Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: dhNxusUucrjEqZGxQXXfN7Arrx0h2xcbXbdWgczRhqE=
Subject key identifier: 84:0E:C9:A2:39:2F:40:F8:88:5A:CA:5F:6F:CE:08:1E:01:3D:64:4C
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 019D2583DA87D471AD389A869C3AC033F2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 089D
Signing time: Wed 25 Mar 2026 15:01:31 +0000
Manifest this update: Wed 25 Mar 2026 15:01:31 +0000
Manifest next update: Thu 26 Mar 2026 15:01:31 +0000
Files and hashes: 1: KUoewwdfRmOf_tbAsPp_9X-LAEQ.roa (hash: LGunqhuUXzXuULPWvo35kZbrmM/8QY9qb8IveKrkACU=)
2: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: uL6gNlpnB9bI6xAFnxYpWElyco+KteIfLwx2bJO906w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:da:87:d4:71:ad:38:9a:86:9c:3a:c0:33:f2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Mar 25 15:01:31 2026 GMT
Not After : Mar 26 15:01:31 2026 GMT
Subject: CN=840ec9a2392f40f8885aca5f6fce081e013d644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:2d:95:41:76:bc:a1:18:25:c6:01:af:9b:
ba:2f:1b:32:28:c6:3d:2a:e5:f0:9f:81:cd:00:4f:
43:e8:56:92:23:6a:b1:26:5f:da:dd:78:0c:c5:7e:
77:b2:0e:9e:44:10:e3:55:1a:f4:4e:96:d7:cf:48:
b1:31:2d:3b:2d:62:cf:a9:cd:d8:42:6a:91:7c:24:
a2:14:5c:e0:ab:e6:d6:e5:f7:9d:e4:81:dd:73:c1:
d3:22:50:24:1c:49:4a:c8:2a:6f:0e:95:66:e4:7d:
d8:47:93:f1:fc:87:2c:9b:05:fc:62:de:58:97:12:
d3:1d:81:39:6e:54:ca:d1:48:84:da:89:cf:d5:f1:
4f:bf:f4:a5:a0:6e:2a:08:f0:0c:ae:d0:fb:83:a6:
4c:da:90:32:d6:f9:31:40:62:55:52:d2:8e:54:b7:
a6:01:f7:08:30:7d:ab:be:69:d7:e5:eb:07:8a:72:
68:4a:58:e6:37:35:c8:0b:c3:7f:d4:14:52:ff:58:
07:18:f7:c4:76:c3:cc:4f:d0:75:ff:a8:79:ac:05:
b7:3f:73:38:e8:e9:f9:f4:df:6b:2a:af:be:6d:e3:
c9:78:0a:f0:d3:14:00:89:3a:4b:21:7b:16:fb:6a:
91:11:3f:83:c8:0e:f8:71:0b:ee:6e:f6:f8:ef:2f:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:C9:A2:39:2F:40:F8:88:5A:CA:5F:6F:CE:08:1E:01:3D:64:4C
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ad:06:48:29:7e:79:af:81:62:85:99:9b:a4:e9:9c:b6:3b:
6f:d0:d4:7d:4b:21:9f:8b:16:f5:4a:e2:cb:80:9a:30:91:7a:
e5:51:a9:f7:25:45:fe:a0:8b:88:3c:a7:17:b5:0a:b8:d1:d1:
2c:f2:00:b0:6d:7a:90:4b:a1:86:52:b4:33:39:29:ec:78:51:
70:ca:6a:13:42:b8:52:9a:95:1c:3c:10:a2:16:76:18:12:0b:
ff:cb:5f:45:2c:e7:32:7a:24:f1:22:17:f7:12:22:16:7a:1d:
0c:8a:d5:46:99:36:cc:e6:13:0d:8c:16:0a:0b:dd:5e:14:9a:
e5:16:4f:07:19:64:95:85:94:a0:62:91:ba:7d:55:4b:71:e1:
7f:9b:a0:40:8c:f4:4a:f1:1f:02:1c:1e:1c:e0:8d:67:f9:47:
b1:72:65:68:62:4d:20:ba:29:85:0a:f5:e6:f8:cd:4d:eb:e4:
f8:c8:02:35:f6:94:66:00:44:60:4b:d0:1a:e4:df:f4:12:ed:
58:68:24:96:c6:66:a5:e9:2f:82:f1:29:e9:c4:16:c7:c4:0c:
29:9c:0b:fc:3c:d6:bc:13:5f:96:51:08:28:4f:b7:f8:d9:64:
e5:35:ab:50:9a:f8:91:a4:dd:ac:87:e6:e8:31:83:3c:fe:68:
5c:49:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:54 2026 by rpki-client