Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: lraU1INoW54HJXjpMdCnqr/qtlM/tNKMlhGAKlrcNZ8=
Subject key identifier: 85:2E:1D:93:55:17:29:EA:C3:40:72:12:C0:E2:3E:2D:19:54:06:22
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 019CAB6B3CF74DAE64689CC60870080159CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 0742
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: abh6_OV0w_23vHurZg2lf03FAWI.roa (hash: WaNrZ48mNKxaEjIRodmrrMT60e4DHtMtypg5HH38Fac=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: WqVHA3GDVn5ioguMOlIC4f2meXPVpeO+N6amZjOWPcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3c:f7:4d:ae:64:68:9c:c6:08:70:08:01:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=852e1d93551729eac3407212c0e23e2d19540622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:94:e2:b0:ed:5e:2b:69:52:2b:a1:23:b9:
19:34:e8:a9:3b:35:d8:74:35:52:e1:d4:dd:30:95:
53:05:f6:5d:ea:20:e1:a6:c0:e6:40:60:8f:80:71:
6c:75:db:dd:4d:b1:95:85:45:70:e9:46:74:a7:9d:
91:6d:36:34:66:f5:32:52:0c:77:a8:89:4c:82:0d:
3b:ce:5b:32:ae:ca:92:36:9c:55:eb:fa:ba:8a:a7:
db:89:8b:57:d2:ec:f0:8f:7b:02:02:8a:83:56:86:
48:99:3f:5a:12:16:eb:aa:b1:18:40:e0:19:56:14:
66:c2:18:b1:6d:76:31:e2:7b:07:06:1c:f9:f3:5f:
bc:e8:c6:1c:6b:a4:e5:9e:f6:6c:1c:e3:6e:e1:2d:
97:16:73:f2:e9:0b:fb:03:d6:bc:86:26:8d:9a:49:
20:97:00:70:72:a1:03:3d:9c:4f:db:c5:b5:39:00:
ce:d9:8d:72:51:e1:28:ed:2f:3b:bd:1b:b3:c3:26:
8e:e7:45:18:3b:76:57:26:58:f1:b7:18:40:d4:18:
af:56:ac:25:b9:96:ee:3c:20:1a:c1:d7:46:8e:78:
bd:80:b0:89:7e:2b:01:a2:70:d3:b9:ee:27:98:2d:
f3:3a:06:dd:f4:7d:94:fc:68:ef:41:ae:34:12:42:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2E:1D:93:55:17:29:EA:C3:40:72:12:C0:E2:3E:2D:19:54:06:22
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:30:c8:ab:94:8f:94:0b:4b:23:0a:7f:10:81:4e:1f:c8:7a:
15:3d:79:57:33:ff:57:4e:31:00:60:37:d8:33:82:3a:cc:7a:
fc:e6:6e:40:35:c0:4e:56:76:ea:1e:b0:29:ed:b4:02:d7:94:
1a:74:a6:e7:15:93:38:27:7b:aa:88:0e:36:b9:5c:3d:ba:43:
ef:b1:87:ea:b1:3a:f4:cc:2d:ea:21:c2:0f:7e:ca:5e:a0:7a:
7a:47:3c:0c:00:b8:56:fc:94:70:a5:57:e8:a0:bd:9d:55:9e:
f7:51:54:92:ed:39:ee:8b:8e:6b:0a:c8:3d:e2:5e:4b:53:69:
83:58:94:5e:2d:59:b1:d8:fa:9f:fa:2a:88:f0:11:15:31:49:
ff:95:24:46:9e:37:23:b7:8a:0f:f9:ad:bc:ac:68:5f:9f:8c:
af:f7:a0:88:83:27:d9:a3:46:b7:a4:6a:d9:66:06:a4:fc:44:
a8:30:7f:7e:43:54:e8:ae:1f:6c:39:f9:2e:b7:5a:a2:38:dc:
1c:e6:2e:e2:13:9d:df:2e:bf:8d:04:53:68:6f:f9:89:12:97:
64:e2:c0:33:9e:e8:1f:02:70:43:ad:bb:2f:69:34:64:a7:5d:
53:d8:77:9f:b6:dd:c6:d0:cc:05:c4:98:12:3b:c9:7e:b7:d3:
b2:1d:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:05 2026 by rpki-client