Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: Ijt34UdqpIO+5ETtyRNqbQst8mSNQ3qPZA7oQYVNEdY=
Subject key identifier: 7A:07:B5:68:07:76:CC:EA:B9:55:BE:9E:C5:D3:46:A0:4B:9C:0F:B4
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 019D270456AC7641E3363851754ADF15771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: eldkWaPSaj9TC8W6JiiBYB/bVBIOOlqcyfSIP1Niglo=)
2: e3szWYnRwcnVrlDIwYxJ3pYMom4.roa (hash: BKtUpfmwzLTGUQniKBkvPeoFHhYGa5oaDqKuTCxUab8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:56:ac:76:41:e3:36:38:51:75:4a:df:15:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=7a07b5680776cceab955be9ec5d346a04b9c0fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:ba:a3:d3:a0:46:7b:21:f6:33:eb:27:2a:
2c:04:e8:77:c9:e2:09:dc:61:ca:1e:de:f7:b8:bc:
1b:34:d7:74:d7:05:94:ca:aa:8b:9b:9b:d9:09:77:
7b:71:83:d2:69:4b:b2:ca:3a:87:bb:a9:a6:2c:d5:
21:8e:cd:53:8a:8b:6d:87:61:11:f2:71:1d:a3:97:
b9:1c:58:b6:d1:56:a8:43:4e:f7:54:f8:28:81:4c:
9d:52:fa:87:ed:5b:63:32:ba:99:c2:7c:d3:1e:fa:
84:d3:f8:b7:d2:9e:e5:0c:58:22:52:a0:be:cd:41:
80:e2:39:80:01:a6:18:cb:87:fa:b6:7d:10:78:e3:
e8:54:8e:10:2b:a0:6a:e4:88:fd:6d:6c:56:48:74:
e6:c4:fe:8f:75:af:d1:c0:77:89:12:d4:a0:b1:7b:
3d:7d:81:d3:ba:e7:0b:7d:a7:97:19:19:b6:7c:96:
36:12:00:25:4a:e4:33:05:09:96:e9:12:bd:9f:18:
55:1c:4b:87:c3:39:fc:47:7a:1e:6b:b5:65:8d:10:
08:35:3f:f9:44:26:dc:7b:de:de:44:5e:f1:af:9b:
c5:f6:18:09:65:e6:ef:bd:95:05:6b:a6:52:96:6c:
8f:27:fe:fe:cd:19:a7:8d:4d:43:81:9c:02:2c:ed:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:07:B5:68:07:76:CC:EA:B9:55:BE:9E:C5:D3:46:A0:4B:9C:0F:B4
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:94:b5:ff:28:1a:79:ac:63:63:a2:14:0c:09:f5:79:9c:
c5:6c:7f:c6:46:cc:ad:cb:08:09:c2:22:21:06:7b:c9:8c:04:
6c:7b:62:ba:a7:1e:93:82:d6:da:9f:03:bc:14:8b:76:ac:e0:
6d:67:1a:ff:16:0e:4f:08:c9:07:b2:2c:32:88:1c:88:42:cf:
e3:ab:d9:fa:e5:58:99:ca:03:fd:14:67:ac:12:57:0f:e7:db:
65:74:e1:bc:b9:3b:e4:45:22:52:ef:16:b1:19:f1:69:a6:a7:
96:16:c5:ec:31:0b:03:73:e1:62:90:8a:24:28:f9:c0:28:99:
ba:e9:5e:12:ea:ee:bb:ab:20:b3:b7:b2:b1:22:fc:43:f1:4f:
09:2e:1b:db:17:87:ba:f7:fe:0a:0a:3d:18:a5:de:1a:78:52:
9d:68:95:fd:d7:5e:71:c5:61:20:ec:33:4c:dd:39:64:83:d4:
21:d1:e7:6a:13:5f:45:3f:2c:d8:de:d4:44:75:35:1b:8b:5b:
1e:4b:c2:b2:df:82:77:61:eb:56:2d:74:52:43:26:20:13:3c:
0f:53:e7:3e:c0:12:4d:fb:ea:10:c4:e3:90:25:93:3b:52:a0:
e0:ef:b3:64:10:12:85:fe:62:56:8f:a6:48:72:9a:11:51:5d:
d5:e4:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:30 2026 by rpki-client