Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: j0nZ9gTuAinb5+a4kkAVfmBL5S99EXxTg4RYl0aatDc=
Subject key identifier: 7F:E5:48:DA:FE:54:82:45:53:2A:72:A6:C6:0C:41:9A:53:5F:31:17
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019D378985C0B312737758003BF164196978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 0288
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: t7P2Ccfq03ZxryIPgYD3mjVg/f4ba5ZVSFw1BtMYIeQ=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:85:c0:b3:12:73:77:58:00:3b:f1:64:19:69:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=7fe548dafe548245532a72a6c60c419a535f3117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:cd:da:01:32:21:0f:2f:b8:26:d3:c2:65:
f0:16:e5:df:2c:b2:34:e0:e1:b8:95:c2:c2:f8:7e:
12:0a:b6:a6:23:7b:08:c8:d2:3f:91:d4:8c:53:47:
15:42:63:bf:79:e8:0f:d5:5b:a0:4d:4d:97:4a:63:
31:01:d6:60:cd:95:d3:a6:9a:3b:35:23:03:19:50:
10:eb:e5:48:5d:5c:96:95:9d:c1:d0:22:b3:b9:2b:
40:1a:34:db:15:a7:4e:ad:b0:44:77:22:8b:2b:90:
f1:dd:3b:45:d5:c8:fe:93:25:cb:08:f4:88:bd:b4:
d9:3d:32:b4:a6:be:4b:d3:c6:a9:a6:65:14:d2:2b:
20:06:02:cf:61:8f:3d:f2:81:2e:ea:06:94:78:24:
ac:d8:e2:85:92:94:c2:35:c8:04:03:21:7a:cd:a5:
d8:d7:8e:30:00:68:d5:f9:cf:b7:4b:00:04:69:b3:
7e:75:08:9a:43:e4:7a:6d:98:cc:9e:5c:9d:69:73:
79:e8:dd:8a:37:fa:9f:f4:69:82:da:42:ed:55:db:
56:f4:f9:b8:ea:f1:e2:97:2d:e9:a9:52:cf:ac:31:
dd:18:cc:8c:cc:b5:74:38:ae:bc:68:90:dc:63:6b:
b6:1f:63:ff:02:33:6f:9c:d1:a1:6a:d0:19:9d:df:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:48:DA:FE:54:82:45:53:2A:72:A6:C6:0C:41:9A:53:5F:31:17
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4c:8e:33:68:a5:11:90:9c:57:01:6e:28:61:d7:3e:0a:32:
e3:e0:97:ed:a3:7b:47:05:98:02:42:a2:ed:44:4f:99:5c:13:
ea:cd:50:fc:29:b3:74:93:e3:35:a5:2a:a4:e8:5b:35:a6:e7:
2b:72:7a:08:db:0b:77:ee:90:16:ea:c5:97:8f:3c:72:25:4b:
e6:16:bb:5c:1b:bf:c3:7c:e8:64:59:51:9a:1e:99:83:45:ff:
a4:e2:68:8c:cc:8e:45:84:a0:fd:3e:77:ea:4d:fb:fd:3a:54:
bb:47:53:49:bc:0a:88:8a:d2:65:af:a2:c2:d6:da:da:07:49:
48:6e:f0:f0:bf:b5:d4:26:a2:00:0d:8c:a8:c6:40:0e:87:e6:
a0:f2:89:c7:b8:c5:b7:50:21:e2:3c:ad:5e:5c:a8:66:26:65:
0f:ff:33:96:5f:12:29:4d:3e:6f:0c:82:12:58:1f:d3:cf:b3:
a2:b9:0d:be:d1:1f:4c:33:32:9f:62:9c:f7:18:6f:da:bb:75:
91:9e:ac:f3:1d:32:7f:ec:22:5e:45:c7:f5:84:67:20:f2:49:
88:1a:bc:44:13:6d:a3:5e:de:68:f5:02:6f:50:5a:61:f8:df:
03:2b:17:21:35:20:3b:43:20:60:b1:1f:da:73:2b:98:1f:23:
9e:30:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:24 2026 by rpki-client