Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
File: Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft (raw, json)
Hash identifier: rdsSQqcQ2/kEa75I8czz/e4ANIPmmSuPfK+nBjRxiFQ=
Subject key identifier: 72:28:82:E9:84:BD:FF:F8:73:E7:20:A5:BF:5D:45:77:B6:A2:C7:47
Authority key identifier: 43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A
Certificate issuer: /CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a
Certificate serial: 019D333F0BBCA7313912EBA1AB6FC96FB442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
Manifest number: 0114
Signing time: Sat 28 Mar 2026 07:01:02 +0000
Manifest this update: Sat 28 Mar 2026 07:01:02 +0000
Manifest next update: Sun 29 Mar 2026 07:01:02 +0000
Files and hashes: 1: Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl (hash: OXhQ3HFoLyUJO7XCd3UAjhemG8DNXIOjScNxh0qeMds=)
2: dSgf7Rj9MRB36B06KCH4XtB0J-E.roa (hash: 50BV1O3krfrNrPmzDGVH6bT0c5/ZuT9nFLY2UgtP04I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:0b:bc:a7:31:39:12:eb:a1:ab:6f:c9:6f:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a
Validity
Not Before: Mar 28 07:01:02 2026 GMT
Not After : Mar 29 07:01:02 2026 GMT
Subject: CN=722882e984bdfff873e720a5bf5d4577b6a2c747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:72:bf:0e:8d:98:98:43:7b:dc:9b:c1:c1:
3b:e1:10:ea:57:62:cf:33:5c:3a:4a:bf:a8:cd:95:
9e:77:31:66:a0:d2:1b:fc:55:61:be:ab:3f:da:23:
99:86:ed:44:e7:5f:9c:a8:07:ea:f0:67:ce:12:8d:
38:5b:aa:9b:4c:ca:8e:2b:53:1a:86:74:75:71:49:
54:23:1c:3e:6c:cd:39:5d:a9:71:2e:4f:27:1a:0b:
9e:0b:f2:7b:4e:97:d2:be:5a:67:6a:81:a2:1b:66:
db:e6:ec:bb:79:0a:a3:11:77:2a:2c:5a:10:bc:0c:
f9:cb:9f:12:12:be:e4:76:52:78:bf:1e:eb:c6:c0:
28:c1:df:5b:da:0f:83:58:d3:85:7f:07:0c:c9:aa:
4a:2c:bf:f9:c5:15:b9:7c:22:6b:3e:6c:17:03:57:
c6:c2:be:e6:8a:21:f7:6e:d6:d7:e1:d1:11:57:cf:
9e:b9:d6:64:b0:1b:2c:bf:7d:03:06:cc:03:b6:81:
b6:56:c8:62:9c:66:af:78:58:9a:e6:87:c7:4f:0b:
f3:93:57:c4:09:56:be:48:1c:3b:b8:55:b7:aa:4a:
47:98:60:50:e2:26:d7:f9:63:38:42:a5:96:f3:16:
9c:5e:38:d0:de:e8:a5:0a:8a:ce:8e:09:8e:f8:63:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:82:E9:84:BD:FF:F8:73:E7:20:A5:BF:5D:45:77:B6:A2:C7:47
X509v3 Authority Key Identifier:
keyid:43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:da:8e:cb:82:eb:b8:42:e2:6b:72:34:14:fb:33:2f:4b:ba:
c7:28:01:8a:12:65:00:fa:fd:9a:a7:7f:fc:07:2b:6e:c0:b5:
aa:62:d1:df:f6:f0:24:d6:75:f8:56:17:00:f1:e8:44:bb:cd:
b2:1a:9b:77:26:c5:41:70:06:62:be:7f:94:6a:62:1c:b2:a9:
d9:57:84:8b:87:ad:b0:a2:df:12:13:09:d3:60:f9:b1:06:15:
ff:d5:e3:cf:fd:56:b0:74:89:ea:05:56:e9:48:e1:7a:2f:3c:
9f:14:1c:31:a7:4d:56:a9:32:46:d2:6e:8a:30:b1:49:ea:1f:
ba:12:65:28:64:d2:10:3b:73:b0:30:61:24:07:b9:02:63:d7:
03:c7:52:fa:5d:54:02:bd:a6:17:89:1e:92:5c:13:b6:2c:7f:
bb:73:52:c6:03:c8:20:e7:92:43:63:83:51:2e:a6:6d:cb:fc:
cf:9a:91:03:26:bc:74:c8:15:dc:ad:e8:fb:e9:06:ab:92:ee:
d8:4b:dd:ff:8f:09:42:3d:d7:73:a4:62:62:6c:53:14:fc:0b:
4d:d0:47:c0:d3:8a:59:23:88:d9:54:44:23:55:94:41:d5:84:
46:7a:7a:67:a8:f1:42:4b:4a:b2:9e:ee:6d:8d:36:75:66:30:
73:ce:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:44 2026 by rpki-client