Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: +ydjmHygRVCzNDstIGn93B360tgDs3nb7x9MvbksuDo=
Subject key identifier: 20:93:7F:1F:A8:01:14:E6:99:E4:10:0A:EE:75:76:F4:6A:02:E0:0F
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 019CADC830FCBC27FB168C3A09DBDF1A0625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 0B9C
Signing time: Mon 02 Mar 2026 09:01:43 +0000
Manifest this update: Mon 02 Mar 2026 09:01:43 +0000
Manifest next update: Tue 03 Mar 2026 09:01:43 +0000
Files and hashes: 1: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: aljJOdMeawdBhpkGpms5JC8lyF+XUkmuYBSA3BXpG1Y=)
2: U492z7CM5jVf-t4QvcE9_urW2ow.roa (hash: /jlkTTrD37FHNPsTnKi/FAkBYiZarctFzNrBmLp88kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:30:fc:bc:27:fb:16:8c:3a:09:db:df:1a:06:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Mar 2 09:01:43 2026 GMT
Not After : Mar 3 09:01:43 2026 GMT
Subject: CN=20937f1fa80114e699e4100aee7576f46a02e00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:1b:64:7f:07:44:49:42:84:2d:08:d1:c3:
87:28:67:db:d4:9d:4e:ce:a7:64:88:d2:cf:e6:48:
09:e5:10:bd:ea:73:4f:8c:93:20:9b:9a:7c:29:e7:
72:f8:8a:15:6f:e1:22:ef:01:73:f8:e8:34:21:0a:
a7:d3:50:e2:33:de:df:74:2a:b5:9e:71:8e:48:e1:
4c:2e:e0:cc:bf:d5:59:48:33:3a:cd:80:c3:24:9c:
cc:d3:3a:37:a7:85:cd:cf:9d:87:d9:80:37:0d:00:
1b:0c:bd:c5:e2:01:ac:a5:c4:16:d6:48:ce:ec:00:
d2:35:28:bc:74:37:5c:de:ae:fb:14:4e:33:c6:9e:
84:82:56:b9:b3:40:d4:93:92:19:fa:f2:4e:74:24:
e3:5a:47:68:b8:4e:5a:63:a0:6c:fe:b8:3c:f4:33:
10:ad:52:91:13:a3:96:e5:19:f9:75:5d:6a:8e:3f:
9c:70:db:69:a6:11:3a:0b:3c:eb:c5:bc:b6:8e:7c:
a8:91:ac:f7:b5:67:6f:08:45:11:60:c6:47:5c:b2:
a7:c1:53:96:b3:03:52:e9:ce:8d:7c:48:83:47:f1:
f8:f4:1c:d8:93:0e:98:9c:0e:57:7a:3e:fb:bd:f8:
35:33:40:5e:f9:b9:4e:41:9f:4d:e1:98:d3:3f:65:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:7F:1F:A8:01:14:E6:99:E4:10:0A:EE:75:76:F4:6A:02:E0:0F
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:d5:2f:1f:a6:51:40:09:7e:f8:88:0c:45:c7:f5:da:f5:c1:
83:71:c1:4d:9e:eb:90:cd:c3:85:01:4b:75:32:c9:ca:64:4b:
24:79:63:f7:8a:f6:bd:7c:a6:54:7a:8f:86:69:57:3a:37:2d:
37:17:2d:4e:04:dc:c6:7d:0b:ab:6c:46:00:1b:72:02:1a:ff:
08:00:6b:9a:de:71:78:b2:38:46:22:ea:d9:52:7c:75:85:cd:
40:66:86:97:2e:e1:5f:63:cb:c9:89:63:a7:c3:fd:46:ab:83:
2c:8c:ab:83:65:d5:f9:95:33:ae:0c:d2:6a:c2:27:c9:43:f8:
0f:99:e1:84:09:df:ae:55:90:92:65:3b:ed:af:2e:37:d3:c2:
47:c4:ba:8a:41:b1:bd:9e:fa:dd:44:8a:e3:41:80:d2:5a:be:
45:c4:bc:96:dd:6c:cb:60:dd:a4:09:48:ed:39:01:8c:54:b1:
67:3e:f0:83:63:c8:ae:4d:fa:19:a8:b4:67:6e:56:ef:33:0f:
04:b6:1b:24:d4:fc:bf:99:a1:6f:e1:60:d4:3e:bf:41:90:c9:
79:04:d6:c9:8c:85:53:78:cd:98:35:9f:cd:bc:3b:c2:bd:8c:
26:1a:55:04:f9:96:b2:f5:e5:a4:81:dc:29:a8:02:ec:72:65:
64:0e:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:35 2026 by rpki-client