Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier: c9Tqi0hPUEnylKkGjxchPWn4CSEsu8ylHEnYHoZZ08w=
Subject key identifier: AF:0A:D2:EA:42:87:4E:8F:5A:27:77:61:54:3E:F4:75:B1:B1:B3:B4
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 019D2A3C08CC3E1828D9AD9E5E784152728B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 13:01:10 +0000
Manifest this update: Thu 26 Mar 2026 13:01:10 +0000
Manifest next update: Fri 27 Mar 2026 13:01:10 +0000
Files and hashes: 1: 9svF7XV_8rFyGg_nZWGhuxLsBGo.roa (hash: HYZcH7ciR/GKsfvNl9giR0/lMm/wD2BnMycPbF+v6tY=)
2: O7qjLnP-Av_AUI_nXwDm6aTNtiM.roa (hash: b0YiOln+6ee3N+tmIgf41n0TuffzExlmKLzTRwsvrs4=)
3: Ttr7foitcHqzKL5tFDo4aAXiRHs.roa (hash: l+KPWtcu5vk+NW1gY++Z3UuQD8IwIIkC3ZQ3BVE/Egc=)
4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: pQriBRNtjzJsTMmQyUK/ynIihKWsTW8wK8sU80AaHno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:08:cc:3e:18:28:d9:ad:9e:5e:78:41:52:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Mar 26 13:01:10 2026 GMT
Not After : Mar 27 13:01:10 2026 GMT
Subject: CN=af0ad2ea42874e8f5a277761543ef475b1b1b3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:4b:a5:f7:c3:63:a1:6c:e1:e2:77:19:ab:
98:53:2a:cd:5e:04:39:37:39:34:ab:83:e1:c6:02:
ae:58:92:7a:ed:95:6e:b6:20:65:3f:08:77:14:ba:
63:b8:67:95:bc:7e:26:11:a9:42:18:2f:0f:f0:07:
b9:ea:bf:f3:a7:2a:cc:7d:f6:89:d4:89:c0:ea:1f:
74:83:a1:1a:27:83:51:45:d9:00:a3:73:4e:f2:1a:
6b:ee:42:d9:d2:70:e2:cf:cf:25:a0:e0:5f:ee:09:
e7:d0:da:f7:2d:e3:db:dc:86:fc:cb:75:5b:c0:7f:
84:be:29:c4:59:17:c8:1a:77:77:54:c6:e9:a2:03:
97:fd:95:27:ec:18:05:74:56:da:dc:43:00:71:8b:
b1:bd:f7:04:67:3a:37:41:17:d3:47:a7:9c:d4:b5:
e2:c2:86:b4:5b:77:e1:2f:21:5b:e6:b7:e0:e9:4b:
67:25:8a:67:e0:08:8d:14:7d:13:65:76:2e:0a:d8:
2b:c2:d5:7a:58:c1:7b:a0:d2:79:42:c7:e1:70:be:
08:c5:38:d8:eb:a3:49:50:4c:48:9f:20:e9:19:d3:
98:18:8c:db:7f:f9:32:84:0d:6e:bc:f8:24:2d:45:
f3:af:b8:5d:70:66:9b:0e:4e:3c:b6:68:ef:8b:62:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0A:D2:EA:42:87:4E:8F:5A:27:77:61:54:3E:F4:75:B1:B1:B3:B4
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:65:8f:50:59:13:fd:46:18:e5:76:f8:ff:6e:06:6b:98:70:
86:9a:a7:03:53:c9:2c:34:bc:5f:55:9b:a2:be:76:6a:a0:a0:
ca:1d:34:f2:51:98:07:7b:39:4f:97:28:fa:7d:00:d2:4d:ea:
ee:af:ed:a4:3a:b5:41:08:b1:17:66:6b:29:42:13:ef:65:7d:
ea:58:1e:3b:da:6c:7c:12:bd:e8:52:8d:c6:6a:db:d4:91:7d:
72:a1:ca:0d:83:bd:ee:71:f3:40:1e:a1:a9:bf:28:8b:aa:a5:
f3:56:58:e6:02:f5:e3:3b:30:3e:30:78:27:55:4b:d5:4c:3d:
91:2a:a4:93:dd:f4:2d:b2:21:3d:94:82:74:14:18:49:ad:8c:
0c:b8:e4:66:c1:6d:ba:43:7d:fd:4d:2b:17:ba:ed:c7:1c:dc:
a1:19:a7:b7:6d:70:60:24:09:6d:fa:86:fb:3e:24:f2:f4:f9:
16:dc:c4:5c:40:d2:0e:95:da:01:c4:73:83:a8:6c:66:c3:87:
bb:61:5d:43:10:26:e8:26:74:59:80:9e:51:75:45:dd:5d:c4:
fd:e8:c4:25:9c:57:c6:59:1b:f3:46:53:2a:a0:f2:6b:68:38:
26:b1:fd:b8:4a:e4:28:b7:4d:c5:e0:6f:48:6e:5d:3d:6c:12:
8d:12:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:22 2026 by rpki-client