Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: hHm66uc4xYN08vMk9Zx4U7U0fE77bESm4QtLHXSV0T0=
Subject key identifier: C3:36:83:0E:D2:39:24:79:CB:F6:10:AC:84:FA:C9:23:3A:A2:17:68
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019DCDBD94EE6DF7B56E086D43B3496ACB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0A73
Signing time: Mon 27 Apr 2026 07:00:46 +0000
Manifest this update: Mon 27 Apr 2026 07:00:46 +0000
Manifest next update: Tue 28 Apr 2026 07:00:46 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: fDQv9aYU7UvhyEzMmiflICV42ZnndMspaN8HP1B7y1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:94:ee:6d:f7:b5:6e:08:6d:43:b3:49:6a:cb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Apr 27 07:00:46 2026 GMT
Not After : Apr 28 07:00:46 2026 GMT
Subject: CN=c336830ed2392479cbf610ac84fac9233aa21768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:59:e3:cd:34:9a:75:55:c2:b9:de:d7:67:
4a:4c:5e:52:6b:ed:40:b1:af:b7:ac:e8:88:aa:d2:
ac:7d:7e:12:a1:d0:40:f1:1f:bc:ae:a2:e1:bc:ee:
f5:77:d6:15:3c:c2:85:5b:1a:11:dd:a5:65:70:e8:
e0:d0:db:18:df:d3:01:b9:b2:dc:ee:eb:db:60:d3:
95:25:f3:88:65:be:f9:aa:81:d1:6e:d2:78:cc:ea:
c6:f5:4b:86:8f:99:a6:e0:57:15:82:19:24:02:fc:
c3:b5:e9:8d:6f:3e:d7:bd:c5:02:28:d0:ab:6c:3c:
6b:95:cc:13:7c:6a:fc:08:9b:5b:57:51:03:77:e0:
35:c1:7b:53:51:b6:6c:69:fb:17:4c:13:88:63:a6:
67:ab:49:93:4f:82:11:01:52:17:87:68:81:ee:63:
fe:c0:25:6f:a0:ff:ec:aa:af:02:17:62:a1:bb:78:
cc:7f:90:4a:7d:fb:ec:5c:fa:8c:a3:d9:42:0b:f8:
24:c0:35:63:bc:20:be:85:fb:7f:98:96:a0:ce:30:
8c:d5:89:45:f9:fe:48:64:2d:9f:66:5e:93:02:f0:
9d:ea:39:10:ac:f1:1e:ed:d4:13:f3:79:15:3b:86:
36:45:1d:b3:60:4b:69:6d:9e:96:9c:f6:62:9f:c1:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:83:0E:D2:39:24:79:CB:F6:10:AC:84:FA:C9:23:3A:A2:17:68
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c2:80:dc:45:08:f5:52:fc:7a:de:8a:e2:f1:be:d2:00:3f:
52:b8:b2:69:04:c4:87:30:8e:a3:15:ca:0e:5d:10:c8:39:e3:
ee:c3:90:9c:7b:8f:07:72:16:88:4c:c2:4d:63:d0:04:04:e0:
9a:16:dd:76:2f:d0:62:53:e8:f3:bd:90:29:9e:ee:46:56:4c:
fa:7d:b6:a1:48:8e:19:07:9b:0c:8b:71:4a:c3:0e:94:e5:c5:
cf:82:f6:6a:85:a9:26:35:52:11:08:27:ee:2d:de:66:ce:10:
dd:2f:df:eb:e9:b9:76:74:cc:4f:0b:50:ea:df:eb:4c:6e:05:
30:ac:bf:94:84:ab:59:dc:02:a6:78:d5:74:ad:bc:17:f3:90:
2a:0c:7c:46:28:ac:88:74:98:8c:38:24:f8:d9:81:dc:69:e4:
4e:3d:e7:3a:ae:51:3c:07:64:ed:dd:b2:df:ed:e6:92:8a:f9:
92:be:fc:27:3f:0e:27:db:b3:33:65:0f:f9:49:65:67:64:9f:
6c:93:88:78:77:d7:87:ef:90:6b:a4:7e:da:78:27:fa:d6:2c:
17:69:74:d1:4e:f3:b2:0c:e9:45:51:95:01:c9:9f:b6:b5:e1:
29:3e:b8:d2:18:fb:4b:98:12:1e:7b:a1:3e:9f:40:24:74:01:
a1:4b:a1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:11 2026 by rpki-client