Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: gM8HC3x/2s+/wwHo+bIz6w5U8zCRpnXv/uAr20d2+n0=
Subject key identifier: 48:5A:3A:59:F4:A6:25:01:F7:49:6D:19:5B:BA:06:E2:6B:0A:08:DB
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019D389C36EE690EBCD608FF7C18479BB49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 04F4
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: O5JexMcbjP7dBGO3sTpbS1FfyP5TOIzue6QYcgPdiIQ=)
2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:36:ee:69:0e:bc:d6:08:ff:7c:18:47:9b:b4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=485a3a59f4a62501f7496d195bba06e26b0a08db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:97:56:0b:db:88:3e:ae:7f:a7:aa:36:06:
a7:fb:46:10:8a:02:bc:5a:1c:75:56:61:2d:3f:48:
ba:06:21:ec:32:6c:0c:89:d9:67:05:26:9d:51:82:
ff:f5:2d:99:7d:74:c2:48:b8:7e:ea:48:85:ba:81:
b1:1d:03:d8:c6:9b:93:b3:77:bb:bc:8d:1e:32:83:
7d:37:51:b4:55:4f:b3:7a:81:79:26:c6:1d:d4:2e:
64:26:bb:24:4a:24:97:f3:83:b3:2e:8d:0a:b6:25:
50:ff:59:03:84:64:aa:84:d9:64:5b:e9:f4:18:85:
9a:2d:8e:75:6e:ec:88:41:d2:6c:0b:59:c7:f6:9e:
df:e3:ab:6f:a8:2d:5d:0f:3b:36:cd:91:15:54:10:
e1:0b:a3:0f:d4:7c:5c:d1:c4:f5:70:c5:6c:7d:0c:
ce:e5:9c:8b:91:85:2e:76:42:4b:30:70:71:b8:56:
af:6f:f2:21:4f:0d:fe:b4:7d:65:c5:4b:7c:84:06:
01:76:a5:9b:f4:9d:89:a6:09:d2:dc:6d:1a:e7:b0:
d9:81:9c:58:f0:83:4e:f3:79:02:4a:a6:76:df:f8:
6e:a2:ba:cf:f1:4e:a3:2b:c8:b2:d9:52:a1:2b:19:
39:b4:5a:37:55:7a:ec:66:2a:6c:e0:40:5c:51:d1:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:3A:59:F4:A6:25:01:F7:49:6D:19:5B:BA:06:E2:6B:0A:08:DB
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:e6:4f:3e:98:c2:39:e8:47:f3:c0:b5:85:c3:18:a6:9c:
57:f3:ba:da:b1:4c:a3:18:14:78:fa:ef:f4:c8:ca:f5:8b:b8:
29:29:36:a5:34:0e:7c:1a:bb:af:06:88:c0:25:2b:0e:6a:e3:
3e:55:b1:4a:55:9a:10:1f:74:0f:0c:1c:91:59:5a:19:d8:94:
f4:f5:dc:aa:96:de:f9:49:b4:3c:b1:d2:12:9b:59:e7:73:4e:
13:48:ba:b5:22:cf:e0:1f:72:48:a2:55:fc:89:0f:94:d6:d6:
35:65:13:07:63:2e:7c:cb:d5:4f:28:6b:9c:c5:8f:48:24:78:
2d:71:99:95:c6:6f:f5:a1:c5:af:ba:1a:1e:41:b9:27:f1:c8:
39:38:c8:d6:3e:18:28:3b:8a:79:e9:62:73:27:7d:63:b9:a9:
4a:94:d3:2c:e1:42:0c:e0:84:b3:a7:9d:47:39:47:1d:c9:47:
41:0c:d4:98:80:6e:30:19:1f:de:f9:ec:0e:0f:05:c2:e3:d4:
09:c8:6d:7b:dd:c9:81:55:70:12:f7:1e:0c:38:dc:94:2b:a9:
b2:ce:e5:2c:44:13:1b:34:07:a1:55:4d:76:c2:d9:48:a1:77:
35:ec:7b:76:27:ab:18:e5:50:c3:5b:4b:f3:4e:93:af:2a:17:
ff:2b:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:16 2026 by rpki-client