Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: Fi7OSiSNnB302sH6IgsdYivxQySQAsy6jpoAfwSSIdE=
Subject key identifier: ED:0C:33:7A:7E:74:29:CF:F3:92:5F:64:9F:91:A9:41:E6:54:EC:D0
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 019D2A72E5F5077581490EB965F43B0AD4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 12D2
Signing time: Thu 26 Mar 2026 14:01:06 +0000
Manifest this update: Thu 26 Mar 2026 14:01:06 +0000
Manifest next update: Fri 27 Mar 2026 14:01:06 +0000
Files and hashes: 1: HiATVU2zNI436oDNBvlSrS-IiIo.roa (hash: 65F3Wcciw7HngFzZ4YANeigLFAEt7ipdC99vCIfMg/k=)
2: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: fcs8MM+bVAjwQ+wKcWd7VleNCep62ecqZyW9dIarg3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e5:f5:07:75:81:49:0e:b9:65:f4:3b:0a:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Mar 26 14:01:06 2026 GMT
Not After : Mar 27 14:01:06 2026 GMT
Subject: CN=ed0c337a7e7429cff3925f649f91a941e654ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b3:f0:51:45:2d:96:dc:e8:9b:99:ce:04:5e:
d6:03:5d:c6:27:1f:51:f7:c0:21:2c:a9:bf:6d:12:
cc:7b:a5:44:07:d6:61:c5:c1:38:c9:02:61:a1:4a:
97:bb:55:2e:54:7e:92:70:cc:4c:4f:1e:4b:eb:06:
01:2b:d4:ca:11:ce:9e:38:2c:bb:8a:e5:3c:88:95:
37:a1:94:4b:d0:50:bf:96:04:e5:99:4b:ba:74:ed:
31:60:91:d0:60:18:a4:a1:72:f3:59:75:ec:ee:94:
b0:d0:74:1f:47:d3:70:67:92:d2:68:a4:75:0d:eb:
6e:56:ef:36:57:9a:d9:de:0d:8f:3e:e1:6a:59:3b:
47:fd:0c:44:b6:9a:cf:a9:ae:93:6e:18:a5:41:61:
a5:3f:11:60:ca:1c:5f:4a:e3:06:e3:01:d9:6d:2b:
66:d6:1c:51:42:29:69:c3:63:a3:eb:3d:29:95:22:
2f:04:07:cb:aa:ce:7e:ac:02:97:73:e7:98:a9:8b:
54:b3:65:2c:49:d8:86:d7:dd:52:38:02:fe:f5:b5:
eb:b6:d5:2c:d2:70:ac:1d:b6:cb:a8:cb:f6:f8:a8:
74:1e:94:c8:35:db:68:93:b0:f5:a9:a8:59:4e:cc:
de:cd:64:b0:f0:da:38:96:62:a2:0b:e2:7f:8d:22:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:33:7A:7E:74:29:CF:F3:92:5F:64:9F:91:A9:41:E6:54:EC:D0
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:18:d3:7a:87:f0:51:76:b6:d9:d9:70:8a:25:99:00:ed:
f0:9c:05:1a:63:b2:69:c4:cc:d7:b5:64:63:69:09:ad:4e:77:
b7:52:aa:62:d4:f3:f8:e6:51:a2:de:21:9f:63:57:b7:36:90:
9e:4c:c7:bf:b0:ed:53:53:09:ae:b2:e9:b2:e1:c1:5b:09:74:
b2:66:d9:93:13:eb:03:1d:6d:82:57:81:b6:f7:9c:51:bd:78:
3d:e3:f9:bf:a9:70:48:f9:59:a4:89:8f:18:6b:68:77:f4:c1:
e8:bf:79:22:c8:79:7d:1b:82:0e:cd:71:72:c4:85:ee:66:17:
25:1f:31:d7:d4:d2:c0:4f:c5:15:26:f9:4b:c0:f6:9b:51:2e:
d8:47:40:c9:1f:c3:f2:4c:62:56:71:e3:b5:4c:93:3d:29:bd:
e2:c4:05:33:e7:aa:12:84:3a:c2:5d:83:c1:aa:c8:1e:68:c4:
78:88:37:88:22:4d:ca:88:a0:19:0d:b7:70:3d:dc:1f:84:35:
87:0a:7b:01:de:da:0e:98:16:50:33:0b:02:db:c9:0b:4c:9a:
89:af:b6:95:93:2b:26:96:65:94:6a:31:a6:c7:bf:97:4c:d4:
95:54:fa:a9:ad:0f:3d:97:e4:9c:02:e9:75:08:9e:cd:21:42:
d8:bd:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:58 2026 by rpki-client