Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: 0iN3sR4G0yqk7UiWIfvcte0CKkjc+1yKIPWoYperXrA=
Subject key identifier: FF:CF:A7:55:51:68:03:CF:7E:4D:DA:C8:61:73:0F:C3:44:B8:A8:D6
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019D2A722A0BAA7A54461C391BF0167A031C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0AD0
Signing time: Thu 26 Mar 2026 14:00:18 +0000
Manifest this update: Thu 26 Mar 2026 14:00:18 +0000
Manifest next update: Fri 27 Mar 2026 14:00:18 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: KangnA0cjbvNazmSWT9dVUeoIdxvPmdGuGfj67xvbUA=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: iM_ZBvtG32QBlHfVIn2ttPitF3A.roa (hash: n0U6ZQ9IjEu52Acx8IHWzTTmN0Tm9iyKYJwGHBgAhus=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:2a:0b:aa:7a:54:46:1c:39:1b:f0:16:7a:03:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Mar 26 14:00:18 2026 GMT
Not After : Mar 27 14:00:18 2026 GMT
Subject: CN=ffcfa755516803cf7e4ddac861730fc344b8a8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:54:f3:6e:7d:cd:c9:df:50:40:8c:1e:ea:47:
a4:ed:10:cd:e9:04:44:74:33:87:e9:c2:f8:a3:50:
5a:d5:4c:98:23:52:4b:a1:bd:05:e1:8c:43:00:15:
9d:c1:38:f9:7b:16:21:b4:ce:79:66:d7:99:02:1a:
f1:57:fa:d7:bb:f2:31:d0:4a:a2:05:d9:2d:34:d1:
b2:1c:b7:1b:73:65:0d:c4:7e:6d:22:b8:84:b7:46:
4b:5e:fa:36:3b:4b:e0:56:d8:aa:89:98:fe:81:1a:
b6:5e:28:25:6d:59:b8:b0:37:55:7e:55:50:98:b8:
0b:2d:23:ce:69:cf:76:a2:a9:9e:d3:b6:c0:9c:da:
d9:5d:66:42:8e:87:19:5e:e4:cc:8a:00:82:a5:b3:
d8:19:13:37:9f:f1:85:2c:5f:16:8e:40:5e:68:95:
74:6a:d5:ff:e5:7e:79:3c:ac:05:8f:fa:22:2e:90:
18:6f:83:80:02:50:f6:de:81:d5:e0:1d:99:ed:77:
b4:72:18:3d:5d:a9:14:62:88:24:7e:3d:10:f5:e5:
3c:9a:e5:75:36:e3:4e:7a:1d:c3:69:0e:65:ff:dd:
9e:b2:38:34:a3:63:68:8b:cd:00:ae:05:45:9d:4c:
5f:1d:21:d0:45:89:9a:72:d5:d6:b8:09:42:14:66:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:A7:55:51:68:03:CF:7E:4D:DA:C8:61:73:0F:C3:44:B8:A8:D6
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:69:7c:f4:c6:1e:b7:79:8e:a5:97:17:02:4d:01:0c:bd:
95:e5:57:af:54:80:d4:da:8c:fb:fb:be:e1:5d:0d:36:f1:25:
88:7f:9a:1a:bd:41:8e:50:61:06:21:ff:0c:8e:98:48:03:eb:
2f:66:bf:d3:b6:41:da:15:56:78:15:fc:84:57:45:8e:ca:e2:
e6:03:85:31:e3:75:0c:a5:3a:9d:ab:a7:49:fe:b6:0c:07:00:
9f:b2:1e:06:0f:e3:e6:62:58:6d:e8:8e:72:0f:aa:1f:d9:20:
2c:22:df:c4:d0:29:71:4b:a0:2e:e2:81:b9:3b:86:f1:7c:87:
b6:4a:c9:bf:4b:8a:82:c5:63:c4:dd:10:44:8b:45:2a:52:3a:
fa:7b:4b:b8:a2:8c:ec:76:e6:a7:b4:df:25:b1:78:aa:91:f0:
99:ee:f2:42:24:c0:87:ce:32:34:d5:6d:0c:c8:02:48:13:fe:
27:39:df:59:2d:b4:59:76:04:35:53:f3:fb:4a:72:51:12:27:
80:e1:a0:fd:54:74:c5:c5:4d:42:8a:11:83:f3:af:31:af:c2:
31:be:0b:86:ba:f5:e0:5d:4d:11:2b:e3:2e:40:e5:39:5d:61:
83:fe:a5:8e:31:51:fc:44:d1:1f:0b:26:b6:12:d1:e2:ce:25:
7f:91:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:06 2026 by rpki-client