Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: YkZ1WaAE5dbZ7x2zyCbEmGgVpXB7UiREDVxzrU/ZqjQ=
Subject key identifier: BB:C2:D7:82:96:44:F7:6C:13:E8:16:41:6E:96:AB:5F:35:F9:1F:E5
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019D3793FA13C4265E8DBD9E731B9ABBDE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 18A4
Signing time: Sun 29 Mar 2026 03:12:17 +0000
Manifest this update: Sun 29 Mar 2026 03:12:17 +0000
Manifest next update: Mon 30 Mar 2026 03:12:17 +0000
Files and hashes: 1: EplHXqSzmRoMyvj3JLROrpnUZc0.roa (hash: j5DTguTZ+vBGCuEywM5pyMaQoBWgtnVjuF/GQ4nTMbE=)
2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: C5b0AxXvrJGs94QaHPntwr/g/IbWH9mP5+oUQybpWLo=)
3: eQxNMMvRDNCJCtCh2e2TQDAZ_ao.roa (hash: U/ZR91lWCIrADUFhA7IJ9YRdVU17/S6ltGDgTKAHlic=)
4: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:93:fa:13:c4:26:5e:8d:bd:9e:73:1b:9a:bb:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Mar 29 03:12:17 2026 GMT
Not After : Mar 30 03:12:17 2026 GMT
Subject: CN=bbc2d7829644f76c13e816416e96ab5f35f91fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:dc:cf:0e:34:2a:ed:7f:be:69:2d:73:1d:
6e:a4:e8:c6:5e:b9:0e:0a:6e:66:ad:bb:a7:f2:16:
e2:4e:75:a2:8f:b9:81:22:cc:73:92:69:2a:f7:b8:
75:d8:1f:89:78:8f:ee:5c:f1:41:af:9d:71:ae:4a:
6a:8f:9a:26:7b:a9:0c:fb:dd:1f:28:c3:d7:14:17:
e8:43:df:3e:0a:29:a2:50:df:3e:95:e4:a2:2a:86:
6d:b2:d2:01:de:99:43:5c:68:29:0d:2f:6a:ab:87:
c2:16:31:49:97:55:db:02:4f:a2:38:99:fa:04:27:
7a:25:eb:16:e8:2f:1c:38:d0:e7:db:a7:ee:86:a0:
49:37:e7:af:3f:89:8f:11:9b:4c:55:d7:78:7c:81:
bf:00:b1:fe:c2:0c:12:90:d1:f7:77:4e:b1:b6:33:
96:53:fc:7f:e0:d3:99:b8:7e:3a:26:a1:b2:69:ae:
2c:cb:53:40:c1:80:35:d6:9b:d6:3a:08:ed:08:15:
d4:8c:1b:7c:22:bd:38:cf:1d:1b:a9:f1:2d:6b:70:
0e:27:41:d8:5f:bb:b1:3b:f1:06:09:23:5e:f7:1a:
72:a2:d5:fc:5c:83:0b:ea:78:4f:de:37:d6:aa:ed:
17:30:ad:1d:94:f4:4a:81:83:9e:8b:d4:db:05:12:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:D7:82:96:44:F7:6C:13:E8:16:41:6E:96:AB:5F:35:F9:1F:E5
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:92:8a:b1:76:cf:9c:49:c2:6c:7d:b6:3c:42:91:cf:8e:
1c:c4:fc:55:1e:3e:22:03:47:2d:0e:3e:94:15:4b:f0:b8:5f:
ea:ab:96:45:8d:96:9b:e6:09:25:87:15:3a:6f:48:21:ab:cf:
f7:0d:57:c5:83:7f:8f:6f:fa:89:14:2e:c2:95:62:37:79:48:
5c:94:2f:45:c7:1b:59:c5:6a:c2:24:36:13:63:28:39:28:c8:
ca:08:af:6d:bb:03:2b:5a:2a:81:b9:c9:db:a4:5f:cd:21:62:
f7:4a:75:eb:7e:32:1c:f9:5b:85:1a:45:a7:e4:7b:ae:f3:0e:
73:c5:ec:c6:2d:ca:1b:7e:c1:3a:db:d4:a8:d7:56:a1:4e:26:
09:e1:7b:c8:e8:8d:60:0b:ca:fe:34:27:ef:8c:a7:7b:2e:fe:
23:26:ae:8d:d8:e4:0d:9c:58:d1:57:62:d6:b7:f9:58:92:cf:
0e:cc:4b:73:0b:a2:4d:71:34:78:91:9f:42:d2:98:ad:fe:0d:
21:82:a6:69:48:ea:b9:90:5c:11:51:08:56:13:47:3d:0d:94:
34:31:cf:af:7c:6b:0a:63:2b:e3:0d:77:cd:d9:a5:17:1a:ba:
df:91:31:27:51:ec:03:4d:15:b8:7e:4f:0b:91:b0:66:9e:89:
bc:73:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:17 2026 by rpki-client