Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: T+dq9D+ZLhp8VTm3vyTVrdI2WJ6WN08xQ+4viaiUKtQ=
Subject key identifier: A9:50:3E:67:D4:AF:F6:8A:16:54:12:27:46:44:E5:E7:1D:1B:E9:BD
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 019CAB349D68FABA5AEE1707749392769620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 10A3
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: CUgwoN3VtBsQ0v3ePJzGqLcbKdtnRzPUhGkmPLX5BHo=)
2: ws3LMFUwqOssAgdFH0sQW1QshrQ.roa (hash: 0QPouBqOetwvm5EolmlFqYseOotdTyUeyqwZDQ7ojQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9d:68:fa:ba:5a:ee:17:07:74:93:92:76:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=a9503e67d4aff68a165412274644e5e71d1be9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:ed:b9:6e:db:4d:ae:0f:3e:a0:f0:c6:9c:
c8:17:4f:0b:fb:2f:5f:11:8f:51:0f:ec:77:7f:6c:
41:63:3c:76:4f:91:99:79:67:0f:81:e7:71:5a:47:
83:e2:93:80:09:82:b6:30:2d:78:ee:a1:9e:62:8d:
c7:e8:2d:35:99:1c:97:a1:bf:d3:5a:c0:0a:26:f8:
f7:98:49:79:86:5e:76:d7:a0:01:c7:dd:68:23:b5:
6f:ef:67:71:8a:b0:45:11:0b:7d:f0:88:c0:87:ae:
65:73:1b:17:14:8c:3c:6f:62:31:8b:d8:59:9a:fb:
9e:50:ce:08:38:10:83:90:4d:20:7a:bd:11:43:52:
c3:e4:2e:18:f9:89:31:6b:db:13:39:96:1c:bd:54:
f7:1b:ff:64:da:15:4f:5d:86:d3:ed:41:24:2c:e8:
72:7c:8f:f4:e9:c1:ed:85:81:71:cd:35:a7:e7:2c:
73:fc:82:2a:36:e1:ee:a4:85:2d:eb:98:69:26:5e:
f0:b3:90:43:05:c1:8c:f3:40:44:54:54:fa:10:9c:
1d:27:16:4c:e6:3b:7b:6f:b2:bb:e6:9f:4e:4d:43:
01:97:f8:84:bf:29:41:d0:13:15:76:23:82:c8:dd:
2a:c4:3a:01:92:ef:6b:37:5c:de:2e:f2:04:c7:27:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:3E:67:D4:AF:F6:8A:16:54:12:27:46:44:E5:E7:1D:1B:E9:BD
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:bb:59:d6:4b:3b:58:f1:45:17:f2:ee:a3:54:60:0d:cd:
73:66:93:3b:cc:89:6a:81:05:ad:c1:47:11:bd:4b:6d:85:43:
ad:4b:f8:4e:dd:7c:cd:1d:e2:37:4f:b4:d9:f8:c1:50:2d:e7:
bd:25:00:04:b8:2d:dd:aa:d7:ae:ab:51:05:12:85:ea:85:99:
4e:2e:2d:f1:84:d5:cb:5c:32:8b:c6:85:d4:4d:6d:1b:f9:50:
51:79:45:fb:21:7f:72:9c:f4:b6:29:d6:12:34:0e:49:f8:04:
54:c8:e9:e2:6d:ac:ff:c5:19:0b:f7:a1:38:3f:1c:5b:f3:38:
ab:e5:4c:67:c3:b2:77:7a:08:79:0e:32:e6:9d:1c:5f:b3:57:
e6:4e:79:d7:17:e6:e8:04:06:85:a3:4f:a6:f0:0d:00:e9:0d:
6d:f4:1b:e1:e3:13:b6:22:1b:96:bc:1c:f4:6e:85:c9:20:80:
c0:41:52:c6:a1:80:e5:df:3e:7a:1e:83:bd:da:64:b2:e7:b9:
3a:71:46:24:6a:67:f7:aa:32:79:d9:d5:a0:3e:00:b6:56:c2:
05:45:20:e8:a6:a9:da:16:9d:6d:aa:40:47:69:97:e8:8f:9b:
6c:04:ac:e3:ee:6f:71:f5:3c:73:e1:62:a6:91:dc:a4:ee:8d:
2c:9d:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:25 2026 by rpki-client