Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: VuT7yYyNgiTXJzckvSegHX4+1ChcM0F+eHylH4uO3b4=
Subject key identifier: C4:E2:44:71:BD:67:A0:38:85:99:5F:28:94:CB:83:1E:D2:CA:C4:97
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019CB2EE1ADD6CEFDF33B2A363C529DB1707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 184A
Signing time: Tue 03 Mar 2026 09:01:14 +0000
Manifest this update: Tue 03 Mar 2026 09:01:14 +0000
Manifest next update: Wed 04 Mar 2026 09:01:14 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: SxHcUvWUyanyoMC2JVIZVchBCAoLM8FkJCP2jokMiYI=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:ee:1a:dd:6c:ef:df:33:b2:a3:63:c5:29:db:17:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Mar 3 09:01:14 2026 GMT
Not After : Mar 4 09:01:14 2026 GMT
Subject: CN=c4e24471bd67a03885995f2894cb831ed2cac497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:a6:af:20:67:87:d2:09:f5:ce:ac:62:ca:
e5:cd:21:5f:af:6d:30:8a:54:1c:64:01:89:b5:b8:
1c:4d:c3:01:0c:f9:80:5b:a0:d0:9b:ed:24:b1:6b:
b8:9e:97:de:8e:7d:5e:c3:43:7d:75:bd:6c:b1:d0:
f8:88:15:ac:3f:77:21:7e:9b:d2:61:69:a7:9c:fb:
30:52:0e:04:16:1e:28:91:53:12:d5:09:a4:5b:4b:
88:21:8a:0f:24:f1:e9:c7:9d:46:8b:19:b3:06:d3:
76:82:0e:f0:2d:77:5c:8d:9f:7f:33:8d:10:83:56:
08:97:18:7a:f9:98:91:b5:40:a8:4d:8a:41:ce:10:
f7:a8:f3:16:de:56:83:59:b6:e2:3a:ff:5a:df:51:
ff:36:36:e6:06:95:81:c5:48:9a:44:19:ac:68:90:
82:42:5d:fa:c8:46:da:0b:29:9a:34:12:65:8b:d6:
9f:da:3f:61:cc:63:da:31:d8:69:f5:55:76:13:10:
34:9d:e9:4a:7b:26:31:de:2d:ce:9a:36:76:67:0b:
ce:bc:c8:2a:1c:db:dd:f2:cb:87:68:73:0d:bc:d5:
08:3a:c0:a5:5d:49:8a:9f:55:3c:ed:8d:4b:f1:0b:
ac:8a:26:87:a0:60:25:3d:ae:92:28:05:fb:b0:bc:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:44:71:BD:67:A0:38:85:99:5F:28:94:CB:83:1E:D2:CA:C4:97
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:41:00:04:98:eb:03:e6:25:98:b9:3e:14:89:3a:f1:1b:9a:
b6:f8:82:9c:f7:b7:46:0f:53:7c:4d:51:e2:64:44:fd:b3:81:
b3:be:a2:42:82:b7:fd:15:08:1c:ed:56:e1:d3:03:e9:9b:1b:
86:e6:57:5d:e6:33:ee:f0:c8:cc:d2:dc:ec:dc:1d:01:73:34:
be:7d:8c:fe:fa:1a:f9:ba:5c:f3:27:fa:a2:e1:c7:07:05:db:
42:7c:3f:f6:ca:ad:93:8d:e2:b0:db:09:92:6e:b9:3b:48:2b:
c8:e5:a7:82:08:31:01:66:27:ee:f4:da:2d:91:11:73:ba:d4:
07:6b:60:bc:a0:3e:0e:ca:1b:c8:97:bd:bc:2c:08:1c:ee:96:
24:5c:d3:90:99:f5:68:89:d3:a0:10:34:76:a4:16:b0:cd:c8:
65:55:46:c5:67:f6:6c:15:f2:a0:65:80:02:0f:f8:ec:07:f7:
c8:52:b1:da:97:5f:ed:e2:d2:f0:92:02:4c:1e:5c:46:be:7f:
70:f8:24:a8:f4:5a:38:54:4e:56:ad:a7:9d:22:f2:2e:25:84:
43:57:ee:ba:a0:3b:54:eb:d9:3e:69:ec:7c:ef:78:75:71:83:
c5:4f:e6:ff:45:5a:eb:e1:57:2e:af:3e:e8:b3:e3:aa:ae:9b:
07:62:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:21:52 2026 by rpki-client