Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: oO4XI/U6ADpLndCJZp8G5oVsBHmkex1TyjIzJ0Nl9PA=
Subject key identifier: BC:6E:97:69:95:75:64:45:FC:3B:8C:7C:34:54:34:5F:5E:BD:2D:0E
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 019D25F1A181A9140FCAC8F922B6DCB3D030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 17D1
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=)
2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: cS7llOldPCpyIAG4hrLjW5ZihRdyqYLXajXcYCkMgvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a1:81:a9:14:0f:ca:c8:f9:22:b6:dc:b3:d0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=bc6e976995756445fc3b8c7c3454345f5ebd2d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:d3:05:e0:b7:9b:bd:37:fa:b0:34:e6:f6:
ae:a6:b1:e9:3d:73:af:da:a1:55:e4:e7:ea:5a:4e:
fc:f3:64:7a:7a:25:1d:60:e0:3e:f5:5f:1b:5b:3e:
b3:31:5e:8a:5a:d5:b4:af:9f:2f:4f:d0:18:4b:bc:
dc:f6:8e:4a:00:bb:bb:8a:68:c4:30:a5:db:aa:5a:
fb:25:73:43:ff:75:ad:7c:4c:27:e0:1a:85:60:d1:
a2:ac:c5:56:02:bd:63:21:86:d9:03:c4:44:90:d9:
17:bc:92:07:50:8a:3c:d6:cf:d7:0f:95:4a:56:4c:
dc:40:87:d9:ac:50:0a:6f:4f:d2:b3:4f:02:33:58:
73:d8:75:62:9a:62:46:6a:c0:4d:e8:fd:6c:9f:9f:
d8:13:d5:2f:00:7a:cc:44:ac:f7:2b:95:b8:26:58:
53:33:ba:76:35:bc:20:38:fc:02:fb:c4:ed:9f:6b:
83:22:b3:3c:0c:43:4a:e6:ab:f8:b9:a0:14:55:de:
8e:ae:b7:79:e6:18:06:8b:41:c9:b2:ba:73:c9:1c:
23:e3:c9:83:15:76:90:80:5b:13:ab:fe:58:81:87:
c1:ad:b1:86:31:9f:c3:49:43:6e:0d:b2:9d:03:74:
9a:c6:3f:5b:96:a1:83:d9:18:48:a7:b6:fb:10:8d:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6E:97:69:95:75:64:45:FC:3B:8C:7C:34:54:34:5F:5E:BD:2D:0E
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d0:e8:3f:b7:39:93:44:c6:fe:29:0e:71:2b:f3:e2:03:ec:
6a:78:2e:61:8c:41:80:94:35:9c:78:92:c4:c5:ae:51:9e:6c:
72:57:cb:95:fb:94:d2:ba:60:27:ea:dd:7a:58:ea:e8:19:36:
8b:27:4f:e7:ea:aa:c9:08:be:0a:d0:67:46:1d:39:fb:5b:f2:
2f:2f:4e:c3:8a:c1:3e:1c:1e:69:38:c1:7f:58:df:c0:c6:9d:
1f:54:76:9e:ec:d1:85:58:5f:ef:3f:47:bf:97:ed:a3:4c:4e:
f7:f1:e8:0a:8d:2a:e4:58:f1:e7:9b:15:ce:70:49:0f:c3:ba:
31:fa:48:41:2d:10:d6:f1:e2:d5:3e:cb:a2:43:96:a0:57:70:
cf:a8:ed:38:09:7a:f9:8c:18:13:82:d6:6b:c6:a9:2b:de:c4:
7b:ac:77:28:47:5d:f9:1c:2c:50:b5:bc:3c:dc:74:5a:f2:f7:
b4:42:13:25:c2:a4:3d:8f:9c:a0:91:6e:c7:47:ea:63:12:47:
b9:38:0f:22:f8:5c:30:7c:65:c8:f5:eb:4a:e5:3d:49:83:4d:
25:04:16:6c:15:6a:e8:f1:de:e2:8e:c3:1d:22:d2:27:e5:3b:
45:4a:97:37:99:a7:16:40:c8:53:c2:d9:68:bb:69:e6:7e:d1:
31:c7:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client