Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: FogTLvfE6ImhQpX+k2KkE0bBdN6fpbIvIEHyW/xUgV0=
Subject key identifier: 4D:2A:70:C6:89:9A:09:81:41:42:E8:03:8E:B9:03:86:B0:6C:39:A7
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 019D2696039C2089FC043C61DA09DF95F220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: ABkmLdxxIU6x9InqP/TtYdFlvRUwYX6j1w8EarFc/xw=)
2: ksaatSaKxA-y0WXvpifwAI5WkmY.roa (hash: FBqVdV7XXAfAEJJwTss1e7NjG8kEmROWtZrVwbWVdUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:03:9c:20:89:fc:04:3c:61:da:09:df:95:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=4d2a70c6899a09814142e8038eb90386b06c39a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:f4:a4:68:52:4f:70:b0:ad:dc:d0:c4:2c:
e9:ad:f1:a7:72:f8:1c:c0:e5:e3:9d:da:0d:ee:2f:
a8:0d:2b:50:47:c5:5b:65:26:c4:84:49:c4:2a:1e:
1c:a3:81:a8:42:7e:4c:eb:8f:4f:9e:1a:1b:79:55:
7a:c2:e2:9b:b6:22:ce:29:0f:0d:e9:30:a8:68:8b:
04:5d:70:f6:15:f6:b9:c4:20:0c:e5:54:ab:49:33:
08:df:f8:68:43:07:5b:6a:d5:dc:c4:52:83:00:03:
4a:b5:7c:83:2e:eb:52:64:be:86:72:ff:cf:db:83:
90:92:b3:89:c4:df:f7:93:02:fe:51:ef:12:6e:0c:
25:e1:fa:c8:bd:bf:2a:7a:b8:a2:9e:73:7f:1b:e5:
3c:e3:41:21:43:6d:84:8d:43:db:6e:2e:36:9c:f1:
5e:80:2a:5d:6f:c2:cf:81:43:c0:bd:4e:a6:30:42:
5c:32:b9:18:a9:f9:d3:45:2c:c9:7c:5c:36:61:76:
dd:0a:e4:79:99:f4:8b:75:25:18:2a:c3:cb:82:46:
a4:02:12:c1:a1:77:d5:c7:69:71:5a:c8:f3:d0:eb:
e0:d4:c1:17:f5:c2:01:9a:a1:7b:b7:02:6e:d3:74:
8e:1e:91:39:81:55:79:fe:a5:7c:b6:a2:12:62:06:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:70:C6:89:9A:09:81:41:42:E8:03:8E:B9:03:86:B0:6C:39:A7
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:10:c9:87:a1:00:ab:cf:95:a0:e2:e6:91:f9:97:09:bc:
95:d6:9f:cd:fb:f8:3c:7c:5b:85:10:16:66:94:85:dd:d2:6b:
b2:d7:92:93:5d:0c:15:13:3f:56:b3:d3:35:a2:46:ca:17:9e:
07:56:f6:3c:ac:8c:cb:11:48:6f:a8:f2:d3:3b:67:35:c0:75:
2b:e9:a1:b4:ac:52:46:42:0c:65:60:3a:e1:cb:eb:20:23:6a:
b2:3b:c2:29:96:a0:14:f8:03:48:9c:8e:5d:c3:21:9c:74:37:
26:ab:08:48:60:61:85:d0:ba:d0:9c:e0:d0:da:31:75:c3:33:
7a:1d:60:b7:f2:28:42:99:ca:91:ef:e8:4d:19:bc:f6:ec:a3:
f0:4a:16:c8:5b:0c:f9:dd:fc:f6:91:32:c9:e9:b0:24:1f:d6:
1c:1f:e7:eb:04:79:1b:6a:97:6f:14:74:19:a4:25:ce:76:5f:
96:ab:10:6d:52:9e:ff:f9:f6:1b:3a:ef:5d:fc:f7:02:87:85:
68:3d:62:01:dd:64:3c:59:4e:5a:25:cf:83:52:a3:f3:e7:5b:
74:e8:a8:84:7e:f8:db:1c:0d:f9:4a:7d:1b:50:c8:f0:12:37:
bb:e3:4b:25:3f:61:dc:8f:a5:e2:5e:71:b6:08:a2:4a:dc:c2:
68:91:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:08 2026 by rpki-client