Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: Fcu2mwQVGgV2/M4qTlWUCoWZWGwH07Yu3/tWfNfFq84=
Subject key identifier: 3B:39:6C:11:7F:A7:17:42:2C:28:93:66:12:43:BC:3A:C4:17:6D:60
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019D284D8D3F1F20BFE83696C585FFD9FA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 1072
Signing time: Thu 26 Mar 2026 04:01:04 +0000
Manifest this update: Thu 26 Mar 2026 04:01:04 +0000
Manifest next update: Fri 27 Mar 2026 04:01:04 +0000
Files and hashes: 1: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (hash: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=)
2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: tnWm7sJYzHN/hy2dvHWp+6R6lqrqjoQZeXWWqZuEo80=)
3: cfefMU6VCTQ-krOdPG6PUT0K-AE.roa (hash: /iqY0OlFoitueMsNG0GZcTyMYyjjsKmq3zEGu1XC6Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8d:3f:1f:20:bf:e8:36:96:c5:85:ff:d9:fa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Mar 26 04:01:04 2026 GMT
Not After : Mar 27 04:01:04 2026 GMT
Subject: CN=3b396c117fa717422c2893661243bc3ac4176d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:2b:28:78:93:49:71:27:25:83:25:61:56:
46:9c:5e:2e:0a:0e:e7:2b:ff:fc:90:63:07:8f:77:
43:05:fa:f7:d8:d3:bc:b3:aa:36:c1:4c:50:8d:ee:
ec:d9:8b:b0:03:77:60:50:2a:78:fa:b6:e4:70:db:
d6:b4:9c:1a:c2:f5:20:a4:b4:e5:9a:eb:cc:19:34:
01:ac:59:64:a6:b3:6a:8a:4e:ff:4e:3f:b0:83:4a:
76:4a:06:98:da:14:76:60:47:14:71:81:85:9d:4e:
19:99:1b:7f:69:cc:66:25:e2:9f:3f:d8:cc:fa:81:
a5:39:54:c2:1a:71:e1:5d:4e:a5:f2:c4:e3:9e:ae:
71:80:69:c6:65:b4:4f:ff:d9:e2:2f:ea:07:b4:53:
5f:bd:fd:73:32:07:7e:1b:d6:8b:a8:32:15:9d:1a:
b2:c5:f4:5c:34:f7:11:ce:2e:5f:e3:1c:d9:49:84:
57:79:47:c6:77:52:c9:e5:70:1b:9d:76:83:bb:e6:
3b:f9:db:cb:96:b9:a7:cd:24:d0:43:6d:ea:d3:03:
82:a3:bf:48:7e:71:25:2f:73:c1:47:92:d7:a3:ca:
fe:25:10:03:5c:54:45:31:ff:98:3a:1c:e5:d1:92:
2c:b5:70:63:eb:4c:bc:8f:50:96:0e:d5:9e:6d:b6:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:39:6C:11:7F:A7:17:42:2C:28:93:66:12:43:BC:3A:C4:17:6D:60
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:38:f2:17:8c:5d:39:61:36:2f:01:c0:67:60:3a:ca:0f:58:
9c:63:fd:7e:0c:87:ec:b9:46:cc:de:27:e3:ab:1e:d3:31:e1:
3d:50:04:25:ce:86:9e:a1:a6:5b:b9:44:91:05:82:a4:fb:7b:
05:31:27:f9:9c:74:33:1f:c4:e5:1d:8d:2e:03:5c:78:bf:f2:
0e:92:61:9a:c8:40:a7:53:bb:de:67:8c:05:0b:78:7e:ae:e1:
67:b6:50:09:3a:35:cc:1d:4d:2f:7a:ff:83:e0:fa:85:2a:75:
d0:96:87:b1:94:e6:59:d0:ca:d4:ee:42:16:f7:5d:c8:8c:f5:
12:1d:0a:18:b5:1d:85:65:6c:eb:70:9e:72:20:4b:3c:92:b6:
ac:63:6a:93:d2:74:67:aa:90:b2:87:bf:74:d6:34:af:5f:74:
c3:e7:5a:d5:b4:37:d4:3f:50:33:41:c0:ab:89:8c:7c:9d:89:
c0:10:7a:3b:28:9e:00:b7:7c:b4:f8:70:67:ee:4a:56:e0:0f:
a8:63:c7:01:2e:e5:98:7b:2f:9c:64:ae:bb:b9:13:70:02:9f:
a4:36:5b:21:42:7f:08:b0:a7:03:e0:fa:66:16:50:b4:db:ae:
42:7b:fe:9a:fd:f4:8a:21:eb:04:a3:20:5e:72:8f:26:3f:45:
ba:5f:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:20 2026 by rpki-client