Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: afRbFrazJ2Xp3hFhGFW0OXAhnmdk4u35ZEcGse4N9+o=
Subject key identifier: E3:B7:B4:98:8F:91:60:59:DF:50:AE:EC:71:68:A2:E0:61:DB:BB:C2
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 019D25F13285EE5E13778580E193F28263EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 0A38
Signing time: Wed 25 Mar 2026 17:00:57 +0000
Manifest this update: Wed 25 Mar 2026 17:00:57 +0000
Manifest next update: Thu 26 Mar 2026 17:00:57 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: WZ1yKfh66kzU3ySLMlVgiJtlDBvrF/v7dBmChBvUMFk=)
2: BDsUG_qKwMK-zw5cb5re_OOs500.roa (hash: MK43bq66jUMUM5Ahm8KsScwtAMlZLSz7Ozov3YQzRIE=)
3: tB4j1pvJwB8N2xtUjgH-EaS2pKM.roa (hash: lQm30cKDdInn0Sofx9UuVyNM+EwoftWy+uBDomRAiDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:32:85:ee:5e:13:77:85:80:e1:93:f2:82:63:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Mar 25 17:00:57 2026 GMT
Not After : Mar 26 17:00:57 2026 GMT
Subject: CN=e3b7b4988f916059df50aeec7168a2e061dbbbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:09:42:62:69:8e:b1:3b:54:a6:04:1b:29:
bc:b2:53:ca:02:8a:dc:78:de:af:04:5e:72:ce:38:
b0:1f:41:86:e1:d0:7b:38:2b:12:79:6b:88:b7:f4:
d7:08:45:c4:8f:6b:9c:f0:8c:ba:18:04:7f:1e:75:
e6:a9:65:76:da:71:b9:8b:91:45:c2:64:09:46:d8:
f0:31:22:ff:20:d2:0e:78:0e:16:60:d0:7c:fc:09:
85:af:7c:01:3d:8e:3a:09:6e:fd:6d:ac:c1:5d:60:
e2:f4:d5:45:9d:8f:e1:ab:1c:88:67:89:58:01:8b:
52:c1:34:35:de:65:cc:82:e2:c6:f2:c1:a1:53:30:
63:dd:f6:9c:24:5e:bf:e4:31:1e:7d:54:e2:bc:7e:
f1:73:2c:ce:02:73:40:1d:7c:5c:1b:da:db:a2:b1:
32:e6:b2:34:fd:0a:56:6f:47:e2:2e:04:86:2a:e1:
88:66:67:88:67:65:f6:26:9a:ac:92:d6:40:31:70:
9b:79:3b:85:a5:91:49:cd:d0:06:06:5a:bd:a2:03:
91:1c:cf:a9:70:87:dd:fd:9b:ee:0e:5c:28:b6:6a:
cf:8c:72:35:55:79:c7:50:0c:7a:ed:c9:4e:70:2c:
08:e1:37:37:07:63:62:e2:10:80:84:b1:14:3f:58:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:B4:98:8F:91:60:59:DF:50:AE:EC:71:68:A2:E0:61:DB:BB:C2
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:5d:e7:1e:79:85:9c:4d:00:f8:83:4c:12:06:da:ff:b8:b7:
6e:f5:c3:5e:70:50:1f:04:61:01:15:90:32:0d:40:1c:0b:34:
86:e1:87:57:26:54:41:4a:c5:bb:b7:a2:4c:74:23:32:07:a6:
a5:3b:c2:95:04:e5:9a:6d:15:a6:f4:6a:95:42:2e:c9:ce:a3:
de:e6:30:02:f4:70:2f:2f:28:17:c0:e8:ca:07:da:50:a1:31:
b9:7e:ff:46:f6:c9:b1:3d:8c:1e:5c:4b:5d:c2:0c:06:b1:74:
8d:e2:de:fa:ac:8b:f0:52:b5:be:f1:b0:5e:ce:76:7e:1e:5d:
f9:b4:83:83:7f:4c:b5:ec:80:70:38:37:b1:56:63:28:6e:d6:
73:76:f5:16:d8:da:a7:6b:50:c4:71:43:8a:cd:d6:cd:82:06:
88:d1:50:d8:06:02:a1:37:4b:e1:3c:a7:bb:5f:29:31:fc:52:
2a:e1:58:55:30:cb:12:bc:7a:62:86:13:3c:75:8a:6e:40:4e:
c0:5a:31:13:3c:15:3b:86:de:e2:42:6e:f0:3b:12:55:a9:bd:
1a:02:5e:28:81:0b:b2:de:52:cc:2b:e2:4e:7c:16:3d:2a:56:
90:07:ae:d8:af:0c:11:cd:1a:c1:70:99:5d:24:52:2a:13:d7:
6f:97:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:20 2026 by rpki-client