Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: 6kf2BK6bucu0j9qoFd7DpSwdKHYWt3rUKuvJtr9l30E=
Subject key identifier: B4:F5:52:A4:C2:8B:A7:A2:12:99:EE:D7:76:6E:47:6B:68:E7:4B:E9
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019CE5FEF2643ECA2E8EB2BFB16C7F797D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0559
Signing time: Fri 13 Mar 2026 07:00:16 +0000
Manifest this update: Fri 13 Mar 2026 07:00:16 +0000
Manifest next update: Sat 14 Mar 2026 07:00:16 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: FRusadGqShBxkpoL2paCp-tYl9I.roa (hash: u0M4J6xRL9yocHk0JRl+kCiGzN5rm3Nwf2AuG18JDLc=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: nyBQadat1yJS6RBZdYeRcRUBLbJV1nsPAOQwwQzxfxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:f2:64:3e:ca:2e:8e:b2:bf:b1:6c:7f:79:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Mar 13 07:00:16 2026 GMT
Not After : Mar 14 07:00:16 2026 GMT
Subject: CN=b4f552a4c28ba7a21299eed7766e476b68e74be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8e:03:e0:ca:aa:c3:15:37:43:29:3b:54:50:
1f:8a:51:42:ad:7d:a0:b9:8d:21:34:45:18:55:fd:
2e:07:f8:ff:fc:c0:97:d4:fd:35:30:e7:7c:3e:46:
d0:67:b0:0d:0a:7e:ef:19:ca:28:b6:07:03:65:21:
51:28:a7:6e:90:98:8b:62:50:91:1e:29:59:18:09:
67:50:98:ef:83:63:bf:41:2b:49:36:f0:9e:b0:52:
61:ec:2a:25:85:25:4e:50:d9:6b:d3:02:c4:fb:7d:
4f:f4:ae:8f:81:99:99:00:c6:a3:54:75:1d:d0:6b:
27:f8:63:30:50:f0:14:6f:5b:89:7c:1e:95:5a:5e:
2c:27:55:d3:a4:f0:a9:64:50:d0:18:8a:22:bd:bd:
75:01:aa:01:9c:22:60:ee:5d:f7:20:38:df:49:5f:
12:88:97:81:d0:17:7c:c3:c1:d9:91:a2:a4:69:b2:
5d:a9:57:7a:34:40:a9:a9:48:e5:ab:46:7c:9e:e6:
48:f6:6c:5d:fd:80:e3:0d:d9:21:46:43:8a:48:39:
86:ae:c8:ec:78:0c:60:02:88:1d:50:9c:44:c8:72:
b2:84:fa:fc:b8:89:fc:41:83:34:25:cb:3d:1e:83:
e7:ba:4e:4f:6e:02:9c:13:40:ec:be:ee:a9:6a:47:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:52:A4:C2:8B:A7:A2:12:99:EE:D7:76:6E:47:6B:68:E7:4B:E9
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b1:f4:ee:1f:0b:a3:95:f3:ae:8b:50:51:28:34:24:63:97:
22:40:6f:28:18:d8:15:ec:90:1b:95:c3:1a:5e:8c:71:4e:b5:
1f:3b:63:55:b6:09:30:7c:52:8a:a5:52:b9:cf:72:e0:69:8e:
89:7e:78:ba:84:af:59:5e:f2:e7:4e:d1:c1:5d:dd:7c:29:3e:
7d:a4:81:c5:49:fb:7a:7a:17:18:89:34:0c:dc:79:f5:cc:aa:
04:d5:20:f8:66:15:ac:ef:4e:21:e7:6f:0e:9a:36:ce:06:b1:
90:4c:0e:c9:43:99:8f:aa:a1:8e:6a:d3:87:fb:1f:a1:fd:05:
ef:13:21:0f:7c:0f:60:07:c6:aa:dd:2e:cb:ba:bd:a1:07:70:
09:0e:6d:41:9e:6c:46:0d:9f:2c:05:c7:de:79:a6:4a:66:40:
78:35:68:36:47:d7:3c:0d:39:8f:ba:27:8d:64:21:8c:fb:68:
ad:36:96:80:2b:5c:27:a1:de:11:44:f1:5c:1f:19:a7:25:61:
ca:d2:46:f9:d8:e6:36:fb:89:ca:6a:17:40:8f:1f:0b:6d:2d:
ac:8f:7d:79:2a:5e:cb:36:65:4a:1a:ae:cb:f1:b2:35:79:39:
eb:9c:7c:ce:40:26:08:59:92:bd:dd:6a:fc:cf:dd:f5:4f:8e:
bd:74:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:28:43 2026 by rpki-client