Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: 7UJmOwWgR7TDHQ1pbspgJ0IUVE4GCB+orqB6sGcjxC4=
Subject key identifier: 5C:8A:8A:DF:C7:34:EC:02:3C:E5:FB:A5:0F:65:BE:1A:DC:B5:8E:4F
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019D27A93C56D4F292569389307023A6FFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0A1D
Signing time: Thu 26 Mar 2026 01:01:35 +0000
Manifest this update: Thu 26 Mar 2026 01:01:35 +0000
Manifest next update: Fri 27 Mar 2026 01:01:35 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: yLCyuLnui6VEKzM4FKz1Sl+2zm92BLmqW0kaQmw3mSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3c:56:d4:f2:92:56:93:89:30:70:23:a6:ff:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Mar 26 01:01:35 2026 GMT
Not After : Mar 27 01:01:35 2026 GMT
Subject: CN=5c8a8adfc734ec023ce5fba50f65be1adcb58e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:cc:4a:53:b3:a3:fd:77:46:e8:8b:98:9c:
54:dd:37:07:ea:b1:47:65:60:70:0c:0d:4d:46:8f:
97:7a:21:90:ca:7c:c7:51:3c:f3:80:80:39:fb:48:
4c:7c:85:ae:b8:fc:0f:ca:a8:f5:9d:8a:06:73:8b:
30:87:92:c1:4e:82:46:9b:33:3a:7a:99:04:11:6a:
03:a2:f7:5d:14:61:e4:ef:e0:75:0d:0a:b7:f0:85:
fd:b6:5d:f7:71:41:d4:37:0c:9a:c7:c5:f3:b4:b7:
3f:0e:33:98:bb:61:68:59:9c:f6:83:17:67:bb:70:
ed:bb:5f:e0:2c:72:c1:aa:61:7e:e0:c8:26:2a:75:
ab:42:da:63:49:c5:28:68:e2:b0:45:2d:59:f2:c8:
37:de:ea:9f:8e:b6:4d:9d:d2:51:a7:39:f5:75:b5:
1a:7a:d0:99:e8:20:da:89:d7:19:dc:e8:9a:d7:6c:
05:ec:db:63:cb:cc:8f:a5:da:e6:0a:ed:ec:ff:1e:
26:e6:1d:f9:13:9c:2f:cd:f5:86:88:dc:32:0a:17:
bd:90:4c:1a:74:91:45:22:10:d0:c6:17:83:6a:c5:
1c:10:df:e9:2a:df:26:3f:48:f7:6a:e7:10:20:04:
d7:71:bd:ac:3f:10:18:f8:d7:ee:6f:ca:21:d3:51:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:8A:DF:C7:34:EC:02:3C:E5:FB:A5:0F:65:BE:1A:DC:B5:8E:4F
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6b:fe:84:74:6b:7d:b6:f1:89:b7:21:b8:eb:33:0f:dd:11:
1c:45:7e:a8:3d:bc:51:ce:6d:d4:09:e0:f9:61:0f:e2:60:91:
31:ce:21:94:f7:82:1e:81:0b:40:a0:73:54:6e:db:87:a2:e4:
fb:07:bf:fa:09:b6:4e:ec:02:f7:ef:06:0b:99:26:b6:61:aa:
54:f2:51:b6:45:1d:5e:c3:ef:22:d4:32:13:c2:f1:63:a2:7f:
1d:04:49:c6:ff:b8:46:ac:79:8e:82:83:e0:6e:37:bc:7c:f3:
db:ae:75:17:1b:14:4f:b7:b1:7d:a9:fc:63:99:03:96:a2:d4:
97:37:86:ff:ea:31:6c:bc:72:de:cf:e2:30:9a:d4:37:41:e3:
a3:b1:64:97:e0:4c:97:69:14:a4:84:1d:58:73:dd:db:94:ce:
fd:10:04:7c:95:9c:e0:b6:bf:67:a9:b6:43:75:3f:ce:b3:65:
e8:78:18:8e:55:00:88:e1:67:92:f5:00:e1:21:62:48:14:52:
dc:9e:36:e7:0b:24:0e:b1:38:f3:73:5a:15:b9:c3:18:5f:9f:
d4:6c:b6:47:84:fe:ef:ce:35:7b:6e:e9:10:28:5a:e7:ae:7c:
7a:fd:7a:25:3e:c2:98:e7:5a:c9:56:4c:9a:97:8e:18:da:6a:
84:ee:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:20 2026 by rpki-client