Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: OkG9If9hocy3Exmza8PKc46xq0YcdvE444rTZcRv7OQ=
Subject key identifier: D5:46:42:6A:1A:1F:39:77:0C:35:83:C1:D5:56:F1:2C:29:6A:FA:AA
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 019D333EF8C971619361F1808D5FCD6FCE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 07:00:58 +0000
Manifest this update: Sat 28 Mar 2026 07:00:58 +0000
Manifest next update: Sun 29 Mar 2026 07:00:58 +0000
Files and hashes: 1: 1OlpkuQpAVvITqIzbJCzHhbZuaY.roa (hash: 3R+s0povuTwLbXStSvGlYnJbOVvmE0QK+nYMWxPdz1U=)
2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: oBHMieubDxSe15DG9N/uLczoN/Ta9iDpa7Als/O+uYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:f8:c9:71:61:93:61:f1:80:8d:5f:cd:6f:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Mar 28 07:00:58 2026 GMT
Not After : Mar 29 07:00:58 2026 GMT
Subject: CN=d546426a1a1f39770c3583c1d556f12c296afaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4c:db:34:f6:b6:79:4a:57:5b:eb:c6:79:d0:
f0:df:4a:2b:03:7e:a0:db:c3:d1:2b:76:eb:6d:77:
ba:be:9b:e0:86:14:b3:0e:c2:d9:60:c8:10:8f:63:
d5:a2:06:e1:bb:11:1f:eb:d5:89:cc:a3:40:44:2b:
35:18:d4:df:c8:2a:d5:eb:5f:d5:bc:d3:e3:09:f1:
0d:b7:36:29:8a:29:d5:64:71:1c:60:c5:d3:95:84:
b1:25:b9:c1:5d:01:b8:92:3a:2f:d3:9c:10:93:43:
b4:7d:9b:70:5b:db:eb:a6:d2:a2:ba:df:ba:35:d0:
11:a1:63:9e:54:a8:64:62:9c:2e:48:05:e3:0e:9f:
4f:c9:3f:b0:fc:22:56:ef:f1:90:c4:16:19:a8:b1:
d4:f6:30:c5:76:46:9e:bd:08:be:c4:88:6f:5f:4e:
2b:92:c9:fb:a9:e9:81:b3:a8:25:0e:5f:b7:47:5a:
64:f1:57:67:a2:04:58:03:56:0d:6e:1d:1d:01:cb:
c0:4c:0a:e9:e1:be:dd:0c:11:14:47:e4:f5:f5:c0:
e1:16:45:0a:93:d8:2d:2a:c5:81:2a:65:eb:f9:b5:
5b:4c:06:65:63:13:a0:18:e9:27:f6:03:95:71:26:
ec:52:1f:e1:18:fc:6e:aa:7a:cf:9a:01:c4:0d:1e:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:42:6A:1A:1F:39:77:0C:35:83:C1:D5:56:F1:2C:29:6A:FA:AA
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f9:51:37:ca:74:a5:ff:cb:b8:78:fe:41:78:b1:d8:62:fe:
4b:b5:60:89:8b:0a:2f:3e:ba:70:c2:9c:8f:dc:9a:6c:ad:4b:
01:3f:0c:82:e4:91:08:0c:87:63:34:ec:a1:8e:b0:2a:d5:f8:
19:57:7d:fa:67:49:94:4f:8e:d2:fd:30:bf:d4:6f:ae:f9:84:
24:d6:d1:f6:5e:f9:f7:6c:eb:45:74:9c:80:43:3f:f0:79:04:
29:15:b1:af:2d:84:7e:97:19:9d:75:b2:49:63:6c:1d:83:3b:
bc:0f:13:30:2a:21:f9:c4:ac:32:47:f4:29:95:a6:9b:6d:d1:
bb:7d:12:88:c3:a9:f1:3a:b3:5f:e7:95:4e:5c:49:6c:7a:6a:
b7:e4:b3:70:68:38:7c:2e:ea:d4:2d:43:eb:9b:69:87:37:0a:
ce:e0:13:96:85:65:c2:c0:ed:65:0d:9d:58:86:50:c5:48:d4:
77:74:00:f7:1c:a7:30:db:40:36:8e:08:93:09:e3:bf:a6:b1:
1a:6c:d5:2e:5a:e3:6f:62:2e:0b:4f:e3:5e:60:23:94:30:93:
c3:76:74:50:5d:d6:e9:c6:15:d4:fd:e1:a5:44:32:e7:e3:2f:
9b:12:2e:83:a8:42:8d:09:6f:9c:97:9c:2a:a0:38:4c:9a:30:
db:15:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:11 2026 by rpki-client