Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
File: QVpBISe1FPZFXsiobinTjrCrtaw.mft (raw, json)
Hash identifier: gcTDFLHbnh5881kNnDR+Pr0XVO7C7BwlKVxJWUOCUDg=
Subject key identifier: AE:20:36:EB:AB:90:12:F8:ED:2D:9A:7F:91:72:CA:8B:8B:61:74:52
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 019D2704CD82E8ACCCB2C492F190DD3B340A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: 7Rp3GdcKfVUWm4cQ63fBxEuydME.roa (hash: pT/MLKvd9rZPCZ0i8dhFBDQSL+HDF/WyEyWHYfgrkVc=)
2: ClYH5zdUq2avTHJ8ifv2RHlVvmQ.roa (hash: LMju03bIoiZeMfDoSkXpr6oRp36HwgwDO6weFxJjdDQ=)
3: QVpBISe1FPZFXsiobinTjrCrtaw.crl (hash: jwlQxOQmt7f7K3JcSgTMkfChBtXBHpN59TQWFcTccRE=)
4: ryDLC_ILEFr49nieVNiDA4Xo9hs.roa (hash: em6ryr8LwG3BVr36hOTyHeON9oVwPVEYFMxyRSNV31w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cd:82:e8:ac:cc:b2:c4:92:f1:90:dd:3b:34:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=ae2036ebab9012f8ed2d9a7f9172ca8b8b617452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:bc:53:26:82:96:0f:10:f0:fb:1a:2a:66:
3d:69:01:0e:6c:06:0f:6f:1a:d7:37:d6:9e:1d:a0:
af:c8:c3:5a:0a:2d:0e:b5:ab:c2:79:28:9c:38:0f:
0c:21:59:64:bb:03:1c:33:4e:03:76:eb:e2:28:5b:
e6:a4:a8:a3:67:82:29:b9:64:e9:3e:79:14:73:d0:
3d:f7:59:d4:fb:a3:30:bf:08:51:c0:95:51:e5:91:
26:45:5e:0d:b2:fe:16:e5:6c:e2:1f:11:a8:90:11:
60:a0:6e:24:36:9c:53:8f:5d:c4:99:b2:db:7e:2e:
39:a6:57:96:3a:9b:c0:61:df:d3:12:c7:83:8f:cc:
ca:1d:e5:51:f9:82:97:85:28:73:12:2d:b6:e9:68:
98:85:2f:96:e5:d8:d9:bb:bc:3f:5c:8f:ce:43:7d:
29:07:b6:34:39:28:dc:cd:b9:c9:6f:0d:b1:bb:ea:
98:84:13:b1:af:c9:d6:e1:57:0e:88:72:49:83:6d:
6f:e6:7b:13:45:f5:a8:52:61:67:39:42:2c:54:5b:
fd:5a:73:ce:14:5d:94:fa:ed:45:cc:a7:a8:d4:9c:
e8:c7:31:e3:b8:3d:d0:6e:72:fc:71:08:94:21:c0:
04:a3:f3:4a:dd:02:b0:28:55:ee:d2:dd:20:ce:8b:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:36:EB:AB:90:12:F8:ED:2D:9A:7F:91:72:CA:8B:8B:61:74:52
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:ad:60:61:4f:c2:b4:c3:3e:e6:a1:44:b9:5e:e6:af:f9:
48:87:4f:47:bc:c9:a7:a3:70:7a:ce:6d:b1:3f:52:a7:06:9a:
02:95:22:3c:b3:2f:87:be:47:61:a8:f7:77:d4:a6:5b:7c:76:
df:86:9c:6e:b0:9b:a4:1a:a3:4e:38:3d:72:f4:e8:08:bd:ed:
3f:59:98:b2:ac:e8:84:69:92:b1:74:72:5d:43:85:8a:ef:ed:
1f:0d:c7:dc:2c:aa:a2:f6:9f:74:ad:e6:dc:10:dd:49:40:fb:
2c:10:99:ee:c0:45:19:fa:33:d9:97:90:47:cf:e3:cc:ef:14:
2e:9a:e3:ab:25:a3:3c:cb:54:0a:30:9e:d1:25:9d:df:7e:02:
4c:ec:72:af:fe:33:0f:66:e7:58:64:26:2c:6a:09:3c:d4:76:
35:d7:77:5c:80:9f:da:a2:e4:ca:1f:78:45:29:5f:0f:43:07:
c4:07:1a:02:0d:61:d3:3d:8a:ee:74:6c:16:bd:86:28:d5:7a:
b4:8e:c6:4f:6b:7e:40:c9:5a:72:5f:86:03:e5:75:7d:ef:e6:
29:cd:86:09:e3:69:ad:30:b8:8a:f9:02:7c:95:df:c7:12:a4:
eb:21:f9:2e:cf:37:28:cc:7f:b1:af:f1:5c:32:3b:51:f9:60:
f1:c9:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:12 2026 by rpki-client