Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: qOEhVejJuu8xQaUAJbYxZKPd5EWK0Z4fOJXTuvW8hlE=
Subject key identifier: BB:32:3F:0F:03:82:1B:05:84:A8:64:53:CF:84:CE:26:27:BD:75:EB
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 019D27041D8B8FE5EA5A42692D59C918B9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 11AF
Signing time: Wed 25 Mar 2026 22:01:14 +0000
Manifest this update: Wed 25 Mar 2026 22:01:14 +0000
Manifest next update: Thu 26 Mar 2026 22:01:14 +0000
Files and hashes: 1: 33dtqLxDvjVwskcvs1eBKxG9qW0.roa (hash: v3Uvvd01xCxk2zOvIWKmnmyUBgwjXDORZn0oG3d1w0A=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: qfU3imFA/bIAA5RU2pa2hO7HK+6cLtNLzVoKNDpKiGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1d:8b:8f:e5:ea:5a:42:69:2d:59:c9:18:b9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Mar 25 22:01:14 2026 GMT
Not After : Mar 26 22:01:14 2026 GMT
Subject: CN=bb323f0f03821b0584a86453cf84ce2627bd75eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:85:80:aa:5b:6a:f5:ab:d9:83:42:19:9e:
a6:61:ce:0c:e0:3c:cd:b0:bc:60:b5:ed:a6:95:94:
bc:1f:85:ac:03:5b:6f:8b:d6:71:5e:bb:ca:28:06:
76:4b:25:67:91:32:a4:26:cd:57:47:cd:0f:fe:02:
be:d5:b9:45:2c:15:15:ee:0b:da:93:e8:55:fe:67:
24:ff:54:26:6c:87:54:2a:87:46:59:6b:2e:de:21:
1c:aa:a7:3b:e3:44:d8:96:9e:92:63:20:b1:c6:69:
d5:85:96:5d:d4:ca:c1:86:34:1b:49:7f:a2:36:d3:
0d:4d:cf:b8:2e:a5:ef:73:34:ef:d1:f1:86:ef:d9:
0d:a0:d9:1f:7f:34:a4:6b:c4:1c:69:57:6e:8e:fd:
6e:81:de:90:c4:21:a4:9b:05:b7:13:e5:a0:38:c5:
a6:fa:b2:0b:b4:21:bb:ac:27:16:e5:ff:72:ad:d7:
97:c9:ba:3d:9f:98:2c:56:a1:b4:c4:78:15:71:58:
8c:96:56:3d:7a:82:2e:94:2a:85:9c:b4:ab:88:0e:
e9:f1:d2:55:bd:c4:b7:31:7f:c9:84:2f:55:60:ce:
c7:a2:34:9a:f7:10:5a:3e:1f:d4:2f:36:be:aa:89:
d8:7e:81:01:2f:d5:bb:74:5f:d5:cd:60:aa:17:24:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:3F:0F:03:82:1B:05:84:A8:64:53:CF:84:CE:26:27:BD:75:EB
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:87:74:ff:88:cd:1f:44:d6:e4:1e:48:ad:f3:01:47:93:73:
1f:ee:54:04:99:ca:e8:b8:c9:58:ee:2e:93:d6:9b:d1:11:1a:
d2:dc:92:4e:a9:bc:e7:89:48:b3:0b:87:d7:6c:ef:d0:23:40:
53:94:1c:65:26:d1:52:a5:7b:65:1f:b3:37:56:6f:e9:34:b9:
ad:a2:44:78:5d:6b:94:ca:d9:81:a7:82:a0:71:1d:4b:57:44:
36:87:ee:31:eb:61:d6:de:df:75:84:fd:83:01:1d:1a:76:f4:
1c:73:60:06:3f:bb:5e:e5:02:10:90:9f:d2:36:8c:7d:5c:13:
d6:24:cc:0f:db:35:5c:90:09:8b:4b:d2:80:36:7b:a3:db:4b:
14:c3:d0:8e:6b:fe:f3:66:c4:9b:79:d0:f8:c4:64:7d:bf:15:
d2:d5:0b:98:06:90:f3:e2:1c:c3:df:db:bc:20:41:98:0c:d9:
a6:52:05:58:a9:a4:8b:20:26:a4:9b:84:7a:ca:92:fc:25:e5:
dd:78:d1:4e:e5:72:2e:8d:99:24:41:ec:1e:dc:3e:e4:a0:30:
c5:15:a6:20:d3:45:13:42:bd:d0:7b:44:de:65:05:f1:c2:f2:
59:88:18:45:fc:3d:6f:e0:67:0f:57:47:67:d5:e1:b1:4a:7b:
37:43:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:07 2026 by rpki-client