Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
File: Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft (raw, json)
Hash identifier: F1VpXiDrKWGcBC8et/F9Uzh7Z6z4jl0/4FrAmGYwV2w=
Subject key identifier: 2B:15:AA:FE:DD:55:FC:4E:E8:2E:FF:5C:BB:70:50:98:9C:B5:A3:63
Authority key identifier: 43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A
Certificate issuer: /CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a
Certificate serial: 019D371BD75BC75A835AD56322EB82B4D4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
Manifest number: 0116
Signing time: Sun 29 Mar 2026 01:01:04 +0000
Manifest this update: Sun 29 Mar 2026 01:01:04 +0000
Manifest next update: Mon 30 Mar 2026 01:01:04 +0000
Files and hashes: 1: Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl (hash: f73swNDA1CovwvS5fmNt60cDvDZzpRYg+ohMYSj2p3E=)
2: dSgf7Rj9MRB36B06KCH4XtB0J-E.roa (hash: 50BV1O3krfrNrPmzDGVH6bT0c5/ZuT9nFLY2UgtP04I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d7:5b:c7:5a:83:5a:d5:63:22:eb:82:b4:d4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a
Validity
Not Before: Mar 29 01:01:04 2026 GMT
Not After : Mar 30 01:01:04 2026 GMT
Subject: CN=2b15aafedd55fc4ee82eff5cbb7050989cb5a363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:27:59:b9:c9:d4:e2:fb:d6:5b:7b:9c:9a:
19:a2:b1:4b:ea:17:23:8f:d5:c5:e5:1c:bf:cc:1e:
85:15:c1:32:04:49:cb:aa:fb:dc:5d:4c:12:3d:3d:
5a:8c:fb:dc:56:a3:23:61:3c:5f:52:a5:f7:4b:7a:
71:2d:05:47:a7:69:27:e7:2f:56:d6:bf:6d:24:0d:
f9:99:5b:cc:79:84:59:7c:bf:69:9d:9d:9b:5f:f5:
b7:6a:82:a6:7d:3f:93:ab:ad:75:f4:ff:28:f4:2a:
64:05:c2:64:26:79:0d:d8:c7:2e:9b:87:6c:66:8c:
18:44:ba:60:3c:57:16:1c:19:94:0e:bf:80:03:ac:
3a:b7:d8:8d:c9:38:08:e0:30:33:df:6a:34:82:59:
ab:f3:89:71:40:0c:1c:6f:2c:5d:03:d3:ea:8a:0d:
1e:90:c8:be:08:4e:eb:9b:d2:0f:ed:40:f6:13:9c:
74:db:c4:90:55:92:4d:b2:9d:ad:36:de:d1:65:93:
f5:09:d6:20:f6:90:79:5d:36:56:7d:a5:1a:86:5b:
0e:d3:6b:3d:70:48:2d:2e:bf:54:1b:e0:ba:94:bd:
a8:98:09:4c:76:dd:24:64:74:c8:6d:07:aa:d0:9f:
2a:bf:53:c0:15:e0:83:f2:06:0f:a2:58:9b:b2:7c:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:15:AA:FE:DD:55:FC:4E:E8:2E:FF:5C:BB:70:50:98:9C:B5:A3:63
X509v3 Authority Key Identifier:
keyid:43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:65:68:81:2f:e3:94:de:2c:a8:41:3c:f2:ad:03:17:cb:db:
51:02:9f:64:9c:26:62:a8:4a:65:76:97:e7:52:32:d5:89:39:
9e:0c:bd:5b:0a:e4:a1:3f:46:be:82:3e:17:49:6d:e9:35:37:
1f:6d:0e:44:d0:0a:7c:a0:e1:77:43:0d:e2:f6:2a:19:a1:ba:
4b:fc:69:7a:b0:58:a4:75:61:4e:bb:d3:c4:55:7f:17:a5:f4:
6a:f8:66:2f:6b:0f:f5:23:a6:f2:47:bc:bb:4f:e6:53:55:8d:
39:db:8e:ef:bc:7b:67:73:b0:e6:ff:b8:49:91:19:e1:ca:22:
84:ab:bb:57:33:76:4b:a6:62:48:01:9d:4e:e6:13:e4:9d:88:
7c:41:4f:83:4e:a9:0f:02:4b:d3:0a:11:49:32:a1:96:de:f5:
3d:80:f8:82:3f:d8:2f:ba:5b:2e:c1:e9:5a:d8:98:8f:3b:87:
30:a8:5d:4f:52:82:0d:55:a3:b8:d8:1d:11:1e:56:8d:e2:7c:
7a:c6:c1:de:a2:ea:2a:bb:11:01:3c:40:fa:13:7b:92:fb:1e:
c2:06:9d:3f:5f:91:1b:4a:da:35:0a:25:23:36:8a:66:cd:b7:
e9:dc:dd:0b:49:81:71:24:a0:33:d1:c0:7b:55:b9:23:9a:12:
e5:9c:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:44 2026 by rpki-client