Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
File: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft (raw, json)
Hash identifier: 4UaEhFGKELR/Kk7z1ulqjWgO+CWz8sitwwQsbzGT6T0=
Subject key identifier: 33:1B:1D:72:53:5F:D0:43:58:CA:63:C9:7A:C9:1A:A6:B3:FE:52:AC
Authority key identifier: 43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
Certificate issuer: /CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Certificate serial: 019D2AE08132225FE6FBA6CFDD126F6A66BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
Manifest number: 15B4
Signing time: Thu 26 Mar 2026 16:00:49 +0000
Manifest this update: Thu 26 Mar 2026 16:00:49 +0000
Manifest next update: Fri 27 Mar 2026 16:00:49 +0000
Files and hashes: 1: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl (hash: HziXVEwME1ICTwvQC7MKfJnc1gfIzwUTbl+0ttmaTGE=)
2: TQWvkAi8bonEzYNgt0Kx7jD-EqQ.roa (hash: 4l9r6gsisRPOUrwiMnNC/ZEB32QweKRJ3pss8gUXvAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:81:32:22:5f:e6:fb:a6:cf:dd:12:6f:6a:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Validity
Not Before: Mar 26 16:00:49 2026 GMT
Not After : Mar 27 16:00:49 2026 GMT
Subject: CN=331b1d72535fd04358ca63c97ac91aa6b3fe52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1f:41:b8:9d:c2:45:08:b7:76:c5:de:43:f0:
8f:a6:8f:21:b8:54:52:a2:4d:0d:da:52:41:16:e7:
62:8f:65:bf:ef:bf:12:15:07:2b:2f:e4:e8:61:0f:
6f:0c:c4:1f:ac:de:89:63:f6:39:ac:fb:60:a9:71:
36:b6:f8:2b:7c:0a:a4:17:0f:40:50:5b:62:d2:f9:
89:aa:10:32:47:a5:6b:e3:62:1a:ec:b9:30:1d:f2:
8b:09:75:67:12:af:b9:53:74:c3:4f:de:6b:1f:81:
28:f8:27:e8:8e:47:67:0e:87:71:e8:6d:f8:ce:f1:
83:39:fc:a1:99:a4:37:a3:64:ad:bd:0b:44:a9:8b:
8b:24:bc:8a:3c:94:fe:58:cf:d0:d5:25:a9:4c:33:
d4:3d:6a:75:eb:b6:25:9e:02:22:ac:b6:35:35:83:
87:8e:66:c8:2a:e6:2f:69:5e:48:2e:d1:0b:82:38:
53:e4:61:d3:df:11:f4:bf:87:be:cf:4d:14:d9:2a:
93:c3:fe:89:f6:68:d9:24:d5:f6:9d:07:e3:ce:15:
3b:b7:d8:d3:ab:a4:cb:0b:51:cb:21:dc:a8:91:dc:
fc:7c:17:75:45:e2:95:2a:b5:47:9f:25:d5:f2:a8:
31:b6:6c:ff:f0:d6:94:e1:fb:6c:b4:b4:67:7c:5e:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:1D:72:53:5F:D0:43:58:CA:63:C9:7A:C9:1A:A6:B3:FE:52:AC
X509v3 Authority Key Identifier:
keyid:43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e9:87:94:e3:65:64:6c:8f:9f:98:c9:59:24:0b:75:81:3b:
ec:f5:38:6f:d5:99:f8:2b:ac:24:f0:65:47:29:d8:d8:0b:70:
df:8e:b0:b7:c9:c3:aa:00:2a:ce:ad:eb:bf:b4:28:d1:d7:0a:
23:ca:9b:02:d1:10:0e:34:de:ae:ed:2c:57:74:9a:32:35:79:
10:97:82:c3:ee:4c:ae:c1:82:78:c1:b8:21:f2:2f:d9:c8:8c:
b8:78:49:9a:f9:fa:dd:f1:37:8c:7d:f5:5b:32:3b:d1:ea:21:
0b:c6:44:41:b0:87:32:11:b5:89:74:9a:52:ed:80:9c:d4:2a:
77:4b:ab:42:b6:53:a3:7e:34:9d:f4:78:5f:71:9b:5b:0e:ee:
0d:a7:55:22:e4:cd:a4:5c:c9:60:47:95:97:5f:17:62:fa:c3:
e6:39:1b:1c:ea:99:1b:30:5c:29:d4:f8:1e:a8:85:9c:aa:1c:
86:62:6c:90:f4:ba:2c:69:c2:9e:a7:57:61:2d:bc:45:e6:92:
6e:19:5a:b0:3f:9f:f0:0f:3e:96:44:be:cf:07:40:65:d8:ac:
6f:e2:f5:55:d5:4e:c2:de:dc:3d:4e:87:dc:10:2f:20:19:95:
ba:eb:e4:f6:79:9b:78:96:4a:e9:b4:9d:2f:0f:e6:9f:bb:78:
87:e7:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:24 2026 by rpki-client