3c:b3:c8:1f:e3:6b:35:14:
40:2b:28:24:f5:b9:cb:55:a2:ec:27:64:f5:b1:0f:
4d:f6:74:75:5d:4d:44:f3:3c:3a:ae:e6:25:1d:1c:
7e:12:52:c9:b2:4d:fe:ad:1d:f8:5e:1c:ef:1f:d3:
eb:97:ce:33:42:5a:99:02:ea:56:a4:1a:df:af:7b:
61:ad:d6:4f:af:d6:d8:49:01:2b:0f:f8:06:96:4e:
76:a3:80:7d:3d:33:b1:ca:52:c6:f2:2c:65:54:b9:
2f:64:1a:4f:37:f4:96:65:d5:53:86:f1:b8:c5:92:
09:80:1e:79:53:71:93:96:3e:bf:1b:ec:f0:48:7e:
97:04:f9:04:91:04:28:c5:03:76:09:af:5a:3c:41:
a8:8f:ec:97:85:99:25:88:65:f3:b3:50:cb:15:f3:
72:b2:c7:b3:24:9d:8f:b1:ad:a7:15:25:fa:6c:0e:
8f:79:ae:07:95:e9:a3:0f:88:92:de:c9:45:38:78:
af:7d:d5:1c:70:ae:63:d2:60:47:78:ee:81:a1:27:
df:d4:74:e2:b6:16:b3:f1:af:f5:5b:3d:57:95:72:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:9A:46:C3:15:93:0D:16:35:48:B0:70:13:FB:7E:86:D4:CB:A1
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:33:77:46:71:64:06:ac:39:86:9d:52:aa:5c:1c:7a:39:
53:fe:02:bd:5c:48:16:b3:8b:60:df:ab:71:af:0c:71:c0:69:
7b:3d:07:8c:be:74:0c:d7:98:3c:66:77:76:cc:fe:85:35:46:
60:5f:4e:c2:b4:1f:91:fa:bd:9a:c9:bd:01:37:2c:50:3b:c7:
39:7c:ee:0c:3e:2b:0a:b7:56:b0:77:f3:68:ff:7c:c7:aa:8a:
05:1e:d5:cf:10:81:20:43:b1:4f:0b:fc:d7:d0:00:1c:5a:6c:
b7:cb:21:5a:86:bd:f7:59:bc:9a:d6:8e:69:25:2b:ec:da:88:
14:a2:75:68:a7:63:67:1c:37:bb:ec:d3:c6:c8:99:c0:4d:bc:
23:4d:1a:07:95:96:97:f5:eb:53:44:d2:9b:f7:bc:54:e8:78:
40:fe:86:50:01:6f:50:0f:ba:3d:1c:7f:e6:f2:2b:4f:70:0f:
ef:39:4e:5a:c2:17:10:b9:e6:1b:b9:a6:e5:4d:c6:39:ed:7f:
63:5f:f2:f5:18:62:58:f0:7d:1b:dc:50:28:f6:71:9d:e0:7b:
e4:d8:22:91:c2:66:6f:fd:bc:f5:d9:bb:18:aa:8c:d9:98:a9:
1c:56:54:e1:3e:4e:90:88:6f:e4:e8:5a:36:ef:4f:0b:00:ab:
57:5a:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:12 2026 by rpki-client