Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: mFVr+xrxNZnQ1GdzcK0bFWXo9oEfxueJk1nVQ0MWIQ8=
Subject key identifier: 2F:D0:49:E6:46:61:2D:AE:29:C7:13:9A:4C:64:A4:D0:5C:53:D1:DA
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019DCBCF0F7FEF208457D8DE882D03FD5503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 037C
Signing time: Sun 26 Apr 2026 22:00:37 +0000
Manifest this update: Sun 26 Apr 2026 22:00:37 +0000
Manifest next update: Mon 27 Apr 2026 22:00:37 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: EYmwjqU5PBCTBowA1AgFD1i6ecQJtEPpfrzIIZEP72M=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:cf:0f:7f:ef:20:84:57:d8:de:88:2d:03:fd:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Apr 26 22:00:37 2026 GMT
Not After : Apr 27 22:00:37 2026 GMT
Subject: CN=2fd049e646612dae29c7139a4c64a4d05c53d1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:15:1f:2c:b0:16:6b:0a:16:08:35:6e:78:
fd:e0:7b:72:f8:5c:c2:79:e5:28:d4:3b:8a:66:3f:
22:9d:f0:1c:81:c6:4b:b3:1e:b4:6d:2f:1c:f2:92:
18:4d:1b:ff:d1:bd:69:29:a4:c6:a8:1c:aa:d3:82:
08:a8:b4:d2:b5:2b:c8:93:6f:3b:59:93:33:87:a3:
28:35:39:73:bd:d7:10:4a:21:ab:d5:a5:ac:d4:55:
f6:78:92:e0:b6:a1:1a:a2:c6:12:ea:72:d4:a5:30:
f3:92:87:79:f1:fa:c2:10:b5:6c:53:f8:17:04:3e:
a9:dd:ac:0b:4d:40:91:7b:0f:11:dd:fd:f1:13:3c:
7a:8e:f6:34:6d:77:68:5c:c0:56:3a:a6:a9:42:a2:
e9:f4:cd:68:4a:18:63:7b:0b:f3:74:be:c8:ca:b2:
ea:16:89:a6:be:39:4a:5a:d8:8f:34:10:51:86:76:
8d:c2:29:bc:8b:2a:d6:eb:fa:bc:6a:4c:5b:eb:3d:
77:20:62:91:4a:14:a6:b6:5b:96:64:76:c7:a2:88:
72:89:28:75:16:d7:b4:d5:9d:b9:75:e1:c7:16:69:
78:de:b8:55:86:50:19:3e:15:76:48:18:93:39:7b:
f2:ff:e0:af:8e:0b:3f:65:12:f4:dc:e5:bc:8a:9c:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D0:49:E6:46:61:2D:AE:29:C7:13:9A:4C:64:A4:D0:5C:53:D1:DA
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:13:4e:de:31:ec:ef:9c:d9:9d:76:bf:a3:06:28:e3:f2:85:
52:57:8c:bf:f0:0e:19:e6:16:39:83:47:7f:59:5d:6f:af:bb:
83:57:c3:d7:6e:11:6a:46:a0:d4:c2:ae:8e:c2:91:7e:f8:45:
48:0a:aa:b9:38:ec:39:b3:59:ab:35:72:f0:49:f3:7f:02:ad:
b8:01:f1:05:9d:d6:99:cf:15:9e:28:6d:30:25:8c:bd:55:44:
6d:f0:93:37:83:44:7b:0c:cc:91:9e:91:a4:f8:dc:51:ff:cb:
f4:a9:16:e2:39:5a:0b:ab:2e:af:23:ac:eb:f5:38:d2:b2:8f:
24:01:45:ee:bd:22:02:49:21:c4:ca:ff:58:4c:ac:4d:f4:c5:
4d:ab:09:08:a0:49:40:dd:47:ca:43:9d:21:2b:f0:70:66:47:
3f:dd:e6:8a:68:de:2b:c6:23:0b:91:cf:73:2e:39:d7:5a:12:
7e:26:a3:ac:3b:4b:2e:76:cf:a0:83:07:98:70:bd:a0:b6:74:
e7:33:9b:0b:b3:af:fa:f9:74:3f:4c:94:0f:e3:79:a8:4e:eb:
84:8d:13:19:2f:58:0e:bc:71:92:c7:cb:9d:d5:ce:98:ce:90:
2a:3c:02:ac:68:87:84:42:e1:4d:29:f2:fb:2b:6f:e9:63:20:
77:52:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:17:30 2026 by rpki-client