Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: sS4Wi6VvOXwIW6J9O2S4l1II5BZmU7oAD9KLhcZkiyY=
Subject key identifier: C8:25:83:D8:21:73:A9:64:42:EB:C6:91:29:C2:38:AA:87:9A:13:02
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019CABA21BA5860CBCDDA6AA72D69A45F9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0A0B
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: JH2fW0tKXNTi31UxLtL7ikP+BosKTB273eHNWPCNZho=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1b:a5:86:0c:bc:dd:a6:aa:72:d6:9a:45:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=c82583d82173a96442ebc69129c238aa879a1302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:f9:72:d6:6c:68:53:de:ac:56:68:2e:6c:
f3:9d:b9:48:7a:1d:28:94:32:a9:e4:bc:34:29:01:
bb:a7:22:bb:28:0f:93:72:37:25:25:c9:7d:6d:61:
d7:31:ad:bb:9a:ab:7d:11:c7:6e:b5:8a:73:25:d8:
d6:91:35:26:5a:03:a3:68:02:62:5a:85:a9:e0:d8:
34:73:d5:ec:b6:a6:fc:f7:3e:8b:21:cd:36:19:38:
82:20:24:ed:d3:be:d1:d0:aa:ce:88:44:1d:6e:ec:
fd:44:fa:72:c9:76:a7:95:6c:da:18:d5:00:28:07:
19:2f:6d:8b:36:6e:f9:f9:be:2c:cf:64:b1:09:2b:
0d:7d:25:f7:de:f8:de:f5:7f:fa:cb:66:87:39:17:
4d:72:a6:7f:cc:af:66:b8:a5:02:39:44:45:a1:95:
16:10:77:02:41:73:17:97:26:ed:d0:da:02:ca:b2:
7b:ee:ef:9f:07:57:4c:7c:dd:12:19:73:1c:a2:33:
8e:6d:02:71:b0:e2:0a:20:c0:15:c8:c4:84:1b:ab:
04:8f:0c:38:39:04:c9:b1:e6:d7:e4:be:67:39:90:
e9:f9:c4:9c:d7:b1:e8:cc:bc:34:5d:cb:05:80:ec:
79:b5:d9:29:ca:f8:63:2b:3c:3b:dc:43:1e:99:cb:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:25:83:D8:21:73:A9:64:42:EB:C6:91:29:C2:38:AA:87:9A:13:02
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b3:12:91:84:2a:94:b8:c0:9e:02:f3:26:59:db:82:ca:39:
20:8f:1b:9a:69:4e:46:c1:76:a2:1e:09:36:72:24:b0:c2:38:
e0:3c:e7:64:a9:4a:0a:87:fd:f9:0a:40:92:72:cc:a6:3a:48:
1c:d1:31:26:51:95:c7:f7:dc:f4:be:3b:ca:13:90:7a:33:de:
ac:f4:a1:86:09:40:3c:bb:a0:4a:a1:5f:84:78:9d:99:f8:50:
0c:90:7e:8d:da:da:85:c7:04:11:7c:97:0c:2e:7c:43:f0:c0:
f1:f1:d1:8d:b3:53:95:f8:ee:81:42:01:b2:77:be:ae:98:81:
12:ff:46:75:70:32:54:25:01:db:d4:9e:73:3e:5e:d4:c9:f7:
60:ae:e0:26:86:af:da:5b:f8:58:64:97:aa:8e:87:4d:b8:f2:
fc:57:31:b4:9f:29:8f:d7:a9:f4:c0:de:19:f6:6e:a1:21:14:
19:64:20:c2:fc:af:2d:d8:1b:e4:96:69:e4:f9:05:fe:01:03:
8e:d7:fa:fc:ee:60:d9:2d:d0:64:c2:a3:3c:d8:89:ba:3d:38:
ab:39:ed:3b:01:aa:39:5f:a9:6f:d5:36:f1:b9:ea:3f:58:9c:
2f:80:bc:43:2e:f1:05:71:8b:8e:5d:68:3b:24:93:0f:4d:e7:
a2:d1:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:03 2026 by rpki-client