Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: Q+Mbf0kxe3WfSBhFqJPDseZL7mA8r7Q2Spf8XIGQfdI=
Subject key identifier: 58:0E:4F:AF:63:50:AB:1A:34:D9:36:62:AF:5D:CD:79:AE:C0:36:11
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 019CBA029CACF3A8A9B5001BACD68BD4D2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 1342
Signing time: Wed 04 Mar 2026 18:00:59 +0000
Manifest this update: Wed 04 Mar 2026 18:00:59 +0000
Manifest next update: Thu 05 Mar 2026 18:00:59 +0000
Files and hashes: 1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=)
2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: WfeJFE9xQwg27cpjq05bsx+LKb16mfzHa0lNIJpCIdM=)
3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=)
4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:02:9c:ac:f3:a8:a9:b5:00:1b:ac:d6:8b:d4:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Mar 4 18:00:59 2026 GMT
Not After : Mar 5 18:00:59 2026 GMT
Subject: CN=580e4faf6350ab1a34d93662af5dcd79aec03611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:b4:e4:88:9f:9e:0e:62:40:21:df:8e:67:
5c:5a:27:5d:46:e7:31:a1:b8:1c:04:b8:0f:47:82:
19:10:80:db:04:1b:95:8d:2e:0b:f6:16:6a:52:82:
e0:11:30:3a:dc:61:ee:45:11:43:3c:e9:16:c5:3e:
9c:22:72:57:80:22:53:27:43:a6:34:60:b0:62:f9:
09:f3:8d:52:8c:7a:7b:e2:5d:88:28:5c:99:c2:29:
42:70:e1:84:d0:2e:34:0d:01:08:ab:ca:ee:0d:7f:
b6:bc:bc:f4:33:9c:d6:99:d5:ef:a4:28:1e:94:7f:
ce:d0:f2:52:79:0e:f8:15:1d:15:2a:8d:42:71:40:
a0:f7:20:b0:8c:cb:4a:69:ec:00:ba:a6:d1:2a:55:
23:fe:6a:81:ad:f2:3e:6a:31:2a:bd:03:fc:f9:e6:
d9:57:3d:8e:8a:47:c6:25:75:9f:41:7a:5c:ac:7a:
bd:8d:9e:51:96:8c:b4:72:b7:e8:4c:49:d9:18:d2:
3e:7e:a3:19:82:c3:9d:c3:70:7d:a2:88:5d:6c:9d:
75:50:8e:6f:da:8f:3a:8e:e1:20:9d:ea:9a:77:0b:
5b:bd:13:4a:2d:ad:5b:a0:03:6d:9f:6e:bb:f2:14:
74:a3:ce:17:ea:c1:a0:30:ca:66:7d:5a:73:d9:a5:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:4F:AF:63:50:AB:1A:34:D9:36:62:AF:5D:CD:79:AE:C0:36:11
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b0:9c:1f:1b:6f:da:e7:2a:31:7d:53:75:4f:f8:22:9c:c0:
32:2f:dc:6a:ba:04:b1:92:6f:4e:f5:1f:7c:c1:9d:30:d1:00:
59:95:8e:f7:77:e8:88:e4:a3:6e:d5:9b:d7:f2:77:4a:60:94:
50:0e:08:7c:37:e0:17:17:18:22:42:ea:32:d9:3e:49:f4:8b:
c6:5f:8a:9e:cb:cc:1c:e8:39:dc:43:e5:a8:8d:04:bc:29:62:
80:95:09:9a:f4:79:dc:4a:9a:6a:0d:2d:ad:40:60:20:e6:c6:
7f:08:32:43:e7:19:9b:bd:75:b5:91:05:07:71:d4:3c:e8:e8:
8a:75:09:3c:c0:24:78:e1:74:73:c9:55:59:d0:3c:9e:64:6f:
d5:1e:7b:ee:5b:c3:ea:98:44:e8:c9:03:d9:7b:15:97:b9:1e:
53:e7:64:bd:cd:36:67:cb:1f:a8:59:79:18:18:1c:cb:83:94:
fb:fd:aa:39:1b:0c:f9:d4:cd:33:8e:3d:37:68:e8:d2:77:86:
5c:72:41:b6:c2:eb:8f:6f:78:85:83:e5:16:ad:5b:f5:ec:67:
31:3f:b1:39:25:4b:47:60:a3:ad:02:eb:26:ba:08:13:3e:9a:
28:e8:81:9a:88:e5:a8:89:b2:f0:b3:69:9f:5b:08:25:38:ca:
99:19:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:51:05 2026 by rpki-client