Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: j1E6/AHVriZvV+u+6wmV0yJlXLodctNReHRruBzl+Cg=
Subject key identifier: BA:AB:F0:55:95:1C:F1:C4:E6:9B:8A:F4:A3:1E:FC:EA:B6:71:84:32
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019D27721F6CAB9980EDECA31C499CAD9397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 1360
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: QQME4rfR2ye6aF3DjFxFr3OoC7/zywtUVhOLvYq3fPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1f:6c:ab:99:80:ed:ec:a3:1c:49:9c:ad:93:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=baabf055951cf1c4e69b8af4a31efceab6718432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:ab:94:a8:7d:71:36:a8:dd:d1:f5:57:34:
9a:dd:ee:7d:4e:9d:ce:1a:27:e3:20:2e:43:2f:8c:
fc:10:0e:ab:c0:c5:89:78:aa:6b:43:70:0d:c2:11:
bd:ed:d6:2e:ff:dc:c5:15:92:b7:64:20:ee:87:d0:
10:9d:ec:8f:d3:8c:60:28:73:2e:2e:d6:e3:09:0d:
c7:bd:c3:f4:80:bd:cc:5f:d3:4b:80:02:ca:ef:53:
ec:57:c9:a4:0a:3e:bd:ad:e7:76:d6:32:65:82:4e:
48:28:e3:6a:33:82:3b:e7:32:d4:86:ae:2f:01:16:
a1:0d:0a:94:1e:91:43:9b:70:2a:f3:8e:39:c0:59:
53:ae:7a:31:01:ba:9f:c3:8d:21:41:36:81:5f:66:
09:0a:9a:92:9e:7e:10:f5:d2:e2:fa:2e:66:89:38:
5c:45:fc:e3:73:5b:57:ad:08:23:02:77:62:2a:9b:
27:6a:3d:73:f9:51:2e:a9:9e:5c:e0:27:36:c0:82:
80:7c:1c:9a:ce:ca:11:57:e6:70:7a:01:a9:36:06:
c5:1a:1f:04:6d:c2:a5:4b:38:0c:53:7b:a7:da:51:
7d:36:d9:b4:bc:fe:cd:70:7f:ad:c8:74:6b:58:10:
b1:22:5d:91:9f:9b:73:02:47:93:da:6d:b9:4b:0b:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:F0:55:95:1C:F1:C4:E6:9B:8A:F4:A3:1E:FC:EA:B6:71:84:32
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ba:3e:ea:de:49:91:3a:9f:45:95:b7:c1:dd:0d:62:2b:b5:
5c:47:ff:22:33:2a:7a:3e:40:a5:c8:e6:1e:aa:b1:d4:b6:d7:
4b:52:d5:0f:a0:a1:a8:62:b6:2c:31:5f:ea:7a:04:20:0e:12:
52:65:5a:0c:a3:e9:8b:7f:27:0e:0e:86:45:71:bf:2e:f5:aa:
26:b3:3d:97:60:a1:d0:8f:de:38:f0:1f:5e:76:27:ba:c5:31:
cf:91:e3:fa:35:42:72:26:94:b2:46:25:7a:1a:ec:1d:34:da:
39:42:49:59:51:06:b9:84:07:0a:d9:14:2b:65:e3:b3:67:b3:
bf:23:85:3f:2b:f4:7c:95:86:df:bd:a2:5e:a1:cc:fd:1e:50:
16:bd:ef:24:2c:2a:f0:89:d5:7b:77:6d:5c:74:07:99:f3:0e:
01:75:d4:1e:db:04:01:4a:c4:cc:81:7c:ed:1d:5b:51:1c:31:
bc:1a:d6:85:b5:67:5b:29:44:5a:86:58:0e:9f:f5:45:ec:e2:
91:4e:fe:ab:b4:4f:71:32:80:6f:43:3b:2f:38:08:f9:5f:17:
b8:54:ba:d1:60:a1:b6:f3:45:e0:3f:bd:36:ac:43:b5:df:b0:
a3:24:24:e2:e0:99:c6:db:36:fb:1b:1a:6c:24:8a:9f:2a:bf:
f9:4d:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:08 2026 by rpki-client