Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: 7w82L3ioZEyMw7pRdW4+rMbZ8m3TaZdJl8czaNJFHSA=
Subject key identifier: 4C:12:9E:75:E3:AA:54:0F:32:45:BE:A1:3F:F9:E2:D7:34:75:EE:9C
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 019D273ACECC239F09908593392B4B4FD5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 15DC
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: 1-9gvKq__4lJz8gAUeJNid7QoH3Q.roa (hash: wA+VlinM94/cgwLiDz7GxnE6c830kychbDf4ciSXoIQ=)
2: 2N5o9UYogWs_19ZQbhZoze49YGE.roa (hash: maz0dBQdHpyXY30YzYRYq/maF3IjD7DTaz5b38XSA0U=)
3: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: BvAiatBmQ3r/FwP1zH6TufIYuPoggS3kUMURLhkSmLU=)
4: V-9JPYN-A-WMOgSKb1UfTFbhlII.roa (hash: D4qboXeBZRmSsdaZnMV1zPHaYNz+ftpVychfvUBIDgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ce:cc:23:9f:09:90:85:93:39:2b:4b:4f:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=4c129e75e3aa540f3245bea13ff9e2d73475ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:b1:17:44:6a:e1:46:91:db:2f:27:46:7e:
c0:91:57:44:98:f7:75:b1:1d:35:35:fb:9a:40:1b:
a2:8c:d7:38:9d:83:08:b1:00:f0:9e:45:4b:8c:2a:
f4:d6:a4:76:2c:1c:d2:b1:38:8c:8a:86:fe:68:e9:
0d:3b:4f:28:36:50:35:ca:4a:53:3d:cb:23:1c:e1:
b2:90:46:89:9b:6e:b3:da:06:54:a5:b7:00:53:5e:
0b:04:01:69:09:7b:b3:e3:56:27:14:53:3b:8c:5d:
67:a6:81:f6:c1:a2:c4:bf:ca:c0:a6:5c:7b:5f:6d:
cc:15:48:53:3d:7e:75:6c:f3:44:3f:1d:e6:62:6b:
22:e6:65:c7:b3:3e:6e:97:bf:6e:17:47:e5:66:5a:
51:58:36:fb:7a:be:71:9b:72:08:e3:a5:9a:ea:aa:
0e:0a:53:38:8e:d5:0a:44:bf:8e:9b:3f:51:4e:52:
e8:55:5e:3d:2d:1d:d4:ee:e3:3b:af:ab:cc:12:3b:
d9:b5:7a:98:fa:95:9a:7b:2c:d7:b5:35:b8:7d:0d:
ba:42:c0:30:b8:61:5e:bd:fd:ae:be:f1:2a:e8:80:
93:dd:0d:b0:37:73:14:e6:ac:f4:67:b0:18:e7:9b:
12:8b:30:11:8d:80:f0:59:78:61:9b:5f:86:3f:8a:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:12:9E:75:E3:AA:54:0F:32:45:BE:A1:3F:F9:E2:D7:34:75:EE:9C
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:7c:8a:a0:0c:3d:54:55:c6:dc:5d:cb:4e:6d:4e:b7:94:
b8:b8:44:d8:55:62:66:e9:26:83:ea:6c:50:ff:f8:38:9e:6d:
2b:16:62:fd:a6:28:0e:c4:49:c6:e7:2f:42:7e:a3:97:b0:bb:
50:b0:bb:23:fe:70:4b:c6:77:bd:3c:78:32:10:f3:3a:23:1a:
0e:1e:21:b3:d5:c2:78:9f:95:37:38:e0:33:6a:f5:26:9d:31:
60:df:ca:32:d5:6f:69:c2:b9:53:fa:1a:b7:9b:b5:1d:a7:92:
05:80:1e:e7:9b:5f:dc:b0:05:b2:a5:8c:ad:f1:94:7d:ad:7a:
f3:a2:69:05:7b:d0:a7:dd:1c:37:c9:1d:ea:ad:da:96:dc:76:
8c:9a:4c:48:70:7c:2f:fc:3c:36:84:92:81:65:5a:85:e1:4e:
6e:3d:2c:18:5a:95:a4:e0:e1:a8:da:47:68:0d:14:b9:b7:dd:
be:8e:86:a4:ec:19:57:92:d7:77:36:8e:8c:08:82:24:35:dc:
04:89:80:7e:5b:de:b9:d8:f7:1d:66:0b:bc:9e:e5:09:03:83:
03:db:ca:e1:f9:00:bc:f2:bd:27:a6:c0:1a:a8:9b:01:60:ae:
bb:32:3a:8f:84:69:df:26:61:8c:04:24:e9:28:49:65:2e:15:
c1:df:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:56 2026 by rpki-client