Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: BiXRRVTYwtqZItT/72jquulJpiQ0ttV0HVhOyu/2ukc=
Subject key identifier: F6:B8:FC:01:49:21:99:4B:44:51:13:EC:DF:C4:73:23:3C:E1:F4:71
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 019D284E65A302A9B5F69B0B19DDCE1F414A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 1385
Signing time: Thu 26 Mar 2026 04:01:59 +0000
Manifest this update: Thu 26 Mar 2026 04:01:59 +0000
Manifest next update: Fri 27 Mar 2026 04:01:59 +0000
Files and hashes: 1: Oma8gQPFZK3eL4SIWeiHGMksOJ8.roa (hash: GnVVTQd6m0A+Ro/1Fl2wXRUqSbZQynPd8mR/0XhDxek=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: +Z7wHlCUyQIE2lTEUrwkg5r9YS/pN1kxLphTYb7lQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:65:a3:02:a9:b5:f6:9b:0b:19:dd:ce:1f:41:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Mar 26 04:01:59 2026 GMT
Not After : Mar 27 04:01:59 2026 GMT
Subject: CN=f6b8fc014921994b445113ecdfc473233ce1f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:c3:c4:32:45:ae:8e:14:41:5e:9c:45:2b:
c7:7f:8c:a6:d8:f9:8e:34:cc:24:30:d6:26:00:90:
b5:66:b3:24:e1:6d:72:31:52:27:a9:e3:98:12:bf:
00:8d:0c:53:00:a4:83:f9:f6:de:5f:fa:b9:be:e0:
fa:56:df:b0:fb:34:76:8f:26:09:0d:f2:06:9d:b0:
e3:24:1c:1c:a6:73:b9:07:ea:94:78:f3:46:33:1d:
6c:15:2d:65:ee:bd:b8:3a:c8:ed:07:66:1b:34:ed:
22:51:d8:56:bc:f1:59:a8:23:db:17:ca:1c:04:26:
dc:0e:47:23:4d:14:17:85:ea:43:db:89:81:f8:b8:
8f:6d:95:0a:e5:ce:38:0e:1b:17:51:77:07:f4:67:
53:8a:ce:5a:e2:6b:93:73:d8:d8:6c:95:a7:11:be:
50:92:23:0f:d9:e0:07:f9:f7:53:62:af:90:35:84:
a3:2e:1d:86:12:b1:23:ac:59:40:58:67:ec:06:eb:
d4:79:85:2f:d1:d8:32:54:e7:e2:22:51:25:02:3e:
80:b0:3c:97:b4:e3:c4:7c:37:81:5e:f0:f2:48:e9:
15:99:3c:77:32:08:e8:1c:96:6d:0a:45:b9:d1:c7:
14:b8:93:88:e3:e5:37:dc:d9:97:50:ed:23:b8:ef:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B8:FC:01:49:21:99:4B:44:51:13:EC:DF:C4:73:23:3C:E1:F4:71
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:85:08:a9:15:29:65:c0:2f:7a:2f:13:1e:ff:60:db:5f:68:
50:f2:a5:0a:0f:11:3a:3c:6e:59:65:d7:3c:27:de:ee:d3:b1:
5f:45:d7:b0:32:a9:6e:55:57:ef:56:c3:35:fe:db:ba:68:b4:
aa:19:13:6b:2e:0f:88:a3:b9:11:f9:9d:6d:23:e3:94:db:85:
c8:57:06:fd:a2:10:7c:1c:25:e1:40:55:90:bc:09:57:ed:ca:
4a:06:ef:3d:87:f5:0a:b3:54:1a:63:d3:59:b2:55:6c:ea:e7:
03:f5:9a:4d:63:0e:1f:63:23:cc:28:a9:fa:37:d7:99:f6:52:
17:62:1c:4b:c2:22:c4:6d:8d:6c:48:7c:ca:f2:86:4b:20:35:
d7:6d:b3:33:f0:3c:b0:cd:37:9e:8d:c2:ec:b6:a6:70:4d:8b:
99:74:7e:3e:2f:c7:39:f8:dc:37:98:5e:fe:0d:94:74:80:26:
eb:1d:7d:57:5b:60:e8:1b:68:9c:b8:d2:5a:5e:90:48:ac:29:
43:03:b4:22:3f:10:37:03:f0:1c:99:dc:94:d8:1d:35:28:0f:
4a:9b:8a:00:d7:ec:fe:56:27:dc:37:30:81:02:e4:48:9c:36:
0c:95:36:5e:a1:a4:73:62:36:4e:50:e3:9e:41:c7:f4:82:5c:
11:51:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:57 2026 by rpki-client