Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: aksd0B1VE7W6rsRfjAaO1Liib7hvOhcUhH9E53i6GDM=
Subject key identifier: 4D:82:EB:C8:E4:5C:C7:91:ED:71:1D:ED:A8:AD:B1:36:60:E2:E0:16
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 019D2627E49797626A3C380763CAF92503C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 0326
Signing time: Wed 25 Mar 2026 18:00:41 +0000
Manifest this update: Wed 25 Mar 2026 18:00:41 +0000
Manifest next update: Thu 26 Mar 2026 18:00:41 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: GjXVPGaxfw/Br0fiv1CqC0OIqOV2Hi7sV2J6bQvYN08=)
2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e4:97:97:62:6a:3c:38:07:63:ca:f9:25:03:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Mar 25 18:00:41 2026 GMT
Not After : Mar 26 18:00:41 2026 GMT
Subject: CN=4d82ebc8e45cc791ed711deda8adb13660e2e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:75:8b:3a:f0:73:dc:35:c2:81:b0:e7:b0:
c8:2d:0e:3e:6e:0c:2f:ec:e4:9d:83:50:a2:bd:e3:
00:5d:9b:6a:2a:ba:69:e9:f8:a0:e2:f7:68:4b:17:
1c:bc:4b:f6:d6:5c:6c:f5:2f:0a:c0:22:ae:d5:bf:
f1:b8:9f:a2:a7:f2:5c:72:ca:fc:c1:dc:72:a9:a0:
52:f0:be:0f:60:e0:1e:53:85:f0:31:db:e5:6d:c1:
09:e9:52:d6:70:df:d7:52:e8:d9:d1:24:cf:57:88:
24:88:1c:e3:f4:fa:ae:c4:9c:e9:c6:9a:50:db:0b:
6c:59:14:85:9f:8b:07:42:25:9a:d3:5c:c7:d4:c1:
e6:75:23:2f:c0:05:66:f6:85:db:bc:9d:e9:91:28:
55:e2:c2:94:f5:a3:ef:f0:26:69:88:d4:46:1f:6f:
25:69:a5:e7:15:e6:cc:44:1b:4e:3f:97:2a:0b:88:
e4:d1:62:11:0b:ed:cb:91:ee:08:db:59:a1:ee:c4:
79:45:9c:ba:c4:f6:8d:5b:36:89:8c:14:ec:ae:fe:
f8:0d:c2:a1:29:c8:b6:f2:1b:12:f5:bc:20:96:62:
a9:c3:35:12:2e:18:1f:bf:da:87:21:d5:f1:c0:f3:
ad:c4:7e:93:18:97:b6:2a:c4:a3:be:c4:fb:7d:40:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:EB:C8:E4:5C:C7:91:ED:71:1D:ED:A8:AD:B1:36:60:E2:E0:16
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c4:10:74:e6:b4:86:b7:5a:20:83:9b:bc:f5:d4:f9:2f:b4:
29:52:7c:4c:f3:48:d5:21:c1:ed:df:8e:c2:5c:8b:8e:b5:66:
de:db:73:24:9c:5c:29:3c:9b:a7:5a:cd:fb:50:e9:40:b2:77:
68:5a:40:df:e6:46:da:8c:ad:ee:1a:18:4b:ce:f2:99:11:37:
d4:d8:69:3d:b3:80:27:e5:4c:c4:30:3e:47:68:23:64:c4:cd:
ed:fd:51:ab:98:d2:59:37:a8:50:0f:ad:6d:0e:ad:ac:40:dc:
be:28:04:46:c7:b1:1b:9e:4a:88:a0:67:a4:5b:b0:d4:05:7a:
7a:35:4d:68:3f:07:19:ba:3f:93:7b:6d:88:26:5a:1b:76:38:
a9:e9:32:cb:be:04:ce:e0:6a:f0:85:24:d9:6a:ab:9a:73:46:
b9:89:cc:0d:5a:4b:44:96:34:73:c0:39:b7:93:d1:a1:c5:01:
4e:74:33:6f:b9:e1:dd:e0:2d:67:b3:26:4e:72:1d:f4:b4:9c:
61:b8:4f:14:32:bd:53:cf:cf:ed:a8:d5:e0:25:10:a9:e5:30:
0b:b4:0c:74:d8:1e:92:c9:78:25:9d:2a:a3:6e:3e:bd:32:2f:
f8:57:79:83:b9:9e:02:bf:80:14:e0:0b:76:8c:99:0b:59:41:
67:3d:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:31 2026 by rpki-client