Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: x41YFQJWPQ1Y8EQEp5bfAlOstyBqhy29fNzoxTeTGn0=
Subject key identifier: A7:83:99:65:4E:26:E9:B7:E7:E3:70:6D:42:5E:9E:68:6A:96:F4:E0
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019D27E007AAF46212B5512727390D59214F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 15C3
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: GLWh56MMEykKTE4rrV87G9Vgki8.roa (hash: 02Z7LQfQNnw59BWb8xFGQ1xpLvcBlJFnepDp+x8RT7E=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: hHVT4Gn1HxSOW4ZhTqhK7exKtIjeYrQYW27CgzeN50M=)
3: w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa (hash: Rh0VsCvy2O3VBR0z+FrTOlGdPanimSzIyXLHmJJMba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:07:aa:f4:62:12:b5:51:27:27:39:0d:59:21:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=a78399654e26e9b7e7e3706d425e9e686a96f4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:bd:a4:99:70:22:d9:93:7b:b5:3c:67:de:
11:fb:65:b5:0d:18:08:13:12:97:0c:6d:30:10:0d:
1a:21:f2:fe:21:df:27:3a:71:f6:49:32:f4:75:f0:
00:c0:b9:c2:f8:40:d0:4c:af:5c:44:2a:af:76:ae:
51:a1:7e:26:8b:b5:a1:05:9f:54:fe:cd:50:fb:1a:
e4:21:8d:a5:31:ad:2e:78:3a:b3:73:37:73:f1:41:
2c:fa:4a:90:34:58:83:7a:f5:31:f9:54:66:1a:b0:
48:c7:b1:fc:32:80:bc:9f:26:d3:1f:d6:b0:ea:56:
31:bd:1a:d1:db:32:ef:af:e7:74:2f:83:61:c8:35:
8c:61:7c:40:e9:91:7d:f8:98:5c:f0:67:b9:8a:7c:
39:63:de:a6:99:bf:b7:44:9f:ff:ef:59:5c:7e:f4:
85:68:a8:9a:f0:08:a5:16:92:6a:e2:65:bc:0f:48:
91:94:ef:60:7f:fe:ba:25:3c:87:14:ca:15:ae:0f:
e1:c2:bf:45:01:36:36:1f:59:58:4d:35:9a:bc:25:
d0:19:ba:11:0e:f0:87:0d:f8:48:32:92:80:03:11:
7e:e8:c5:7a:ef:1d:e2:e5:e4:e4:ce:eb:bb:44:31:
43:da:d8:65:31:4a:4d:ef:4f:bb:fd:54:5a:b9:7a:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:99:65:4E:26:E9:B7:E7:E3:70:6D:42:5E:9E:68:6A:96:F4:E0
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:30:f4:fc:d7:39:8e:e9:48:44:5e:7f:ed:3f:33:44:25:
c2:50:d2:e9:04:6b:54:82:4e:d4:f4:a3:88:64:03:a1:1e:4e:
5d:3e:f7:d9:c4:4b:45:41:e4:c9:f3:41:05:3d:10:64:19:98:
78:2f:53:c8:7b:36:10:61:99:dc:9a:25:9e:34:4e:55:39:93:
40:24:0f:b0:ff:34:41:36:86:f8:fc:07:f0:10:bd:70:f3:9c:
2e:3e:7d:46:47:14:c0:94:d0:f7:f7:4a:9a:f7:58:4c:5b:e0:
33:2e:22:7b:ae:fd:37:ee:10:66:64:82:b4:da:37:93:dc:89:
c1:90:2d:8d:99:e8:b6:d6:44:a7:d5:0d:6e:d0:40:b8:7f:aa:
76:8b:e8:28:63:ad:ef:6e:8f:b9:74:39:3a:5a:fb:21:9a:e6:
cf:4c:9a:cd:e7:1c:63:92:4d:f3:1f:24:b4:d7:eb:48:fd:7a:
ed:75:99:06:ef:c1:1f:d6:c7:77:46:2f:9b:16:6d:73:95:13:
ca:4b:f1:ce:a3:39:54:b2:56:8b:01:03:f8:a4:1e:23:ec:74:
7a:55:f0:73:40:18:bd:89:20:60:8f:0f:87:73:e5:48:1b:6e:
a4:1e:9c:d4:3b:ad:a2:2b:e3:1d:03:c7:ec:82:7c:f4:90:cb:
2b:b2:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:53 2026 by rpki-client