Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: zqbVq3fojN1rjc4TtxI+WLf0IqPtXM9oSQOyexq+0hc=
Subject key identifier: 82:9E:21:F6:13:DB:3B:58:E5:49:D2:98:64:0B:0A:16:CB:1F:11:02
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 019D34511FF782DE01BAC29E9B8DBE13BAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 12:00:24 +0000
Manifest this update: Sat 28 Mar 2026 12:00:24 +0000
Manifest next update: Sun 29 Mar 2026 12:00:24 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: LiRb2HseaN/Sk/A+CNuKk5wfdOTXtgJZCu9+8NLR4sA=)
2: VpxDxilNFo6QDK_norEdW_OneKc.roa (hash: eM+dyL5sYA7YmYI63S6dG6sSIhkE5TG0Z5qosr3fK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:1f:f7:82:de:01:ba:c2:9e:9b:8d:be:13:ba:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Mar 28 12:00:24 2026 GMT
Not After : Mar 29 12:00:24 2026 GMT
Subject: CN=829e21f613db3b58e549d298640b0a16cb1f1102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:ef:22:f4:3b:ca:0e:8d:ce:32:27:f6:f9:
c1:da:94:38:a6:5e:d5:8b:34:98:3d:69:35:10:7b:
9c:26:40:ab:dc:de:0d:2a:18:79:6f:85:66:99:47:
21:ab:b9:2e:b8:8f:7a:2f:69:c9:2f:66:11:a0:bd:
9e:0b:0c:ca:cf:f9:45:b2:88:0a:45:cb:0c:ab:83:
d2:a2:f9:80:85:24:e2:97:8a:79:89:c0:f4:0c:4c:
d2:54:5a:97:07:c5:f8:29:eb:5d:cd:79:c2:d6:67:
24:f2:71:aa:8e:08:d8:b0:0e:58:24:fb:ae:59:12:
f2:28:44:77:f0:03:7a:19:2d:94:d5:da:19:86:0c:
06:29:54:08:c8:b8:8f:44:e1:5b:47:00:be:51:b4:
62:88:8d:ca:f9:45:ff:59:d7:46:f7:00:ce:ad:0f:
65:70:a6:60:14:71:51:21:ea:c6:e2:e0:34:2a:8e:
d4:a4:02:5e:d6:ba:26:81:bb:3e:22:e7:44:be:1b:
48:97:09:52:c8:a7:23:54:c0:51:f6:ed:11:41:55:
0e:75:13:5a:9b:9b:30:aa:11:54:15:f5:bc:dc:28:
61:fc:b8:37:86:e2:1e:0f:20:52:e8:c7:79:74:c8:
5c:16:50:bf:53:8e:f2:d4:8b:be:6c:96:49:35:00:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:21:F6:13:DB:3B:58:E5:49:D2:98:64:0B:0A:16:CB:1F:11:02
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:4a:91:ab:6f:5e:83:44:52:5f:85:0f:ed:35:4a:6f:84:
5c:4d:2e:19:7e:cd:b5:cf:b7:91:34:7f:59:ae:c6:05:a5:06:
73:ce:e4:35:2b:cb:c0:ef:2a:bb:61:df:36:56:99:22:12:61:
b4:85:73:86:cd:bc:04:a4:60:a0:9a:f2:f1:b6:4b:86:28:be:
31:a4:7c:e9:04:02:bb:ec:be:8e:f2:39:54:0c:14:96:87:bc:
c9:57:c4:98:90:f6:14:16:9f:f7:81:2f:0d:3c:8a:55:16:fa:
33:58:8f:e1:96:f2:00:32:8e:5e:fc:8d:ee:6c:3c:78:66:13:
13:24:1f:01:2d:9c:72:63:0d:ba:7d:23:57:dc:f6:47:15:aa:
7d:30:8c:bf:91:52:ae:ab:7b:10:d7:6a:16:fe:38:01:ab:92:
90:c3:c5:ea:27:e6:7c:b6:dd:05:52:9e:78:de:ad:c9:ab:2b:
3e:58:61:b1:ba:40:3c:43:31:89:6a:43:b5:9f:8f:c5:e7:85:
b2:ad:38:7a:c2:c5:47:36:f9:1f:c5:d4:24:6f:ee:62:ad:e9:
e1:5a:44:cd:58:fb:b7:df:79:3d:73:36:11:80:30:4a:b8:a7:
21:8a:98:d5:92:67:90:12:9f:ce:19:94:c8:29:46:0d:58:02:
60:29:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:04 2026 by rpki-client