Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: QcUHmcLE6kMPWJBE9090Z2/yH1la5ECaSYCkedqe24g=
Subject key identifier: 61:4E:80:BB:70:A0:D4:AF:71:F6:89:BF:09:2F:37:6E:39:B6:C9:F9
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019D3752C80BB0D5AA1A4995540CF516D88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 152E
Signing time: Sun 29 Mar 2026 02:01:05 +0000
Manifest this update: Sun 29 Mar 2026 02:01:05 +0000
Manifest next update: Mon 30 Mar 2026 02:01:05 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: WQ3lLUixzdwWw0CwZsqPAFzC9mLgiHcBV91awGJ96VI=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c8:0b:b0:d5:aa:1a:49:95:54:0c:f5:16:d8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Mar 29 02:01:05 2026 GMT
Not After : Mar 30 02:01:05 2026 GMT
Subject: CN=614e80bb70a0d4af71f689bf092f376e39b6c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:c7:d5:dd:86:1e:8f:7e:54:31:a9:09:4b:
ba:83:7d:af:9f:b0:fc:6b:9e:de:9f:cf:38:7d:54:
76:ff:20:08:27:f7:b6:b3:07:b7:4d:15:7b:89:96:
8e:06:90:a2:38:7d:de:84:0a:4c:5c:41:92:28:fd:
68:ad:cf:52:4e:2b:cc:11:ae:81:ad:5b:3c:39:b2:
54:fb:75:ee:96:0a:da:e9:89:4a:ce:c3:12:cc:04:
b6:7c:a1:18:df:b4:12:86:b2:4d:92:d8:dd:6e:61:
ff:22:b0:17:15:81:6c:aa:b4:9f:b1:d5:07:15:cc:
34:fe:ed:3e:af:30:13:59:69:4a:fd:76:41:2f:b9:
f4:9f:ae:0f:9f:94:d0:29:10:04:94:e1:2b:10:dc:
29:9d:12:70:a7:af:1d:43:f8:6c:c8:1b:ac:8e:04:
b0:2b:66:e9:bf:37:24:ac:07:67:2e:9b:40:45:91:
f0:de:18:2f:c5:5b:48:7a:63:7a:20:1a:1d:94:20:
e4:aa:de:d5:5d:c0:bb:eb:be:33:21:65:34:92:a6:
65:67:dd:a4:ce:ee:15:75:96:f1:b5:14:32:88:fd:
73:4d:92:f0:2b:10:f2:fd:11:14:cf:d8:09:17:96:
b1:14:7c:2e:fd:be:2e:ac:2e:e9:0b:86:15:50:1a:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:80:BB:70:A0:D4:AF:71:F6:89:BF:09:2F:37:6E:39:B6:C9:F9
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:1c:4a:fa:c0:ad:ca:76:c6:de:3a:37:14:77:4c:92:69:
01:74:d0:48:dc:8f:96:4b:4a:62:d0:82:fe:51:6c:44:b4:2d:
24:d4:cc:06:af:32:53:e1:18:04:10:6b:82:4d:c4:ad:cc:01:
27:f0:23:52:58:fe:55:62:42:d1:5a:cc:2d:72:9e:48:e4:16:
bc:5e:2d:9d:14:04:7f:33:bc:bd:1c:e2:b3:8a:86:8e:05:37:
2e:53:03:f4:12:9f:31:1c:53:a6:14:42:db:15:af:f4:1d:ec:
31:32:3e:9d:0d:6d:d0:3a:1e:ab:4c:3c:da:cd:45:af:60:02:
84:3a:f8:3b:03:86:0f:e2:96:74:50:26:78:27:6f:90:d7:ae:
c7:e3:86:7d:e1:ba:f0:17:18:65:98:2c:c2:a6:7a:f5:33:5c:
e5:63:41:89:87:21:4c:c8:65:52:7f:3c:61:ce:a8:b0:28:c1:
cb:35:b8:bc:06:d9:1a:9e:b1:be:f8:10:0d:ea:5e:ac:13:26:
ab:21:83:af:e2:5e:48:bc:50:fe:b1:ab:6b:ef:0b:49:49:5c:
76:b7:63:b5:50:c2:36:df:9e:98:df:56:05:1f:d3:7c:ad:9e:
78:86:16:e9:9d:f1:69:79:4d:44:14:5a:aa:d9:6a:37:83:25:
0e:23:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:55 2026 by rpki-client