Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: HsfdFNhrAX/qywUPYxBbIDIR3tJjBErMhK9vmshtEh4=
Subject key identifier: 29:D1:40:E6:D3:FC:97:AC:FF:8D:49:A1:85:C2:B0:E9:51:10:AD:DD
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019D2703AC74EC10FC940E4D0DDB1E036668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 119D
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: BJEVa_aX9GRfgBGuldqxrBW_ggU.roa (hash: yxFSDsFQ1W994H/MWEZPZMlBkPI/Yd+y9utpq4Nr9O8=)
2: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: 3ZvU9JKqqZozwa0O/6njq9YpULu9SyR5uIhwoWCBDAs=)
3: aZLmDNfDNQfMwJ6001JcSrReXVo.roa (hash: q9+55aFzyoEUFmJ9wbybuO0labtSZYAJl9v8e7OVPio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ac:74:ec:10:fc:94:0e:4d:0d:db:1e:03:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=29d140e6d3fc97acff8d49a185c2b0e95110addd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:87:22:66:bd:0e:06:fb:26:94:a7:d0:7c:
b3:73:3f:1b:0e:19:c4:1a:ad:f3:4e:95:a0:9c:ad:
c2:f2:f1:62:43:90:a1:e8:84:46:ae:ab:9d:60:a1:
ee:18:09:05:2b:e3:86:5d:12:f2:87:25:eb:e2:d5:
d0:66:d4:ee:a1:ca:5d:28:f9:a9:f5:41:e8:ab:ad:
28:42:ec:9a:92:8d:57:8e:f7:54:37:c9:e2:f2:b9:
bd:f5:e2:fd:29:11:25:c0:e2:e7:6c:d5:23:18:70:
b0:c4:85:c2:a2:55:d6:cb:e7:b2:e3:0e:a3:cf:fe:
01:d5:e3:4c:28:24:09:8b:df:5c:b2:19:85:17:5a:
90:03:91:5e:82:fc:f6:97:82:82:41:10:94:50:8e:
a7:f7:96:20:07:b7:6a:91:a1:be:1d:38:22:dc:1c:
a5:81:4a:01:9f:df:62:3c:87:89:10:e3:93:3c:0e:
c8:09:be:be:73:bb:e2:00:18:91:a4:d8:09:45:2e:
b3:47:ce:14:79:0f:3b:5e:8c:a3:b6:96:05:fc:f4:
d3:85:93:46:6f:0e:6f:da:15:72:27:36:2f:87:3e:
ed:dc:58:0b:30:fb:3c:d0:46:38:81:ba:81:f4:e6:
4e:9a:24:e4:fc:37:00:5e:39:49:42:48:a7:6d:c3:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:40:E6:D3:FC:97:AC:FF:8D:49:A1:85:C2:B0:E9:51:10:AD:DD
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:c9:01:18:63:32:74:82:27:7f:68:a1:98:03:f4:22:7d:
2a:b7:f8:99:89:04:68:4a:38:29:78:75:21:c3:41:36:f1:e7:
98:99:1b:89:cc:cd:22:91:5e:ba:64:b9:02:90:35:e2:67:f1:
4e:ab:da:80:54:b6:af:29:90:c9:2d:dc:d1:cb:90:57:6a:47:
e1:15:fa:e8:59:6d:cb:7a:14:4a:bb:fa:d0:98:73:a2:7d:79:
c9:b4:42:a0:d1:5c:52:6a:3a:66:b3:d8:70:41:1d:3f:15:2f:
a5:89:53:59:0f:25:a7:e4:b2:19:c1:d2:e4:a8:23:e8:56:ab:
fc:b9:43:98:9c:c8:fe:9d:93:94:b9:f8:ec:96:9d:1d:df:a1:
ae:55:9a:76:06:de:4e:94:b9:3f:a5:84:0c:b1:3e:cf:27:5f:
c6:85:06:59:9e:ca:38:5a:d2:77:c9:fb:5c:23:72:1c:85:17:
28:73:22:e8:7c:1c:1a:18:84:83:bf:ec:ff:4c:2e:c3:aa:93:
67:c0:24:00:15:11:bb:b1:82:92:fa:68:ec:01:04:03:8a:f5:
cb:1b:4d:50:0f:b3:57:06:e3:16:f7:7a:91:13:51:61:dc:18:
f1:b3:38:04:e9:2d:9c:f5:a3:7e:0b:68:a5:3d:c1:20:2c:bc:
da:9e:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:53 2026 by rpki-client