Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: 6kXkE8Eqsz4KtLYGg5uDYvBZMPPKd9fc4vn+VrYg5TI=
Subject key identifier: 27:0F:30:6B:49:6F:08:5C:DB:84:4A:75:55:29:BA:1E:67:53:C5:E4
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019CA9B3C20F1B206107BA274CA31C8E5C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 01BC
Signing time: Sun 01 Mar 2026 14:00:55 +0000
Manifest this update: Sun 01 Mar 2026 14:00:55 +0000
Manifest next update: Mon 02 Mar 2026 14:00:55 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: DpVd0aw6s1GJ6B+iM+RKz62YDmjuqv1C/icF2QCgpXE=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c2:0f:1b:20:61:07:ba:27:4c:a3:1c:8e:5c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Mar 1 14:00:55 2026 GMT
Not After : Mar 2 14:00:55 2026 GMT
Subject: CN=270f306b496f085cdb844a755529ba1e6753c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:0c:b7:66:b7:57:29:cf:70:c6:ee:50:f1:
9b:93:c8:26:0a:dd:55:51:46:99:b7:63:c3:13:0e:
6c:2c:84:f2:17:35:42:18:b3:c0:99:59:72:4a:3c:
16:65:a2:fe:91:38:61:bc:82:bd:1e:36:9b:86:66:
0e:c6:81:be:97:4b:c7:fd:26:9d:30:b2:74:74:00:
d1:ab:7d:9f:78:2c:06:82:0c:1c:76:9c:08:a2:0d:
f1:5c:70:2c:6a:5e:10:2d:51:e6:a2:c1:4d:a7:26:
6d:39:15:86:0e:51:55:ff:be:80:3e:95:19:1c:16:
1e:b4:a6:a0:48:90:94:4e:74:5d:da:3e:06:28:57:
28:89:db:7c:43:87:88:19:97:9d:f2:d8:bb:a0:ce:
58:b5:b0:59:a7:16:79:67:bd:42:90:c3:1c:cc:ad:
fb:ac:8c:50:b5:e3:c7:9f:04:db:e8:d7:61:4a:28:
9d:33:3a:47:25:f2:f2:6b:2a:aa:a6:d0:f6:d2:8b:
0e:48:0c:17:8f:b5:6d:4a:c6:e3:09:21:55:5a:49:
7a:28:fd:c7:c8:f9:07:f6:6b:36:32:65:5f:e3:52:
2d:96:19:a2:47:75:c4:15:64:39:54:b0:b3:d8:90:
95:b3:51:72:f5:47:11:b2:d6:4f:55:35:8f:fa:53:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:30:6B:49:6F:08:5C:DB:84:4A:75:55:29:BA:1E:67:53:C5:E4
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:6d:2c:e7:f9:9e:42:1c:a7:a5:04:3e:b6:fc:4d:dc:52:
e6:6a:2f:62:26:62:de:76:35:cb:93:db:d7:00:03:0a:f1:49:
d5:1f:f9:6a:df:45:d1:c3:c3:70:b8:91:53:c7:30:7e:9d:ff:
06:06:32:bc:48:48:de:a1:60:71:40:a7:34:3f:c7:ae:97:61:
30:6b:86:12:b6:bb:97:81:1e:0f:c9:9e:2b:77:21:4c:86:4f:
53:2a:ca:ec:90:2d:f4:2b:9f:15:90:0b:6d:44:45:5c:2a:a5:
dc:46:ac:a4:1e:bd:8c:98:29:83:e8:9c:e4:f7:ff:10:8e:37:
98:63:1f:16:0a:b4:09:ae:2e:62:85:90:bf:9c:47:d0:10:31:
c1:de:97:a1:86:cd:52:1f:98:62:57:f3:4c:b9:69:af:94:09:
dd:ff:7d:6a:53:fa:69:78:8a:0d:b0:04:ef:61:f2:6c:f6:94:
7e:e6:aa:10:03:74:b5:b2:93:b2:ae:c6:90:0e:45:c1:e8:ab:
f1:80:cd:05:db:9d:53:a5:85:ad:d3:6f:b9:99:8a:98:9b:90:
3d:fd:3b:1c:f0:bf:49:c1:f3:51:a3:fa:ea:1a:20:22:aa:51:
99:5f:c6:6a:e7:a9:df:9c:bd:68:52:ca:96:b2:65:8f:44:4e:
cb:d0:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:39 2026 by rpki-client