Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: tP5p7ZknrDNdR2aOsAl8/32cEDianuSlMOJQhVb4m/Q=
Subject key identifier: 9F:CD:42:CF:31:F5:7E:11:D0:4F:45:20:11:8E:B8:EA:FF:2D:7B:7E
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019CAC7E6EF7FFC7A5C2254885424179DEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 0240
Signing time: Mon 02 Mar 2026 03:01:32 +0000
Manifest this update: Mon 02 Mar 2026 03:01:32 +0000
Manifest next update: Tue 03 Mar 2026 03:01:32 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: 4kL2NCCpF8gQ6WNGXFVONNh2qux2WWsQK6T+7ztmJm4=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:6e:f7:ff:c7:a5:c2:25:48:85:42:41:79:de:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Mar 2 03:01:32 2026 GMT
Not After : Mar 3 03:01:32 2026 GMT
Subject: CN=9fcd42cf31f57e11d04f4520118eb8eaff2d7b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:1e:ba:bb:38:d8:70:b4:51:d1:48:90:ce:
c1:44:c0:3b:79:36:92:5b:bb:92:ca:08:8a:45:15:
02:ff:01:6c:e1:6f:2d:43:f6:89:da:50:b4:86:11:
bc:d7:85:fc:46:b7:3f:5b:2c:99:01:98:32:c0:65:
a1:e2:be:9a:2e:c2:22:08:c6:d5:41:59:0e:58:e5:
41:24:0d:47:72:0d:1b:ef:2c:06:90:bf:b4:c8:32:
1a:53:6e:c8:21:b6:78:bc:25:1d:38:cd:f9:62:62:
e3:f7:6f:1b:53:dd:02:87:79:61:e8:57:3e:b6:20:
37:60:7e:75:cd:ca:82:e2:b4:bb:27:e8:c6:86:c2:
38:8d:ee:6f:61:15:d6:0b:9c:37:db:5c:be:50:a4:
ee:60:28:9d:8f:2a:43:6b:f3:d1:b8:a3:49:8a:0b:
27:e3:3a:80:00:1f:70:bb:21:76:58:3f:ef:a1:f5:
19:df:dc:f6:e2:bb:60:9c:ea:0b:49:51:92:10:9c:
1c:e0:56:6f:aa:9e:2a:0b:2a:d6:65:dd:7d:63:41:
04:0d:8d:6a:b7:9b:fa:e3:48:89:18:61:89:e0:85:
fb:09:70:1a:03:6a:a7:30:10:5d:0d:bc:bb:c0:90:
e8:4a:e7:b3:d8:c2:47:b3:51:9b:56:49:4b:ca:cd:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:42:CF:31:F5:7E:11:D0:4F:45:20:11:8E:B8:EA:FF:2D:7B:7E
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ff:cd:96:f6:0b:dd:63:7d:1d:ae:d6:ff:c6:77:f1:bb:a2:
d8:22:3a:4b:97:b7:d7:52:65:9e:98:6d:e1:ad:d0:5c:76:61:
68:ac:30:83:1f:e1:7b:36:28:4f:7a:8b:c9:fd:56:64:5e:dc:
24:c9:be:62:06:a3:58:bc:c2:3e:25:2e:0c:c9:f8:23:8b:8f:
56:67:a8:0c:cf:b8:5f:18:b2:49:97:6a:30:21:90:ee:3d:27:
46:95:e7:b4:25:81:47:22:2b:e7:5c:0c:60:80:ec:e7:f6:91:
6b:d9:11:c3:f4:a8:2a:9d:09:5e:17:39:75:61:57:34:62:74:
2e:45:71:70:99:e5:4b:4b:78:9b:84:c2:83:2b:98:0c:ad:a1:
5e:10:1e:a7:4b:52:ab:cb:6b:6d:07:2a:a4:a2:50:8e:a3:e7:
d2:d0:01:b0:83:78:ea:f4:4b:b1:21:20:68:e6:31:70:50:d3:
48:b3:ce:4e:c6:08:50:84:62:1a:4c:73:ca:49:3d:17:d6:dc:
9d:22:92:f3:31:da:5b:bc:cb:6a:24:cf:8f:24:f8:cf:8b:1e:
45:18:ff:66:dd:90:25:bb:80:6f:b6:b3:bb:32:88:c4:1b:41:
be:23:07:48:4a:2a:02:05:87:a0:f6:1e:22:03:55:7a:94:95:
42:94:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:18 2026 by rpki-client