Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: WcFJ1VDbsARnGZOnoPETItNy/Gw/dTR1Eb1SX4CToNY=
Subject key identifier: 24:D8:65:D8:EF:A1:D9:1F:A5:40:BD:DF:B2:A4:C8:42:AC:54:57:42
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019CE9DC16F65E0AB15C9045EC85648CF2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1869
Signing time: Sat 14 Mar 2026 01:00:40 +0000
Manifest this update: Sat 14 Mar 2026 01:00:40 +0000
Manifest next update: Sun 15 Mar 2026 01:00:40 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: 0tpzG5XhscIq4c6CoD31Xhl5Oi8wwvWEf8ReoFpEEyE=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:dc:16:f6:5e:0a:b1:5c:90:45:ec:85:64:8c:f2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Mar 14 01:00:40 2026 GMT
Not After : Mar 15 01:00:40 2026 GMT
Subject: CN=24d865d8efa1d91fa540bddfb2a4c842ac545742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:4e:2b:1c:19:f1:5c:11:78:d1:7d:08:02:
8f:27:04:b0:bb:7f:f1:45:92:c8:76:77:24:b6:f3:
9f:1c:bd:6e:e5:c5:0a:8c:30:32:da:14:d6:ce:5e:
fb:84:6d:86:a5:f6:2d:fd:11:fb:a5:3f:be:dc:46:
08:a4:d9:04:1d:08:88:7b:0b:18:23:4b:9f:16:40:
27:4e:5e:8f:f3:db:87:91:ab:fc:53:07:52:66:bf:
8f:e7:ce:56:c1:19:b3:91:12:2f:9c:4e:21:f7:c0:
26:ea:32:b4:d7:7e:1c:14:f5:1d:35:f2:95:67:03:
3f:56:10:53:8e:3d:c3:2d:0e:76:c6:9a:96:e6:2a:
1a:43:fb:e3:34:69:a7:c7:eb:91:39:d9:de:73:31:
78:67:ff:f5:04:3a:b7:c8:74:d4:5e:a6:63:52:fc:
d3:f8:b3:f9:35:99:ae:03:34:4f:9e:94:23:68:c6:
9c:de:91:ef:e4:ed:fa:98:04:ae:57:de:26:7a:cc:
84:c0:e0:5b:14:9c:92:db:e8:00:d6:16:f6:d9:e9:
8f:39:de:38:b6:c3:15:be:40:d6:30:6e:fe:54:22:
97:d3:fc:14:ec:06:dc:38:b7:3a:8c:31:32:93:29:
df:01:90:fe:7e:5d:4c:2a:eb:04:88:79:22:8d:fb:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:65:D8:EF:A1:D9:1F:A5:40:BD:DF:B2:A4:C8:42:AC:54:57:42
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:9e:89:8c:fc:37:da:97:0b:f7:f4:c9:4e:c6:70:53:55:
5a:cd:c5:da:cb:7e:3e:64:b5:62:6d:4f:ba:d7:d8:1b:cc:04:
eb:df:57:f0:70:45:d1:eb:20:50:30:19:09:26:5a:13:fe:82:
68:66:ba:79:36:47:28:7d:15:48:d5:20:a2:38:ba:8c:f3:53:
e1:13:4a:b1:ef:fd:e3:29:51:db:1b:f7:7f:ac:d7:f5:f0:30:
3b:5c:5e:5c:a2:f3:85:9e:8f:99:4a:ef:75:b1:24:81:68:55:
71:b9:87:93:45:d3:97:56:e0:b2:54:83:2d:25:4b:51:38:11:
d7:c1:55:f6:fd:cd:21:d0:b1:7d:2f:ce:84:bc:a8:33:72:13:
c7:07:01:45:14:45:18:f7:14:7b:50:9d:d3:6b:f2:ba:cf:b2:
df:a9:a9:46:7b:40:64:d0:39:95:3a:f3:6a:4b:05:6b:3c:0c:
90:c3:fe:82:48:c8:70:1c:37:3a:b5:03:b3:b7:28:04:b5:41:
3b:33:c4:f2:69:a9:b1:ca:51:85:68:d4:69:43:d8:c8:ff:a7:
ac:72:62:11:54:8e:94:8e:da:d2:96:fa:14:b0:fe:af:65:b2:
53:f2:5b:74:97:49:51:89:f4:7c:f3:81:d4:9b:db:bc:0b:3b:
e0:ff:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:57:51 2026 by rpki-client