Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: dVVl3HTDmKdXiNExACVZPQ2/2yeudy255EfGZDWhVPU=
Subject key identifier: 24:0F:97:66:7F:70:F2:94:2F:7E:63:4A:34:C3:C1:4D:90:30:7D:7B
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019CAF47CCEB0C3A97E8C04BE85A72CFA8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 16:00:44 +0000
Manifest this update: Mon 02 Mar 2026 16:00:44 +0000
Manifest next update: Tue 03 Mar 2026 16:00:44 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: 7vQLDOljI6PUoB7j9fmoC+3yY5iAL2tOW4ZVqbXboJk=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:cc:eb:0c:3a:97:e8:c0:4b:e8:5a:72:cf:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Mar 2 16:00:44 2026 GMT
Not After : Mar 3 16:00:44 2026 GMT
Subject: CN=240f97667f70f2942f7e634a34c3c14d90307d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:46:81:32:8b:31:4f:db:28:89:42:9b:b2:
72:9a:df:ba:07:67:3d:bf:57:71:de:87:be:58:ff:
1a:a8:4e:2e:d6:0d:6d:93:dd:0a:05:cc:b6:f4:6d:
4d:d2:47:34:12:e2:26:3f:55:b7:a1:38:ce:de:33:
b0:83:ad:ba:e5:04:05:00:dd:47:71:14:16:85:35:
5d:a4:81:c2:55:ac:ae:eb:ea:56:b9:b5:74:31:f5:
ba:15:5a:08:43:c1:f5:68:11:b3:e1:82:0f:97:a7:
bf:26:89:62:25:96:ad:df:cc:6c:8c:2e:bb:1f:7d:
87:89:08:99:e3:96:04:77:1b:03:92:51:31:16:22:
83:06:8f:13:31:b7:1c:6f:6d:35:af:41:6f:c0:d4:
97:ce:1b:3f:6f:05:5a:e1:f9:a8:b5:6b:3d:5c:a7:
d5:3a:10:f2:2f:ec:45:48:ed:16:ee:44:ad:ab:cc:
2f:85:c0:df:d9:c4:d0:88:b9:99:08:8a:6b:5d:93:
5e:86:30:e1:f0:4a:31:79:d7:9d:26:02:4c:86:8e:
5d:3f:bb:22:02:86:1a:38:ab:a8:47:a7:7b:f0:d9:
cf:e0:60:41:df:2a:2f:9f:bd:89:ec:2d:30:92:36:
50:b7:ee:ea:4a:43:43:14:97:49:73:03:84:bc:94:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0F:97:66:7F:70:F2:94:2F:7E:63:4A:34:C3:C1:4D:90:30:7D:7B
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:22:88:3d:d9:d3:e5:83:2a:93:ab:0c:5f:5a:b5:75:a3:
1c:59:c2:3f:7c:b4:cd:cf:d6:56:f5:97:fb:f0:0b:4f:4d:a4:
7e:92:6c:e1:c1:ca:7a:34:fb:b5:5e:01:36:fc:76:bc:7e:4e:
c7:5a:dc:13:a0:f6:4b:7e:78:b4:18:9b:b1:39:b3:71:e7:09:
7f:67:9a:bb:fc:a7:00:d7:d3:12:e6:78:22:e7:5a:20:dc:75:
f9:fd:a9:50:43:5a:60:42:e6:6d:36:56:54:d3:38:6c:7d:b8:
c1:a1:6f:b6:13:e5:16:dd:d3:e7:dc:a1:d9:02:38:1f:a9:16:
c9:86:b0:b1:02:02:d8:89:72:24:4f:a3:34:92:41:22:ee:f8:
0b:05:7a:24:fb:bf:77:2a:63:df:f8:d2:9f:c8:22:e9:06:5c:
38:25:2d:53:86:37:35:cf:ed:e7:29:f9:cf:b4:bb:d3:0a:ac:
c7:6c:9e:98:59:ed:8b:cf:fc:31:21:84:28:fe:18:12:58:26:
e4:26:57:48:0e:c3:b7:35:73:7d:cc:75:6c:27:ed:da:87:6e:
df:13:d6:f6:65:44:48:6c:9f:74:08:ab:86:94:5b:43:5a:ba:
07:d3:ce:53:73:8d:3c:56:34:91:c3:36:04:9a:28:42:92:3c:
f5:b8:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:45:02 2026 by rpki-client