Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: RAkED8Zj82FfO5OiQ17rSvPSYj4vASfselwwISIS6ls=
Subject key identifier: D7:51:C2:B7:01:54:05:27:D7:B2:A5:40:6E:14:28:ED:4B:45:78:CA
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019CAA58784CDE575B32113381D04419434E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 14E5
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: nNuafRxE+9Nx97zYVaZz8kHnFxD1sPEmnucGklHwnX8=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:78:4c:de:57:5b:32:11:33:81:d0:44:19:43:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=d751c2b701540527d7b2a5406e1428ed4b4578ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:6a:92:17:76:28:10:23:60:f3:db:bb:a4:
fe:35:ea:35:ca:98:33:e0:9b:c3:8b:2e:4c:a0:aa:
97:98:8e:da:6d:1d:8c:1b:be:30:46:b1:76:6d:73:
f5:dd:b6:f6:47:e0:08:77:e1:47:b6:aa:28:eb:83:
f2:d5:ed:63:77:16:3e:2f:48:f3:52:18:38:75:3f:
66:4d:de:ca:d7:37:2c:74:ab:63:86:1a:b5:5d:4c:
9d:22:ac:98:cf:06:dc:ff:2d:f6:bc:ad:75:56:dd:
a1:36:93:c1:21:1f:24:f6:e4:b1:c7:90:9b:0a:75:
e9:4d:59:74:ef:38:71:f9:64:45:74:2d:e7:13:60:
4a:ba:df:51:3f:2c:12:ac:b6:eb:e0:b4:ef:fa:65:
92:9e:7d:77:49:3a:cf:53:1e:84:33:e1:2d:89:8e:
3f:a8:91:6d:40:f5:c0:f9:57:07:06:d9:09:8f:48:
c4:3d:72:cd:d2:b1:1c:87:c5:d0:f0:ed:bd:9e:55:
c5:a8:d1:68:ee:cc:19:c3:47:f2:6c:13:39:22:b9:
22:d0:ad:96:89:c5:68:03:87:fe:93:77:5b:b6:bf:
6e:ce:5f:3f:f4:cb:34:d6:b4:2d:28:e8:46:f7:e1:
26:0a:9e:a4:b5:73:99:a7:6f:68:80:91:1c:be:f1:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:C2:B7:01:54:05:27:D7:B2:A5:40:6E:14:28:ED:4B:45:78:CA
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:4a:a5:87:d4:5e:68:bc:16:fd:70:b5:bb:ad:d0:ae:5a:
d5:4a:ba:19:2f:89:4a:3b:2b:42:5c:6f:6e:1b:09:41:33:a4:
05:41:cf:4c:7f:9f:86:68:84:8b:5e:f8:40:10:7c:29:e5:2b:
23:1f:40:13:76:a5:5f:86:2a:52:c6:0b:f8:82:b7:e8:2a:d9:
2c:63:5e:3b:53:ae:ef:9e:5b:d5:0b:5a:c0:ca:b5:e5:80:1e:
ce:ca:20:b3:06:a5:0b:ac:05:ab:a7:54:1b:01:fb:d1:62:df:
a4:d7:d5:ca:09:4b:e3:f0:8f:e4:40:a5:10:64:d7:30:bc:2a:
2a:16:63:36:ea:35:ed:b9:bb:26:16:45:3f:86:11:2d:c6:87:
d4:89:09:be:6b:62:df:77:20:1f:5f:37:62:3c:28:ed:87:f3:
d8:26:82:c6:cc:97:1f:77:04:1b:cc:e2:86:ee:67:6e:0a:bd:
0d:8e:d0:ed:df:07:47:4a:dc:9f:05:2f:7a:1f:47:e0:d6:2f:
a7:f6:a4:cf:b9:64:c2:5f:fc:ca:73:56:1c:c9:c8:30:3c:8d:
ee:cf:6e:ee:0b:53:2d:ac:33:39:9d:c6:47:1e:4f:46:87:90:
c9:f4:28:cb:e7:b9:3d:5e:d7:4f:02:84:22:f6:29:2a:c1:6e:
30:f6:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:58 2026 by rpki-client