Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: ixdAfh1/CEhjnInw3sF0S13xyRM61vSuSmLKYrfkLug=
Subject key identifier: AE:54:C3:D4:6A:51:67:15:E1:96:8E:3E:D6:A4:D7:32:FD:C1:F4:BE
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019D2583AE0133063E177AEB0933C67D957F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0A73
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=)
2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=)
3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: E4JB2X+jtn9o7OQe0ZGWl5QbmcqUgv3FBWrHFtaVF/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ae:01:33:06:3e:17:7a:eb:09:33:c6:7d:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=ae54c3d46a516715e1968e3ed6a4d732fdc1f4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:8b:1f:e5:ff:b7:fe:e0:6a:af:d9:64:fe:
c2:6f:a6:ae:70:11:2a:db:b5:9d:d1:91:c6:81:90:
16:ad:ba:25:86:e7:76:1f:d5:79:c6:6e:6b:23:36:
61:90:ac:fc:34:fb:54:67:62:3b:3f:dd:51:36:92:
15:79:87:3b:5b:c2:00:78:9c:43:9d:ff:5d:0c:fc:
22:95:e8:9d:e6:38:d3:24:81:b5:b8:a7:d9:24:34:
3c:4a:55:36:6a:21:88:a2:90:81:3b:21:ab:89:04:
54:24:c8:6a:2f:17:a0:45:6b:5e:68:e6:43:6b:73:
5d:7b:b2:0e:2c:15:ad:f6:ea:23:04:37:02:a0:52:
57:77:88:8f:84:16:a3:4e:af:a8:8c:2a:99:2a:03:
e9:2f:c9:c2:5b:9e:55:6b:3a:09:f6:85:5a:89:d2:
ad:70:e3:dc:7c:02:3d:04:b3:a1:0d:7a:2e:82:d3:
95:9a:ce:81:25:fc:f9:1e:4f:86:20:44:0a:1d:89:
bd:86:53:98:77:45:1c:0d:a6:ca:13:c8:f7:f2:53:
76:e7:22:57:ee:01:08:dc:15:47:6a:98:e7:51:97:
99:ce:c3:45:08:64:9e:2e:9f:0c:c2:56:a0:4b:26:
1d:f7:48:47:4f:4d:07:6b:97:d8:9e:d3:fe:b5:27:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:C3:D4:6A:51:67:15:E1:96:8E:3E:D6:A4:D7:32:FD:C1:F4:BE
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:e5:69:59:6a:35:7b:9d:ce:8b:14:f8:2f:10:49:0a:bb:
a8:47:74:18:c9:b8:f3:3d:c3:1d:a9:86:f0:d2:fa:04:4d:15:
69:cc:2f:28:72:e2:ec:35:be:e8:f7:04:8e:33:35:4d:7f:3b:
95:92:25:fa:1d:aa:f3:6a:4d:b2:21:cc:b9:ee:2b:99:9d:7b:
a8:35:04:d3:dd:15:18:46:83:5b:07:6b:19:44:db:dc:fd:40:
15:f5:39:f8:04:ff:7f:de:66:d7:d3:02:40:5b:8c:14:80:b9:
de:0f:4d:2a:d7:8d:d7:8c:3b:e3:a6:df:ac:4c:60:0e:06:3c:
10:f8:45:0b:94:19:1d:4c:58:ab:66:1b:06:12:77:00:ac:18:
24:21:f9:45:9d:40:4e:4f:26:72:b1:67:d4:62:45:a3:6b:68:
f1:04:63:9c:d6:ef:fe:f0:ca:05:32:14:6e:30:ea:1f:d0:d2:
68:0c:1e:ef:ac:ec:13:ff:39:fb:e5:c6:39:47:d2:8b:bb:88:
9c:f2:1c:ea:f8:0a:2c:db:8e:d9:56:ee:e0:92:fa:9c:f4:ef:
19:0a:53:c1:0a:4e:f6:07:b4:6e:6a:5a:07:7f:f2:27:85:75:
2e:a0:4d:0d:6d:d5:dd:0e:e9:21:46:98:a3:0d:c1:84:97:62:
98:bc:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:12 2026 by rpki-client