Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: HSDsCD9dJiAOsOnnIaBLvTu4Q8KfIZDV5HVPh5viDRw=
Subject key identifier: C6:2F:39:D6:44:5B:91:3C:B5:D5:41:B8:C4:48:EF:0A:D3:40:DE:F1
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019D27DFF1A737CBA1E95D75648E31ACEE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1526
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: EGHziq51996ycYW9EyCfY4I93PSMLZMd8LKEkz6dFQw=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f1:a7:37:cb:a1:e9:5d:75:64:8e:31:ac:ee:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=c62f39d6445b913cb5d541b8c448ef0ad340def1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:f3:65:a7:cd:93:74:e8:7e:53:55:95:9d:
3e:6e:21:c3:87:38:0a:b1:14:43:11:89:43:5f:16:
98:75:7b:04:9f:07:5d:82:d5:ab:a9:ba:a3:bd:61:
e5:83:08:16:74:bf:d5:4b:11:fe:53:fa:09:c6:9b:
45:5c:57:af:3d:d4:18:bf:07:ee:38:5a:13:6d:07:
24:73:f9:d7:1f:e9:1e:eb:e6:8b:ee:be:52:bf:60:
87:b9:16:c8:cf:ad:9f:85:a4:de:95:a2:2f:94:4e:
dc:f3:5e:f9:27:52:4d:c0:8a:47:ec:33:95:bc:12:
ff:1a:3c:ff:e9:f8:fc:e2:fb:fa:4a:8a:b0:dc:eb:
cb:1b:0a:5a:06:31:14:df:29:12:ac:30:78:2c:85:
21:91:4a:9c:f3:ec:ae:1e:84:b3:5c:33:c8:83:e8:
1b:8a:e7:43:3a:9a:8c:d4:3e:17:c4:3d:b6:2d:1d:
0d:ad:02:2d:dd:17:f7:48:11:d9:a1:1e:cc:13:ec:
83:1c:48:ee:0c:cb:09:91:c2:72:8e:86:25:92:c3:
4c:29:e8:da:5e:2d:a1:03:84:ed:c6:82:34:99:10:
4c:ae:3f:30:01:17:57:97:7c:07:92:3a:7f:0e:d8:
87:02:89:00:12:28:64:a3:04:9d:24:0a:f9:ce:d8:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2F:39:D6:44:5B:91:3C:B5:D5:41:B8:C4:48:EF:0A:D3:40:DE:F1
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:58:3d:27:4d:c1:ad:3c:57:b3:cd:89:32:86:e9:72:1a:
95:f2:11:28:69:82:4e:a9:e5:68:01:f1:e4:fe:d1:bf:b5:ff:
55:3d:21:b4:f9:33:44:d7:28:c2:af:1e:2f:6d:a5:bd:2a:97:
55:30:b0:1c:7d:15:b4:47:0f:ca:04:6c:af:49:55:2e:17:6e:
fd:ac:e1:3c:4a:cc:8d:44:19:b0:a7:6d:95:eb:a1:e7:a5:6d:
75:05:d7:69:a3:20:b6:92:7c:1c:df:be:21:63:3c:29:cd:4f:
62:6c:af:fa:62:7c:c2:ee:7f:f8:6e:c2:de:d0:40:f1:95:b6:
a6:9e:d5:15:6f:4d:d6:e6:b9:bb:a7:01:d6:ae:43:2b:8a:26:
6a:91:bb:02:b9:6f:3c:4e:88:6e:a9:9f:3a:e2:97:cb:72:03:
96:78:b4:cf:7c:ad:41:76:6e:b2:ee:1f:69:77:ec:68:8d:a0:
d2:87:94:fa:59:6e:91:c7:89:49:f4:07:17:fe:f0:5b:bd:7c:
1d:c5:73:78:56:05:55:52:ae:e7:fd:48:ab:3d:f7:60:83:b0:
50:cf:7a:e5:0f:6a:ec:ee:ec:11:64:aa:d4:09:14:11:c7:bc:
c3:cc:67:6d:41:58:7a:c1:84:cf:c8:d2:a2:1a:20:e0:fe:4e:
16:05:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:09 2026 by rpki-client