Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: kHn4I/iejtLtswIN+D7rd7tdlvMus5wGd2htxs91J+U=
Subject key identifier: FF:B9:CA:F5:4E:11:BA:D5:B5:10:EC:C5:C3:EC:0E:90:E2:61:66:CB
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019D29297B9EE263A32D78DF79630D9AF1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 04EC
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: laJuYRsxaE1r5GOKqounNB+fTZpcdkp4uP+hL/BolLs=)
2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7b:9e:e2:63:a3:2d:78:df:79:63:0d:9a:f1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=ffb9caf54e11bad5b510ecc5c3ec0e90e26166cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:65:6a:31:44:47:24:ae:0a:82:a5:37:78:
66:79:14:c1:73:ea:8b:9e:e9:62:9a:13:d2:0e:e2:
bd:3c:81:a3:b9:57:02:0f:9e:64:16:5e:8e:7b:b3:
50:1d:5f:62:3c:f1:47:f8:87:68:9b:da:a9:e1:64:
44:f5:91:49:dd:4c:60:5a:8e:6f:27:cc:80:a1:3e:
47:d8:07:ba:2e:05:75:95:c8:2f:9b:4a:90:9a:1d:
f9:03:6d:a0:b5:08:17:f1:cb:e3:e7:ba:ef:d5:bc:
db:ec:45:c8:9a:ce:b1:46:b6:48:78:f6:98:c2:4c:
49:0c:95:90:be:0e:37:2f:66:11:9e:8a:a9:25:1c:
c7:14:a4:0d:5a:7b:e3:6a:77:9f:6e:ca:2f:05:39:
50:79:86:e0:d7:0f:b6:b0:5d:26:60:a9:3f:df:f0:
72:3b:99:53:00:61:ac:55:56:6c:26:bc:64:0a:13:
9d:fb:7f:f4:b6:c2:8c:4e:74:54:de:29:ea:cd:8f:
25:d3:4f:ed:26:49:9b:ea:46:b4:2f:03:3c:4e:2b:
99:64:d3:1c:c0:32:f7:39:d4:0c:ed:2f:d2:a6:c2:
8e:f5:34:d7:6b:cc:7e:81:7c:65:ad:ba:16:66:b9:
5b:b1:2a:2c:92:63:c0:55:84:9b:fb:a9:1a:3f:ba:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:CA:F5:4E:11:BA:D5:B5:10:EC:C5:C3:EC:0E:90:E2:61:66:CB
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1d:5f:63:4e:08:43:80:e1:55:60:dc:9e:96:3d:f1:21:10:
8d:ab:e5:ca:62:68:e9:e6:ef:da:32:d7:bb:a1:eb:be:6b:9f:
2b:1c:35:15:37:59:1f:de:b1:fd:66:7c:db:c0:0a:dd:c2:be:
07:33:f0:d0:6e:89:15:8e:4d:9e:65:cd:80:be:93:7b:18:d7:
70:b6:3f:a1:e9:2a:70:31:27:61:fe:27:b8:0f:d5:31:8a:d7:
ec:93:87:50:76:27:e4:67:1a:8d:a0:fc:69:e6:50:0a:be:20:
6f:8d:6c:79:6d:ca:fb:eb:e1:5f:7d:c8:31:ed:24:35:b9:8f:
77:17:2e:ba:27:f6:f8:71:2b:08:f7:a8:d6:73:85:d5:2b:86:
ca:4a:98:18:1b:81:6f:19:c7:de:a9:98:ea:49:d4:3c:ad:f2:
38:84:ec:e0:d9:a3:a3:18:90:5a:9d:0a:3f:e7:25:d7:89:5e:
d1:1e:fb:18:30:e9:d5:be:0b:7d:23:59:a0:01:4f:c8:9f:0a:
5b:b0:26:89:06:5b:43:d5:f8:e2:4a:eb:83:16:26:0a:bf:f2:
14:90:2f:e8:b6:f9:94:3f:de:e6:7a:c4:d4:3f:16:12:14:82:
4e:02:78:9f:6e:ec:9b:73:05:82:d2:cf:dc:39:64:72:e2:22:
4e:3d:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:46 2026 by rpki-client