Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: LYb4b7Kp1QsO6QC8ac5UHEFib+g/bCnx+O8NjROgnaQ=
Subject key identifier: DD:6C:1B:09:F3:A0:5B:38:9F:BB:5F:DD:B6:D7:68:29:59:B6:30:F8
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019E20C8A3B6A020502E120F1CA7B2842E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 0338
Signing time: Wed 13 May 2026 10:01:20 +0000
Manifest this update: Wed 13 May 2026 10:01:20 +0000
Manifest next update: Thu 14 May 2026 10:01:20 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: +rffLo3W1qlkzLL4Ew/o6y5PvVhAoMbNjzR6zcLiFPI=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:a3:b6:a0:20:50:2e:12:0f:1c:a7:b2:84:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: May 13 10:01:20 2026 GMT
Not After : May 14 10:01:20 2026 GMT
Subject: CN=dd6c1b09f3a05b389fbb5fddb6d7682959b630f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:76:27:af:89:c7:c6:12:c9:c0:a5:d0:e0:
0c:cb:63:08:7e:b0:17:49:ea:b3:ca:0b:e3:db:a0:
70:2a:5a:3e:af:b2:c5:9a:2e:d0:a8:ce:36:0e:28:
20:e5:0f:fb:2a:e1:6a:3f:a6:02:5a:b3:43:c7:99:
32:84:b3:2d:93:a2:4d:a8:ac:3c:02:1b:f3:90:8c:
6e:55:1a:44:10:47:65:91:c8:0f:7e:b5:9e:93:31:
12:ca:0d:7b:ec:a2:a6:c3:3a:c3:8b:2c:f4:1a:1b:
be:1d:01:36:ae:da:3c:ce:57:97:e8:fd:47:81:a1:
44:c3:a4:a5:2c:70:38:9f:d0:5e:fd:a7:a2:2a:a0:
8c:96:51:24:24:22:53:1f:a2:04:42:94:21:3e:4e:
14:5a:43:cd:16:e7:48:e8:23:79:2a:8e:db:6d:17:
20:9a:78:81:9f:2d:d6:2a:f5:13:ef:41:3b:dc:dd:
fa:84:ce:28:fc:93:15:8e:00:98:0b:bf:35:5e:5f:
1c:da:07:b6:4a:44:77:ad:63:76:c6:a0:08:f0:6f:
d1:22:39:4d:22:b0:a5:19:92:7f:39:7f:ed:84:36:
d5:94:8e:43:9c:de:14:53:3d:fb:1f:6f:cd:e8:c9:
d9:33:e5:eb:26:5a:76:d8:b8:53:68:7d:06:31:3e:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:1B:09:F3:A0:5B:38:9F:BB:5F:DD:B6:D7:68:29:59:B6:30:F8
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:48:32:69:af:c1:33:c2:00:31:29:23:24:55:3e:9e:8b:a0:
5d:79:8d:ae:29:5b:c8:c3:64:d7:ab:8e:0f:37:21:cc:b2:82:
e1:d3:fe:a5:5c:d1:3e:dd:40:f8:04:af:5e:31:29:22:32:ce:
5f:57:cf:94:f5:d1:54:90:0c:4e:9d:9a:a5:c7:51:c2:f2:92:
db:9d:b2:df:f4:1d:7f:30:4f:ee:7b:5c:74:b4:bb:e7:a0:b5:
60:92:d4:78:5e:04:fd:2e:e3:5d:c2:44:6a:df:12:1d:10:c5:
8d:a3:4f:8f:04:7f:d3:a0:8e:bd:34:ec:48:c9:43:e3:67:07:
81:e2:26:a9:d7:56:4c:b3:75:e0:bd:6c:d1:31:e0:b3:da:00:
57:62:b1:36:ba:25:29:42:5f:8f:eb:de:f2:7d:e8:ef:e5:ae:
d5:9f:75:2e:a2:26:1b:cb:28:82:08:a2:da:67:75:eb:3a:a6:
97:9d:ac:76:c5:7e:8c:b6:60:38:4c:07:6d:63:20:4e:28:e3:
ba:e2:97:47:46:81:7b:1d:81:a9:cd:05:1d:4c:39:84:34:c7:
be:4b:a3:59:a7:90:c7:79:44:67:17:45:2a:ea:ee:82:4f:c8:
ce:fc:62:71:70:e0:a5:e5:b5:33:1d:7c:34:ac:25:4d:c3:4b:
00:2d:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:26 2026 by rpki-client