Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: 9GYt6kYI7dOp/FQ5IVCCXFcw9lz5e98PgSvJ1fT4mtM=
Subject key identifier: 13:FE:85:C6:A6:53:73:A0:6A:33:6C:E6:90:4C:E0:74:4D:F9:21:23
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 019D390A56A1DA7E4FA95B68E43E0017B40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: 1OlpkuQpAVvITqIzbJCzHhbZuaY.roa (hash: 3R+s0povuTwLbXStSvGlYnJbOVvmE0QK+nYMWxPdz1U=)
2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: GcEGHer5AapgDM/7Rv7BuuIff/H+Z4JKoWis+bblT9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:56:a1:da:7e:4f:a9:5b:68:e4:3e:00:17:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=13fe85c6a65373a06a336ce6904ce0744df92123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:f3:ca:51:8d:29:1e:19:b8:58:8f:a8:83:
72:9d:95:1e:f7:ec:9c:4c:7c:52:bf:6a:93:aa:d0:
7b:dc:63:4f:bb:1a:41:86:23:ff:84:75:db:43:aa:
58:1f:7b:4c:60:4f:a5:04:39:38:d6:bb:74:6f:d2:
8f:c9:18:21:27:aa:1a:17:3e:44:6a:ba:a6:c5:18:
f7:6f:b9:59:0b:5b:06:7a:90:56:b0:18:dc:5b:39:
17:04:7e:1f:03:4d:2e:1c:cd:8b:1e:03:f7:4f:3b:
35:9a:62:4e:52:67:a6:54:0c:a9:d8:9a:14:e2:56:
51:ce:e1:df:60:78:7e:62:db:7a:c1:d7:cb:08:4b:
b2:2c:00:6c:5a:75:2e:47:35:39:e6:e9:ee:1c:eb:
51:b8:d3:09:3b:6d:e2:64:93:01:11:fe:1e:b7:32:
dc:c7:f3:9c:66:4a:3b:a0:01:db:b3:1d:15:e5:6c:
c2:60:0d:13:ca:15:14:39:6f:56:17:54:30:3b:29:
00:27:d6:64:f2:86:62:2a:de:e3:65:f6:85:c2:9d:
f8:e8:ce:09:be:f1:dd:77:6c:83:18:87:d9:e4:83:
1b:73:59:97:34:82:74:d9:ba:b3:04:9d:61:47:11:
6a:fe:18:3a:02:9b:48:02:28:05:79:33:5f:ba:4a:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:85:C6:A6:53:73:A0:6A:33:6C:E6:90:4C:E0:74:4D:F9:21:23
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:51:fc:f6:3c:b2:66:92:16:52:2f:e4:f6:0c:9b:69:e1:
3c:ba:14:c0:a1:be:8c:bc:3a:4c:65:be:84:1e:04:5a:3c:3b:
23:e3:dd:eb:0a:2f:49:80:9f:a6:86:ed:79:c8:a7:d2:62:aa:
e3:6a:92:60:93:bb:1e:b2:25:ba:4b:99:63:21:b8:18:1d:26:
dd:16:43:1b:02:88:c2:88:fd:a4:79:b8:34:c2:13:f5:c1:21:
b3:f7:46:fa:74:76:49:0c:d7:70:a2:8b:35:84:77:a9:20:b7:
8f:86:df:1f:b3:e4:dc:0b:37:a8:a1:fd:fa:d5:f7:22:99:b4:
c2:fa:0d:03:58:da:56:07:cb:b5:87:9a:12:43:7b:99:8f:08:
29:43:e4:34:b5:48:19:c3:78:21:1a:f4:37:0e:a6:c8:b0:90:
f6:36:33:c1:02:73:b7:5c:06:16:8e:ef:64:20:f4:a5:84:bd:
75:06:45:7a:50:24:e7:60:2e:1a:5c:2d:c5:d9:59:80:6f:ae:
fb:9c:63:fe:da:bb:d4:c8:3c:e5:77:81:f8:47:a2:57:37:82:
7a:1d:45:d7:50:df:7f:0c:57:72:fa:6e:db:ae:f8:e3:87:54:
7e:62:6a:54:a8:79:a0:74:96:e1:95:60:21:21:52:4e:f1:93:
78:9a:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:06 2026 by rpki-client