Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: aHI/0QyszJDRw88Hx6IFyyG6qa+cUp+CQKjGg1BYzaM=
Subject key identifier: E3:4C:55:50:BF:B4:BC:A0:31:0D:63:0F:BD:32:E6:F0:87:FA:05:EE
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019D277235F247A639F59D6BC2338F3691AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 16D5
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: 0X6zeQEguKeI5hg5ZN+Ooiv0SPpIffCjEv7yrlVEbMY=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:35:f2:47:a6:39:f5:9d:6b:c2:33:8f:36:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=e34c5550bfb4bca0310d630fbd32e6f087fa05ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:2d:68:fb:25:8d:4e:ce:0e:59:c0:25:5d:
4d:e8:2b:5e:ce:32:28:c4:ed:fa:39:cc:79:58:45:
6e:e0:ac:31:57:c7:ee:e6:0c:ab:81:14:11:e6:cf:
5e:da:ce:b2:d2:4a:b7:8f:ea:69:08:8d:c9:9f:82:
52:d0:ad:47:32:a9:d3:36:aa:1e:16:35:04:2c:15:
ca:01:91:34:3f:60:7c:23:df:8d:67:f4:63:b7:41:
ff:fa:d4:d5:6f:c0:b0:3f:28:bf:e8:50:c9:30:60:
eb:6f:e8:61:13:87:cc:15:d4:a0:8c:71:9c:bd:87:
dd:5b:77:7c:cd:92:a6:91:cc:cf:8b:bd:b5:f2:b4:
55:c4:2f:91:b6:56:8e:7c:5a:b1:4b:2a:42:47:c1:
ee:e6:6a:93:00:e8:ed:57:57:74:0d:ac:46:c8:5b:
8a:08:26:5c:2c:19:7c:2d:63:da:ad:1e:7e:94:e5:
20:69:a1:4f:4a:83:f6:90:6c:1a:88:95:ac:74:a8:
df:e8:82:a6:b3:70:6c:b4:11:e2:f9:db:c4:4a:c4:
33:9e:e8:6b:47:a4:8e:9d:a7:da:17:5a:35:7e:a5:
eb:70:b2:0b:41:9f:5f:da:ed:a6:05:32:19:87:42:
43:cc:f3:3f:ca:32:fe:64:5b:84:fd:5b:2e:59:b4:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4C:55:50:BF:B4:BC:A0:31:0D:63:0F:BD:32:E6:F0:87:FA:05:EE
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5c:74:d6:e6:b9:3b:34:9a:00:dc:50:29:e6:1a:e6:16:db:
db:3f:d3:a1:0d:a9:ee:ce:6a:29:b8:6a:81:fe:16:b6:1a:3e:
3c:10:83:3f:c4:c7:60:ca:ca:27:6e:cf:81:fd:26:1d:41:ed:
2e:80:a9:3f:96:9c:3c:4b:9c:33:7d:36:24:71:42:0d:6e:f3:
0b:ee:97:33:13:d6:7e:f3:b3:9d:77:94:ea:b4:22:32:2a:72:
7b:e3:a6:00:fa:19:84:43:fa:7f:9b:01:cb:c6:ab:21:49:d1:
3a:ef:51:68:ee:f2:d8:85:5f:99:93:6e:fd:09:73:d9:d7:1c:
a3:31:47:49:51:ce:97:d2:46:a9:e3:e0:b4:e8:e8:1b:b7:16:
2f:c6:33:76:4f:f1:9a:f1:1c:7d:21:32:05:32:82:63:64:89:
20:48:d1:76:0b:8b:15:9d:04:52:ac:cf:64:bb:b9:b4:ea:24:
dd:ab:8f:d4:f8:f6:35:93:92:31:82:9d:3d:43:c0:3c:68:b0:
3b:a4:a0:ba:8c:60:ba:6f:9a:8e:6c:09:77:0d:55:d1:b7:a1:
15:53:91:34:4c:72:be:86:a8:06:b5:bc:0c:81:81:d1:dc:dd:
b1:af:7f:f8:d9:6f:a3:28:ad:d3:28:cd:05:e5:b2:04:53:cd:
f2:d1:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:42 2026 by rpki-client