Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 8fjn17ywujDl5VYc9Aw1rF+Qm7+l210pD83DTudaRW0=
Subject key identifier: 35:AC:54:3C:1C:7E:47:60:08:43:62:12:07:84:B9:70:73:E0:73:3A
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019D38D2D053768D4B511C471F94DA02E393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 16DE
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: XdaG1M6LO44S1QMKm3pnH0BNtxU/eX0v9bkNPIFPx44=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d0:53:76:8d:4b:51:1c:47:1f:94:da:02:e3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=35ac543c1c7e4760084362120784b97073e0733a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:43:d3:9a:d7:8e:9b:21:1c:4f:99:35:29:
53:06:a9:bc:06:ff:05:37:be:56:62:bb:92:e5:ee:
4d:51:bd:f2:95:c2:50:89:38:8e:f4:6d:fd:b1:57:
a4:2d:ea:16:4f:ab:6d:75:f5:73:c1:7a:0b:e0:b2:
97:83:81:06:f8:53:2e:5b:c9:f4:0d:44:68:9e:ec:
17:17:35:9d:c3:a2:3e:14:21:4e:ba:cc:66:33:db:
72:b8:32:9f:cd:73:a6:6c:42:8e:0e:29:24:87:ef:
7f:e2:02:ad:fb:d6:ad:6d:41:36:11:be:43:68:67:
53:ca:7e:56:87:11:50:bf:3a:95:a1:df:e9:74:06:
54:5c:c8:83:cc:6e:06:00:30:6c:a1:d4:8a:69:8a:
95:00:e8:f0:7f:5e:e7:3c:bb:e4:4a:fe:25:11:22:
dc:38:30:bb:7f:60:10:65:20:c6:63:7a:8e:c4:b4:
21:e5:46:ef:d5:e5:65:17:18:9a:a1:07:60:c1:69:
e2:6a:8e:ce:67:28:d8:dc:d8:51:e8:d7:3e:84:d1:
17:f6:19:2c:cc:42:1b:72:0b:94:31:d8:79:77:5c:
47:4d:16:b1:13:f6:c6:40:94:75:a5:32:1a:1a:de:
62:0e:8d:43:44:fc:14:38:86:79:36:21:59:6f:26:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:54:3C:1C:7E:47:60:08:43:62:12:07:84:B9:70:73:E0:73:3A
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:61:87:bd:a2:c5:85:b9:2b:f5:71:13:83:67:05:c8:cd:e6:
c5:1a:ae:5d:a8:1f:6f:11:8e:4a:c9:29:d0:c4:80:b0:05:6c:
d4:6a:5c:36:58:42:b5:63:5b:65:8b:a9:2a:2e:db:dd:67:db:
75:45:b8:a4:c7:73:78:28:86:73:68:1a:cd:4a:ed:2f:3e:6f:
07:b7:c5:34:62:cd:2a:e2:ac:29:c4:92:54:51:a7:f3:16:1f:
8c:45:8e:19:54:9e:8e:0d:be:cc:96:c6:57:30:19:7e:82:0d:
27:d7:f3:0e:42:37:e6:09:23:6f:ab:5a:5a:11:9e:d9:a0:fc:
bb:8a:c3:ee:49:50:0a:77:b4:96:d2:e2:0f:b6:91:7c:23:45:
40:ea:3c:fc:d9:d2:9f:d1:d4:b4:e7:32:c8:d9:51:f9:7f:55:
5a:4d:19:5b:e9:cf:73:34:b4:38:4f:55:47:a5:aa:ee:96:11:
78:c7:dd:b3:a7:d9:2c:31:80:63:6d:c8:d9:38:23:95:87:15:
c5:02:c7:93:e3:7a:91:96:44:d5:05:b4:ba:b0:3f:8f:f7:54:
71:86:d7:b9:63:82:71:14:5f:95:b9:b0:ff:e4:64:0f:12:34:
5a:94:69:21:98:97:fe:5e:39:1a:a1:f2:ba:bd:03:0e:e1:45:
63:23:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:12 2026 by rpki-client