Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: 3QAxtL14Hj9EpUIAR4QkP4JnZT9dn8U5I7YDPcmjYL4=
Subject key identifier: CE:EC:0F:9B:33:F2:A4:E5:67:7F:AE:CF:65:83:6D:56:35:E3:29:3E
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019D333E70E916FF6E662C65E06D6ABDC634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0581
Signing time: Sat 28 Mar 2026 07:00:23 +0000
Manifest this update: Sat 28 Mar 2026 07:00:23 +0000
Manifest next update: Sun 29 Mar 2026 07:00:23 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: FRusadGqShBxkpoL2paCp-tYl9I.roa (hash: u0M4J6xRL9yocHk0JRl+kCiGzN5rm3Nwf2AuG18JDLc=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: PIsben8OOvP6huEDADxlaA2IY/qrZkcThZlRbr3d1YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:70:e9:16:ff:6e:66:2c:65:e0:6d:6a:bd:c6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Mar 28 07:00:23 2026 GMT
Not After : Mar 29 07:00:23 2026 GMT
Subject: CN=ceec0f9b33f2a4e5677faecf65836d5635e3293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:75:a5:0c:97:9a:c8:16:28:0f:98:c8:9c:
ba:4d:fd:81:3f:9b:46:03:19:a0:79:55:ae:dd:5d:
29:be:ce:a9:79:27:85:df:9e:d6:db:17:4e:d8:fe:
4f:e2:16:d1:c5:fb:ab:65:ba:12:99:4a:2e:d1:57:
19:05:43:fe:67:c9:90:68:6f:31:eb:ec:29:fb:b5:
b7:85:bf:61:8f:44:d4:d5:c7:58:85:47:5e:02:1b:
33:d2:d1:fc:67:68:27:f3:2a:9f:a3:9e:08:d5:36:
0b:b8:8c:fb:bf:83:a9:d9:49:21:77:67:88:4d:ef:
0e:ce:0a:09:56:a5:1e:41:78:1c:45:6d:02:5b:dc:
66:91:69:ac:80:d4:5c:11:62:7e:1b:ad:94:d5:66:
8c:9d:9a:d2:c9:e9:cf:ab:b2:05:89:6c:3d:bc:45:
1a:42:cc:d4:91:03:67:ca:f3:ae:e9:6d:0a:e1:9b:
3a:22:2b:08:20:a4:03:33:d6:de:d3:e5:f7:71:b1:
c9:df:e8:3f:e5:29:2a:d8:b7:a9:49:c9:38:d2:1b:
1d:0f:7f:4e:e7:51:7e:fe:4e:17:d2:3d:a1:3c:ff:
d1:03:43:9e:05:3a:38:77:2e:eb:ca:97:d3:29:e1:
57:22:85:06:b3:e9:0a:1d:55:bf:cb:60:76:fa:7e:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:0F:9B:33:F2:A4:E5:67:7F:AE:CF:65:83:6D:56:35:E3:29:3E
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f3:25:9c:c7:f5:23:ab:5a:3a:7a:69:4f:82:36:7f:3b:02:
20:61:88:47:cb:f1:2a:46:a6:af:17:0c:25:d7:42:58:c0:2e:
fb:62:45:2f:f9:6e:a8:65:16:89:d9:50:e0:2a:b4:ba:be:74:
70:27:d6:91:86:3e:85:64:39:42:9b:00:53:b6:5d:8a:05:47:
c7:eb:77:24:e4:d3:c8:28:9e:29:fb:83:09:ad:57:a4:ab:c4:
0a:1d:05:55:43:10:c2:75:58:b7:41:95:ef:c0:c6:13:51:9a:
e4:91:9f:6f:7e:42:ec:8f:57:29:3c:eb:be:bd:0d:de:d5:62:
9e:f1:c1:7f:07:57:3a:57:f5:60:df:ae:49:5d:a2:ba:e7:b9:
2d:41:a6:9a:3a:49:97:55:8d:ce:c4:be:24:1a:4e:03:0f:a6:
86:8f:50:da:82:9f:fd:e5:f1:38:70:b8:37:27:3d:2d:8e:12:
00:00:71:f2:c6:ee:a2:90:ef:66:2e:f9:7b:50:f5:21:8f:17:
75:25:2c:cb:5c:96:80:e2:00:22:10:2e:89:c9:b2:ae:74:3f:
75:cb:5f:f6:92:43:8c:9b:df:71:d6:3f:dc:0e:b7:3b:21:ff:
3e:78:d5:ff:ff:c0:4e:06:f5:da:44:b2:a6:84:8f:1c:ab:85:
73:fb:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:07 2026 by rpki-client