Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: TW69eFwwKLSheDFN9PCEUN/IwvJzM2SaO7n3YFfnsqY=
Subject key identifier: 3F:6A:4F:52:E4:96:AE:53:3B:0C:14:22:70:92:A5:5C:58:12:CA:13
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 019CACB4C8FCB0A233BDC87719D3F37F4F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 0432
Signing time: Mon 02 Mar 2026 04:00:54 +0000
Manifest this update: Mon 02 Mar 2026 04:00:54 +0000
Manifest next update: Tue 03 Mar 2026 04:00:54 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: +JnbuVlJ5eG1me87Z8H2jNvCzhpmah3NiKp/bLUuzcs=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c8:fc:b0:a2:33:bd:c8:77:19:d3:f3:7f:4f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Mar 2 04:00:54 2026 GMT
Not After : Mar 3 04:00:54 2026 GMT
Subject: CN=3f6a4f52e496ae533b0c14227092a55c5812ca13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:7e:d4:44:0e:06:29:02:d1:e9:16:07:ae:
4a:17:1f:d7:5e:45:b7:4c:f5:6f:e7:a6:d8:b8:3f:
2d:18:5f:aa:7f:79:ff:c7:52:04:69:96:36:be:84:
b5:d1:cd:30:f6:e9:c4:e6:61:df:32:6f:37:c9:55:
35:e4:e9:ff:1d:01:55:d4:27:1c:bd:69:e8:47:8e:
fe:f2:30:5f:53:07:92:cd:a5:ee:dc:be:03:6b:89:
13:c3:ba:da:22:cd:5c:e1:16:a4:02:83:25:c6:8f:
47:0b:7b:06:ed:c1:20:20:26:0f:df:f2:a7:b0:c3:
90:bb:71:3c:9d:95:09:cc:b8:a3:b0:1c:32:34:60:
6b:71:1d:5c:f7:0b:eb:9d:3a:79:5f:e8:48:5a:96:
47:f9:86:7a:30:da:e4:b7:f9:ba:b3:6f:12:0e:85:
03:19:78:5e:f8:b0:2e:5a:16:8c:82:26:35:98:36:
ec:21:1d:24:73:24:37:7a:60:6c:f1:4f:5e:e1:54:
15:03:5f:cb:3a:7b:e2:e5:04:30:62:36:2d:f9:ed:
40:bd:96:4b:25:31:9a:cc:73:cf:6c:83:74:e2:85:
5c:05:ed:f9:b8:2a:01:e4:8f:64:30:68:56:f3:e4:
81:8c:a5:04:01:e2:a5:83:85:17:14:35:c2:a7:dd:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:4F:52:E4:96:AE:53:3B:0C:14:22:70:92:A5:5C:58:12:CA:13
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ea:e1:43:40:5f:8e:a6:ee:86:65:55:58:c7:d2:24:ed:1d:
92:49:89:5f:16:2e:4b:e3:15:d8:e3:bd:68:53:24:89:69:21:
03:5f:9f:d9:ce:3c:d5:62:0f:0c:fa:26:2d:76:a2:f9:c8:bd:
0f:7e:d5:08:65:80:96:5c:af:02:42:79:51:90:32:f1:49:23:
3a:41:d0:e8:75:b9:6c:4c:c8:00:eb:2d:50:e1:83:eb:ff:91:
49:3e:e0:db:5c:d4:fb:53:da:7d:f2:ec:b7:08:29:35:7e:06:
ac:14:c6:84:51:d6:65:ce:76:01:37:ea:db:a4:93:44:b4:89:
51:ea:f1:8d:e2:c0:a8:fe:98:02:c8:20:91:81:0e:0b:be:c8:
dd:1a:8c:9a:c8:86:97:72:6f:4a:d5:c5:c6:c3:62:61:02:26:
9b:7e:53:2d:5f:76:e2:e1:11:f2:82:8e:de:0b:28:bc:b0:d3:
50:97:f4:d2:ff:f4:45:9b:29:75:cb:49:cb:ef:2b:26:a7:d2:
00:e3:17:99:6a:a7:56:e1:d7:07:8f:6b:fc:e5:02:b5:fc:6a:
62:51:8b:7d:e5:cc:14:09:6e:c7:30:8b:68:c2:95:42:69:ee:
48:8a:cf:ea:2e:aa:3c:34:96:7b:80:48:fc:32:4c:2d:d5:ac:
13:89:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:37 2026 by rpki-client