Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: GEV1PJsaRK3+e7uC6W7mFT12SRbG9hHgzMtG1YaoguY=
Subject key identifier: DA:12:09:56:B9:AD:6D:7C:08:B4:27:D6:79:AA:30:44:F2:74:C8:33
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 019D382E705D50F6B4437B96DC9EFE952F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: pwWC9hFmOZhRHFbQdNWwq3Ob0SFUZEHSfTgdqiFzKac=)
2: VpxDxilNFo6QDK_norEdW_OneKc.roa (hash: eM+dyL5sYA7YmYI63S6dG6sSIhkE5TG0Z5qosr3fK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:70:5d:50:f6:b4:43:7b:96:dc:9e:fe:95:2f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=da120956b9ad6d7c08b427d679aa3044f274c833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:fd:1a:50:fc:6c:ec:b3:4c:db:1e:e6:ab:
78:81:05:e7:0f:62:36:e8:90:b4:c6:30:6c:a9:9c:
b2:77:b4:75:f7:0a:b4:46:4a:b0:02:49:45:b7:44:
e3:ee:25:9c:8c:15:01:fa:5f:18:8b:25:20:9e:80:
01:2e:4f:cc:67:bf:cd:07:7e:e1:d7:d9:d0:c9:2c:
8f:e5:0c:be:a0:ac:cf:91:53:e4:30:63:82:ee:b6:
9b:05:fe:76:e9:73:85:17:86:5a:f7:d0:94:d9:74:
2e:fc:ec:c3:dc:10:51:da:ce:e4:f5:b3:9b:d7:ec:
c8:be:e2:a1:33:a4:6a:2f:a8:67:28:bf:b2:32:bf:
65:70:97:d9:1f:21:d3:dd:03:7c:40:5d:d8:2d:37:
9f:dc:e3:cb:46:09:33:14:c5:f1:ec:e6:ba:43:84:
bc:e2:4d:bc:56:5d:fa:15:ec:39:1b:18:d8:99:e8:
a6:9a:eb:c3:6c:73:d3:36:7b:cf:25:54:e3:1d:1a:
e2:bf:e7:f9:62:73:3e:40:78:45:a4:d3:b3:0e:09:
29:96:73:de:6c:a5:69:da:00:9c:1b:89:14:9b:db:
b8:35:d0:c4:e4:0d:d3:35:b7:78:b6:18:d5:ef:51:
fd:7e:63:1a:e3:da:3e:77:81:04:9a:95:64:7f:4b:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:12:09:56:B9:AD:6D:7C:08:B4:27:D6:79:AA:30:44:F2:74:C8:33
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7f:c6:e7:c0:a3:a4:dd:68:cf:27:f9:c2:e8:c3:68:40:f9:
2d:bd:fd:ac:ba:d8:1f:89:7e:dc:69:25:27:ba:25:7c:b7:87:
b0:09:95:56:59:fe:5e:38:47:4c:ab:99:04:c4:37:4d:85:db:
a8:7d:49:1a:3d:f0:3c:a4:51:27:42:b1:26:3f:f6:29:b8:fb:
b0:e3:4e:39:e1:99:39:32:34:ba:93:16:6a:90:87:e4:c2:cb:
86:21:70:5e:94:26:65:ce:06:a9:2a:a5:9a:0d:5b:0c:30:17:
66:02:dd:90:6b:d6:c5:84:70:42:e3:ce:28:15:0a:8c:03:18:
8f:43:82:72:28:f6:64:3e:88:73:d8:8a:18:57:20:f8:8b:07:
cd:4c:a4:ab:30:a0:5f:f7:8d:f0:5a:6a:18:e6:4c:f2:16:5a:
99:22:b9:88:0f:ed:35:16:3a:be:0a:58:41:3e:7c:3c:70:b4:
37:21:9b:80:99:a0:bb:3b:a0:a3:9a:75:20:92:1c:f5:e6:52:
c0:96:62:34:02:9b:00:36:58:2b:a7:b1:74:18:ec:76:0a:9f:
22:cd:56:79:a9:b2:af:89:6a:fa:08:a3:ba:80:86:a9:a3:10:
86:7b:9c:b1:81:cb:43:ad:67:87:4b:ab:5d:c6:d9:57:f8:a0:
bb:90:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:22 2026 by rpki-client