Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: DxCAeb8MR1y7i4xNaac8be/r8fDgnP45FbZRSo6RYJo=
Subject key identifier: 6A:C2:E9:E3:D0:30:D9:62:5A:42:D8:92:A3:B4:45:8B:B3:41:38:67
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019D2628386F3B52B273A277A36A0CF005DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 027F
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: RWcPUgGbdqk5KjquGwloGiPF2wKuU4G38CVMaSYtJFE=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:38:6f:3b:52:b2:73:a2:77:a3:6a:0c:f0:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=6ac2e9e3d030d9625a42d892a3b4458bb3413867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4c:10:7f:83:69:29:3e:57:8e:c3:85:9a:4d:
a6:2f:69:18:e5:b7:f2:5f:36:fd:55:5e:07:bc:d1:
b8:5c:8e:5c:84:aa:0d:74:01:72:4d:e1:c0:ce:81:
aa:d8:8b:57:02:1d:4e:6e:f4:5f:05:78:6a:9c:68:
b6:b9:d7:7f:84:20:11:da:a4:80:a3:82:f1:c3:3a:
98:04:23:53:82:99:21:8c:29:25:bf:9c:b2:4f:7b:
83:2d:83:0f:e7:8a:ea:96:b0:cd:be:59:91:02:ec:
67:8d:0b:cc:ac:4a:94:c5:85:ef:2c:00:57:6a:ab:
8b:d2:91:31:c4:e6:9e:0d:39:e4:cf:c8:aa:45:9f:
a9:d1:b0:6f:73:16:15:4b:3b:04:89:03:08:9c:c1:
b2:6d:c9:83:06:ef:73:16:47:66:3c:da:ab:f5:20:
13:d5:02:ee:84:21:d8:2d:72:95:e9:94:53:05:86:
87:9a:12:f2:32:d9:fb:99:0d:df:1c:01:3d:52:dd:
16:3c:d4:11:4e:2b:08:48:8d:e8:03:bb:97:3e:4a:
3f:bd:8f:35:a6:74:2d:14:04:91:65:a5:1b:9f:08:
61:2f:69:cf:3f:c7:43:c2:80:1c:09:2b:b4:47:1b:
5d:99:13:e2:ec:40:f8:6d:23:60:28:8f:95:32:82:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:E9:E3:D0:30:D9:62:5A:42:D8:92:A3:B4:45:8B:B3:41:38:67
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:64:21:31:7e:cb:5c:7f:4c:3e:4b:43:f1:c2:3b:ee:fc:c7:
63:82:be:d0:3b:e6:92:5e:e1:7e:4d:61:68:06:9b:21:d4:f2:
8b:d0:d4:b6:be:a3:78:22:86:6e:eb:ae:94:68:b3:c1:68:d1:
25:2d:61:de:d0:1d:a9:22:63:59:f4:2f:64:cc:87:b7:68:c2:
58:48:1a:75:22:98:9a:64:12:15:00:42:72:bb:ca:c7:58:c9:
87:ca:37:78:1f:dc:a8:d9:19:00:3a:57:bb:c3:74:f8:a5:44:
fe:81:21:6f:fc:8b:43:cd:4b:4f:d6:9e:b8:db:1e:7a:df:6b:
86:b4:9f:ee:af:94:f5:0f:45:0a:9d:1a:17:59:e8:52:1a:ad:
71:ca:bf:5d:87:9a:ee:53:0e:6b:7c:79:e5:2f:73:b1:b2:ed:
54:89:57:2a:2f:69:dc:d4:4b:2c:5f:0f:81:84:17:8a:1a:47:
da:f7:df:3a:41:f5:4d:f0:a6:a5:52:65:4f:4d:cd:05:1c:c7:
44:f0:09:ad:57:39:08:b9:dd:43:a0:b7:4d:d7:0c:e5:61:1f:
7f:cc:1c:a3:ce:66:91:6f:9a:50:97:8a:16:9a:64:15:51:76:
d8:5c:88:9e:6f:e6:61:f7:1a:a7:9e:e9:2b:c3:09:48:28:5a:
d7:a0:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:53 2026 by rpki-client