Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: hqFUKRmfn3RwHqDagZUE2bMkC/trYl+m/ED+UgjpEbQ=
Subject key identifier: 70:2C:12:CE:C3:E7:B6:5B:31:9E:1A:6C:DC:DE:49:6B:AB:A3:19:8F
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 019D382E4FF5D2A40934DCAA9BB3061D47B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 103F
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: Vb9jUokT5OwxUfxPS7BiuNCDTOaCnHnbSK/tmQ3/BBw=)
2: b0XSo4jvDuO8MB_EbsL2q8I7iqE.roa (hash: zA5xuJEEHRh1YzXZne76m8fjU9QyWncSAVrCc1799S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4f:f5:d2:a4:09:34:dc:aa:9b:b3:06:1d:47:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=702c12cec3e7b65b319e1a6cdcde496baba3198f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:1c:ed:f6:2d:d3:40:93:66:12:57:27:6d:
96:02:ee:18:fb:15:16:d6:93:3a:e7:49:44:5d:4e:
18:ba:fc:03:fa:4b:44:d6:87:01:45:4f:27:7d:69:
bc:bf:0b:d7:76:33:4d:09:f7:0d:9f:bb:e9:30:be:
14:a1:41:2f:24:57:12:f7:03:4b:3f:9d:12:a2:cd:
99:22:79:a1:e5:4f:65:5c:6a:63:73:86:42:43:3e:
12:b3:7e:08:dd:5a:77:bc:0a:92:64:56:e7:7a:98:
86:5f:77:47:bc:d4:75:15:8c:16:aa:d9:bd:d8:f9:
fb:9e:b1:e7:24:28:f8:b7:8e:83:3f:20:e8:31:12:
d8:89:3b:5b:7f:83:8e:0b:3d:6e:eb:38:22:5b:1a:
5b:84:e1:5c:16:f5:b3:95:96:b1:b8:f2:3b:c9:11:
c6:d1:58:ad:3c:f8:4e:35:b6:51:df:0f:2f:5b:50:
f1:74:0f:b7:a3:0e:99:39:63:08:95:66:65:7f:2b:
d7:42:3e:26:ef:84:ab:9a:50:e4:f6:1f:52:90:da:
5d:a6:c4:ea:6d:a0:29:06:6c:c9:1f:db:dc:3a:9c:
5c:73:0d:c6:18:28:ba:84:cc:c8:75:16:56:38:5b:
aa:9f:d9:09:c8:4c:6f:73:af:2e:fb:4b:ab:ea:39:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:12:CE:C3:E7:B6:5B:31:9E:1A:6C:DC:DE:49:6B:AB:A3:19:8F
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e1:2c:16:aa:5f:f2:36:b7:6e:5f:f3:6f:07:f7:6e:82:5e:
cc:c7:5f:e4:5b:6f:ac:b4:ff:74:1b:c2:78:ce:d9:0b:fe:e6:
91:8d:ba:e8:12:cf:65:6e:94:22:3e:0a:15:de:97:11:e3:01:
2a:f6:66:a0:43:ae:38:a2:ff:46:53:b3:9c:ee:dc:ba:88:c3:
be:11:d9:c1:61:f5:db:72:d4:c9:4c:ae:e4:9d:a9:0e:96:a3:
ed:b1:88:6a:52:62:97:18:07:c6:f6:93:ff:0e:a4:d1:3d:22:
fa:b8:39:6e:2d:9f:3f:cb:9c:0d:38:ce:8e:97:ae:e8:7d:a1:
16:c2:74:cc:e2:d7:d1:54:11:d4:a6:f2:d3:27:8c:87:64:7e:
c6:b2:9b:6e:bc:1e:3b:83:10:56:c2:8e:c3:df:b0:70:70:e3:
3b:9a:fe:b5:52:97:c8:71:bb:ae:5a:be:db:0e:19:14:b0:24:
31:0e:df:eb:44:b7:6a:fa:7a:d1:64:43:01:25:cc:f7:fa:31:
90:e4:b6:2f:e5:1f:f9:29:eb:77:28:71:06:de:ad:68:6b:11:
87:b6:e2:cf:27:09:13:76:b4:cf:95:8d:6a:a0:0a:69:0b:28:
93:ce:e8:51:09:ed:e3:8f:e9:1b:58:d8:2e:fe:24:de:ae:5e:
67:13:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:49 2026 by rpki-client