Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: JJx0e4+hCsys4RuVLQWH3YdgVu4ADYWG8OrX1FVn08A=
Subject key identifier: 55:ED:40:E1:C2:21:AA:7B:1B:19:8A:59:64:9D:33:9A:EC:C0:F1:05
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019D27A903165FB90FA5EFFAAAAC2119F4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0A5E
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: gL/DfWvhHEKqV/WZ8Tu4tm24QJJl+1IqUniDof61xWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:03:16:5f:b9:0f:a5:ef:fa:aa:ac:21:19:f4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=55ed40e1c221aa7b1b198a59649d339aecc0f105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:a7:0e:6d:a4:2a:15:cc:b6:2f:1f:6a:bd:
7f:67:fd:4b:72:cd:f1:9c:73:df:59:a4:44:a3:58:
12:d6:b3:b1:9c:87:ad:92:42:a9:1a:0b:16:6d:66:
df:5a:e9:24:fb:31:10:03:e2:80:4a:af:75:d4:5f:
bf:f1:47:af:ef:34:d2:f5:db:e5:a2:87:37:72:e8:
57:09:1a:d7:3c:50:74:85:a9:dd:fc:3f:6d:f9:d6:
36:a2:a8:0c:a9:ae:88:ef:aa:8b:55:95:ab:3e:89:
b3:05:19:ea:b4:ae:89:c5:b8:51:fd:03:3d:3e:18:
d8:e9:0f:fa:de:5f:e7:ce:50:86:1c:af:14:c9:96:
02:05:89:ea:c3:67:c9:77:41:ad:e4:dd:16:50:2c:
e5:bd:85:d4:27:ec:51:8d:06:e3:7a:c0:ce:d7:65:
66:48:c6:89:4f:33:30:8b:cf:c8:e0:c9:58:99:29:
17:40:cf:d2:4d:2f:03:9a:d9:2c:a7:3d:57:ea:59:
3d:6f:11:0c:5f:92:5f:bc:80:50:be:38:b9:95:59:
79:dc:1f:38:b7:9e:cd:8f:aa:88:0c:b6:3c:bb:df:
ad:fe:78:ab:f4:19:76:56:3b:c1:01:17:8f:b6:f9:
56:8d:1f:d2:6e:43:6d:42:31:9c:00:cd:15:1a:65:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:ED:40:E1:C2:21:AA:7B:1B:19:8A:59:64:9D:33:9A:EC:C0:F1:05
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:53:8a:e0:cc:31:97:40:48:9e:ca:aa:1d:8f:86:22:61:77:
98:d1:5a:12:00:e8:71:16:4e:18:bc:39:f0:60:8a:86:a5:39:
a4:e7:0d:83:24:6e:20:30:86:4b:ef:07:1f:e0:1f:cf:93:f6:
6e:47:c5:7c:02:c7:38:6a:89:f6:99:20:af:e4:7a:c5:34:06:
1b:56:e4:a6:f9:36:68:7c:58:e8:d9:4e:eb:ba:49:a9:19:66:
bb:d6:70:e7:24:5a:d2:dc:80:fb:5d:11:68:51:f7:cc:74:b2:
35:6e:8f:40:72:36:e8:f8:73:13:40:1b:76:56:77:e8:ab:7f:
e1:61:c5:6d:7a:08:db:f3:fb:18:fb:d2:b1:e2:22:ac:5c:f8:
7a:e0:d2:f9:47:80:78:ca:fa:eb:c4:ee:5b:75:78:b6:70:ce:
75:9e:d2:7e:68:fe:e2:78:48:c9:9f:7a:42:19:d3:a7:4a:a8:
a2:0c:49:c7:62:a0:5b:e0:3c:bc:a0:67:20:4b:a3:eb:cb:3b:
b8:28:47:14:57:43:de:43:95:12:48:84:17:dd:ab:6c:41:78:
32:03:da:43:ad:39:fd:ac:d5:80:f7:80:bd:13:ae:6d:47:2c:
6a:e8:cb:c5:60:51:1c:2c:d7:3b:a9:a4:37:ee:28:73:d5:b8:
7e:f2:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:07 2026 by rpki-client