Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: yKMLVFrNPMZcJ32gqv32fezW9JIBtIUuke+hlI5mtbo=
Subject key identifier: C6:AD:DB:D4:B9:E3:2B:CF:97:55:0B:3D:CB:CC:3C:B0:55:CB:9D:EC
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019CF53C7655382E34BF4AEE12598603E14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 1346
Signing time: Mon 16 Mar 2026 06:01:46 +0000
Manifest this update: Mon 16 Mar 2026 06:01:46 +0000
Manifest next update: Tue 17 Mar 2026 06:01:46 +0000
Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: k7SNfN+x2lJ5/eB4h/sUqzFlbrBvQGOJqa0O/BYn6MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:3c:76:55:38:2e:34:bf:4a:ee:12:59:86:03:e1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Mar 16 06:01:46 2026 GMT
Not After : Mar 17 06:01:46 2026 GMT
Subject: CN=c6addbd4b9e32bcf97550b3dcbcc3cb055cb9dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:bd:ca:30:bd:10:b5:57:b1:35:a0:37:de:
43:d8:f6:85:c3:68:fc:01:8c:d5:95:34:37:74:6c:
d0:bc:75:6d:d1:85:51:03:16:70:bb:d1:ff:1e:dc:
27:4a:f3:8e:a5:b3:53:f2:60:2d:62:3d:c5:33:61:
40:02:d5:9f:3e:f7:a0:58:e2:d8:3e:da:0c:e1:c1:
ab:8b:ff:cb:74:81:5c:f2:21:dd:3e:d3:9b:49:68:
1e:df:13:84:c2:49:64:c8:96:49:6f:70:ad:64:01:
9e:3e:73:4f:02:c1:31:ab:42:10:ca:03:c8:89:2f:
77:33:ad:0e:d3:89:d0:4a:8c:4c:0e:1a:33:2c:3c:
fa:50:51:ad:f4:46:48:c6:f8:b6:af:5e:ed:44:aa:
56:f9:1d:1b:4d:1a:83:1c:0f:0a:09:9a:32:c6:7c:
75:4d:cc:c1:17:af:9e:2e:17:39:ef:f9:5e:d9:ab:
f0:b8:94:07:d6:e8:13:13:bc:49:00:09:5c:cb:76:
c6:62:fc:cc:27:6d:f9:30:a6:3b:3b:e3:b1:22:be:
6b:8d:bd:41:df:02:3c:06:8b:2d:33:ed:05:c1:58:
31:58:56:dc:07:c9:bd:28:6e:cd:98:6f:0f:04:c4:
f7:3e:6d:60:26:b2:40:a2:29:d9:7a:e4:fa:64:50:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AD:DB:D4:B9:E3:2B:CF:97:55:0B:3D:CB:CC:3C:B0:55:CB:9D:EC
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fa:35:ee:f8:58:31:8e:ad:2d:94:6b:9b:6d:84:33:22:cb:
9e:28:64:a5:69:ba:08:30:fd:b1:e9:4f:4b:78:99:f6:5d:01:
a1:46:a0:bd:ae:bb:e7:1a:60:ff:7c:4f:21:0a:15:dc:b7:ec:
f9:7c:47:48:79:2c:63:71:74:ee:c7:ed:4d:a7:c2:f4:b1:73:
8e:c0:19:5e:7a:c7:3e:ab:b9:d2:77:c3:45:6f:6e:d0:25:a7:
28:7a:04:25:bd:98:fc:1b:12:59:2c:19:cc:22:17:78:ca:65:
c8:ad:eb:2d:f0:37:32:27:77:4b:d6:89:70:37:c4:c0:e0:13:
e4:a5:82:fd:32:ad:8e:f4:94:80:8b:fc:9d:8f:b4:66:cd:ff:
70:a2:84:75:ec:3d:67:e1:b6:f0:42:a1:26:28:08:a6:a5:71:
97:64:09:9c:85:7c:d8:be:b0:b5:c0:70:4c:44:07:79:99:65:
c2:78:17:5b:65:d2:aa:14:8e:e2:de:f0:df:54:4a:54:7a:c8:
7e:3a:87:d3:93:ef:49:34:6c:14:6a:2a:5a:69:d0:2a:06:bf:
c0:09:11:90:0e:5a:a9:9d:58:01:7e:4f:e6:1e:c3:45:68:44:
be:62:3a:53:5c:2e:9b:1e:09:ef:74:28:8d:ea:be:9c:2d:75:
a3:36:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 07:22:17 2026 by rpki-client