Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: n9SS4hG3L6HvtPVkRaw/hiLJuUTaXZxClVMVQXSJnaY=
Subject key identifier: 21:A2:12:9F:8B:64:61:68:1A:A3:0F:76:94:E6:AC:58:94:13:74:10
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019CE410F6110F9FB76F99254D24C606A583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0304
Signing time: Thu 12 Mar 2026 22:00:42 +0000
Manifest this update: Thu 12 Mar 2026 22:00:42 +0000
Manifest next update: Fri 13 Mar 2026 22:00:42 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: QKyC29FTe5+BCx0ThrlKvoNP8mULwCqBePwY7hI6ThY=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:f6:11:0f:9f:b7:6f:99:25:4d:24:c6:06:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Mar 12 22:00:42 2026 GMT
Not After : Mar 13 22:00:42 2026 GMT
Subject: CN=21a2129f8b6461681aa30f7694e6ac5894137410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:63:c2:f2:55:c4:9b:f6:91:85:6e:56:89:
15:d2:9a:f5:07:3a:ae:a0:57:91:a5:03:26:c7:88:
81:a3:d1:1f:c6:16:ae:0e:8b:f7:7a:d0:5f:3b:73:
8f:e8:ec:52:7a:91:51:08:6f:9d:f9:c6:10:4a:a8:
0b:bf:75:3b:3e:5d:2d:5a:e3:e7:48:21:d0:28:06:
ad:70:70:f2:43:3b:25:42:f4:0f:32:39:59:d1:50:
c9:2d:14:e4:41:c4:a1:46:19:4f:16:ec:61:51:30:
a2:f3:42:ec:db:61:68:1a:d7:94:90:dd:99:c3:78:
93:7f:ab:24:b5:41:39:e9:24:23:1d:7e:2d:e2:68:
ab:fd:3b:be:81:58:4e:3b:9e:af:0d:67:dc:03:ac:
6d:d1:85:10:cc:bc:d8:88:b2:ab:8a:f9:db:32:1f:
9f:ff:ce:27:b8:8c:c6:81:ec:3d:7b:19:95:0b:ec:
bf:4d:2a:ac:b9:d9:d3:85:75:ab:86:1c:0a:fa:27:
93:61:ab:cc:1c:9c:44:f5:6f:62:50:2c:78:17:85:
1c:f9:8a:5e:9c:65:6a:f7:2b:d4:89:b7:34:c3:a6:
c8:bc:82:fd:86:d5:81:05:1c:e5:aa:1c:97:bd:af:
47:65:4a:ab:48:f8:c5:fe:83:60:4a:9c:57:2d:8b:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A2:12:9F:8B:64:61:68:1A:A3:0F:76:94:E6:AC:58:94:13:74:10
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bf:d8:79:4b:85:ef:41:9e:c4:53:70:8d:63:b1:c3:a5:d4:
72:1d:58:79:e7:54:9f:7f:38:5b:26:c9:64:25:24:26:67:f7:
92:4b:d2:18:b9:48:ed:4f:28:f0:6e:f0:8c:f4:64:96:f1:20:
02:da:0c:9e:57:b3:74:03:4d:45:4c:93:e4:1a:20:26:05:bb:
bd:d0:b6:56:44:0c:6e:d8:7c:e7:22:8b:7b:3f:33:b8:0b:31:
e6:d3:21:3a:2f:60:8c:f6:44:bf:30:f1:9e:84:bb:fd:43:b9:
3f:46:85:6f:59:91:72:83:61:70:29:e5:27:27:81:cb:b7:4b:
29:5b:10:8d:8e:db:b6:ab:1a:72:0b:e9:8a:86:8d:a8:1d:dd:
06:10:37:75:8a:be:af:d8:90:48:95:19:a1:7b:21:ef:7a:91:
ea:97:48:22:b5:37:c6:e6:17:17:c7:f7:c2:0d:05:9b:c1:ca:
b5:d2:38:29:ed:ae:27:eb:b7:ce:b7:40:17:38:fe:aa:d0:b7:
4b:03:57:a3:c8:a2:3e:8f:09:ad:20:b9:9b:4f:55:b5:6b:17:
be:1f:0f:58:ab:b5:f9:14:16:33:e6:6c:32:64:b8:47:8e:ee:
0a:52:20:b7:df:59:43:59:eb:29:cb:21:ab:db:af:5f:10:08:
4c:3b:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:51 2026 by rpki-client