Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: NZylzIKP97IPhRR/NydXWB5qrsQBfLIETSLv/MaxY5Q=
Subject key identifier: EA:D8:68:8D:03:60:FE:A5:0C:2C:08:CD:B6:E7:B2:E6:72:E9:9F:F1
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 019D26CCB408C2BEC993D270009EA8F7C840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 050E
Signing time: Wed 25 Mar 2026 21:00:42 +0000
Manifest this update: Wed 25 Mar 2026 21:00:42 +0000
Manifest next update: Thu 26 Mar 2026 21:00:42 +0000
Files and hashes: 1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: TueB9bPaQTd66mDI//ClW90fNcEGMbTX7Hd4vJA0Sgo=)
3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b4:08:c2:be:c9:93:d2:70:00:9e:a8:f7:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: Mar 25 21:00:42 2026 GMT
Not After : Mar 26 21:00:42 2026 GMT
Subject: CN=ead8688d0360fea50c2c08cdb6e7b2e672e99ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:e1:d1:3a:89:5c:fc:1b:a7:e1:6c:76:53:
b8:b1:4b:e5:7b:b1:80:34:72:4e:c4:d6:4a:26:ff:
08:ea:37:84:8b:7a:18:00:93:0b:f5:26:55:ef:74:
12:73:20:74:7b:04:2e:7e:27:c4:3e:f5:ca:2e:ae:
e9:43:16:64:3e:af:7c:28:77:cf:97:9b:9f:7b:2a:
c9:a3:ac:fb:ba:98:b8:98:f7:c9:5f:2f:0e:a0:4a:
0b:2a:88:29:a5:3a:09:6e:98:05:f8:f6:f0:3c:95:
43:f6:f7:d7:6f:74:5c:e5:29:98:e2:a8:83:b4:ba:
2f:e7:2e:13:cd:6a:a6:cc:ed:02:c9:d1:6a:ad:cd:
d8:3c:44:dd:69:a3:a1:59:72:e8:78:d5:85:fb:38:
91:9c:00:ad:63:e9:ee:a8:ce:9d:e4:13:10:28:61:
ef:42:a0:b9:4e:8c:5c:92:a4:52:8b:e9:eb:bc:01:
90:27:9f:06:34:84:77:43:3c:80:6e:96:0c:1a:a4:
a0:ca:93:a9:8d:ea:1d:92:c1:71:f0:e8:78:19:66:
2b:b5:bb:7d:f9:64:f3:8f:9a:0a:1a:94:56:60:9e:
8f:6a:eb:d5:df:f5:ba:fd:bd:aa:4c:3e:6b:61:75:
68:36:eb:ee:83:63:23:6b:5b:99:0c:5e:9f:d3:a5:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:68:8D:03:60:FE:A5:0C:2C:08:CD:B6:E7:B2:E6:72:E9:9F:F1
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:fa:f1:f3:af:5e:47:3d:30:b4:13:5f:2c:a1:0f:99:24:
d4:96:8a:8f:52:fd:17:dd:17:e5:95:68:38:09:59:dd:46:7f:
19:01:44:f4:52:c1:c0:93:b4:0d:7b:f9:76:62:df:fd:8c:09:
c3:57:3a:46:ed:81:a9:77:7a:15:10:37:08:e6:29:d8:ec:52:
06:77:3d:f8:87:18:e5:61:47:5b:35:1b:bf:95:7d:c9:1c:14:
2d:6b:f9:5a:0d:e7:2f:b6:dd:2a:39:c9:43:68:01:30:6d:ad:
2a:3d:0e:84:12:22:f2:e5:4a:c1:2d:35:7d:60:f5:fc:74:15:
15:ce:09:61:a4:d6:03:ec:22:1d:37:8a:eb:1e:b2:fa:78:27:
be:7f:9b:ee:f1:5e:25:0d:92:4b:2b:1c:df:b8:cd:b1:47:26:
ef:ef:6e:ed:c2:c5:da:d3:2f:1c:95:9c:cd:c0:9e:b2:85:fd:
4e:5f:2b:b9:ec:b0:ae:3d:77:09:5f:a5:7d:9d:47:30:b9:e4:
5f:b9:78:34:5f:4c:a3:b1:ba:82:68:4d:65:99:49:49:b2:9a:
ba:fd:a5:c1:12:46:20:50:df:1a:47:26:68:d0:97:21:a2:db:
c4:2c:fb:2e:38:32:8a:fe:03:ec:0f:f4:d5:0a:6f:c3:a8:bc:
a2:97:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:14 2026 by rpki-client