Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: U+zg5x2ZNmBBFlNkR5QsjQUU3JCcpt+PClJtWXdkGEQ=
Subject key identifier: 25:DB:0E:0A:76:A5:E2:F7:60:C9:40:DD:5F:C1:5F:ED:4F:BD:10:AF
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019D27A89E58376B63CF3DF8F8F43443E7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0327
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: MoQj1oSXrfsyz0JTOCIBafZPL9sZUogDjZwQdmxrXck=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9e:58:37:6b:63:cf:3d:f8:f8:f4:34:43:e7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=25db0e0a76a5e2f760c940dd5fc15fed4fbd10af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:34:5f:d0:cc:76:09:4c:3b:7b:eb:e3:2e:
29:59:37:8d:55:0a:0a:7d:e3:8f:97:0d:cb:64:e2:
51:5c:94:87:f3:92:e1:9e:24:d4:76:f3:0b:10:8e:
03:0e:05:4c:7c:dc:15:3e:7a:40:93:57:45:66:af:
ce:85:f0:89:10:ba:fe:b6:35:50:be:d6:bb:d0:fb:
88:a3:6d:5c:91:5d:53:38:a2:2a:42:fa:e0:fc:67:
23:0b:22:cd:78:c6:52:fc:6a:13:6c:7a:cd:13:f1:
6c:3f:ff:eb:ea:1a:a0:e0:06:88:ae:7e:9e:3c:41:
18:f6:49:1b:9c:70:c4:bf:ea:8e:61:62:dd:37:4d:
fb:8c:4d:79:0a:39:c7:a5:6b:b3:14:f8:38:9d:66:
0a:a5:6a:a5:69:13:81:e7:55:b6:24:ab:2a:51:2f:
e2:fc:43:a5:8e:05:c2:ca:84:f0:91:d0:28:b1:55:
94:01:31:17:e4:6a:0b:a4:3c:15:5e:30:4e:22:e9:
d5:57:8c:35:d1:f1:3e:48:95:45:6a:db:d8:4a:95:
d7:a4:29:3f:31:ef:bb:7e:f6:e6:b0:da:20:20:c4:
4b:44:10:b9:73:37:c6:55:b8:27:e2:3a:18:76:7b:
2e:58:cc:88:86:c4:7f:13:26:3b:70:d2:e6:dd:fd:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:0E:0A:76:A5:E2:F7:60:C9:40:DD:5F:C1:5F:ED:4F:BD:10:AF
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:ca:40:22:53:9e:87:f0:a8:df:15:5d:9f:54:fb:05:d9:
9e:93:f6:3f:50:c9:40:bf:aa:09:a1:0a:36:64:c1:5b:66:36:
ce:10:0b:2f:8d:d8:42:7e:ae:bb:bb:50:76:13:15:94:19:62:
a6:dc:b1:86:9d:51:25:8d:84:e2:ed:e8:fd:51:54:26:fe:a3:
3e:60:94:9a:f7:78:91:42:b7:88:29:84:46:e8:af:dd:59:04:
2a:25:9b:12:5e:06:d3:1d:9f:00:97:ae:62:cf:f9:1c:2d:06:
fa:e3:38:32:c3:2f:3a:b0:b7:c8:7d:37:99:15:6b:cc:9b:56:
a0:4e:55:32:c4:61:03:d5:7b:47:08:84:73:1a:60:cc:a0:cf:
e1:df:e1:7e:e6:e5:55:9f:62:f8:50:c1:21:90:48:3d:81:67:
b7:2a:f8:ca:3c:f2:85:46:d1:5d:bd:f7:08:c6:2f:58:2b:10:
43:27:96:8c:ff:9c:3e:13:04:5a:b5:5f:ff:a8:79:38:13:63:
7f:b7:06:ea:33:39:d2:67:25:a9:6d:84:5a:a5:05:ca:83:c6:
d3:fe:ef:13:c1:e8:0b:6d:08:5b:65:dc:7a:45:96:4b:98:62:
32:69:82:32:cc:0b:53:77:39:c7:95:0e:31:f4:0b:6f:99:3c:
98:6a:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:21 2026 by rpki-client