Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
File: QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json)
Hash identifier: ZUlWEzjjOX3fLaGTAXBzfRrizUAJ+LXCpVHbFxyUdT4=
Subject key identifier: 16:79:C0:4D:91:23:51:F9:52:E2:BF:10:4A:3E:C9:6B:4D:4A:98:A4
Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
Certificate issuer: /CN=40fc07299711adfa222e27b128b76d1d97450582
Certificate serial: 019D262835BE1644F0B2400614A7F1CF5C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
Manifest number: 1534
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: Oaq4tK2EcSBv0pKpH6jHqXOCCk4666dvpTwfcXhpLik=)
2: n3unGkFIp8-n-TNUkOQRjOKqebU.roa (hash: CIWlXFkIaFdHtn2kvnhoUCJuy+xps7328gEToUVe6jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:35:be:16:44:f0:b2:40:06:14:a7:f1:cf:5c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=1679c04d912351f952e2bf104a3ec96b4d4a98a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:47:64:bc:24:79:ed:f0:1d:8a:ee:46:8b:
1c:f6:e6:9e:a6:9b:f7:9b:8f:fc:c8:62:2b:72:be:
a0:21:6e:9a:04:36:a3:10:53:8c:5b:97:db:00:a4:
32:fa:25:99:38:82:de:29:a8:71:2c:1a:a9:79:ec:
f3:65:fa:7f:e8:a1:64:30:f0:e5:88:22:51:89:6f:
6d:b6:44:6e:8b:df:47:bf:21:12:3c:bf:fa:a1:58:
7d:a5:23:e7:f0:05:ac:7f:44:95:f1:51:13:19:15:
db:05:fd:77:dc:03:0d:3e:05:94:25:4c:a7:f2:f7:
bf:3b:1d:a7:77:fe:23:6b:66:14:44:11:6b:fb:43:
ad:4f:20:3d:cd:b0:05:4b:e6:18:c8:73:88:05:26:
da:62:e4:e7:4f:d1:7e:78:91:e4:01:7a:3c:5d:24:
f9:33:d3:38:af:83:7c:f4:f5:a5:2e:5c:b3:c0:15:
8b:ba:01:7b:9a:c0:2e:69:1e:c8:38:3b:2a:9f:3b:
f6:9a:bd:8f:2f:89:ea:19:eb:5e:fb:7c:5d:e1:09:
84:1a:ea:8b:4c:fd:02:72:28:68:2a:ce:e0:70:5d:
57:0b:73:8c:87:c2:50:d6:db:5e:98:ff:d7:0c:e9:
f4:44:18:bd:5b:27:a9:ce:9d:cf:f0:33:ae:9e:b4:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:C0:4D:91:23:51:F9:52:E2:BF:10:4A:3E:C9:6B:4D:4A:98:A4
X509v3 Authority Key Identifier:
keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:64:8e:fe:af:df:96:02:54:e9:5c:61:38:f8:68:5a:49:e7:
25:d0:58:f0:de:0f:f2:e0:a5:19:69:01:b4:76:41:3d:65:11:
31:17:e4:4b:a5:d6:f6:e0:04:10:fd:9f:62:a4:df:87:e7:84:
71:c1:3f:f2:6b:e4:79:bc:bb:73:48:4f:b7:e0:da:e4:0a:f8:
0a:13:f4:9c:90:f5:f9:a8:20:58:e6:04:93:fb:9a:53:b5:ad:
54:9d:16:a1:b6:b5:f8:81:5a:32:4b:74:fe:e0:f0:13:a8:05:
cc:6a:6c:bd:c5:57:8a:91:b3:e9:28:ce:a2:6d:c8:0a:b4:f8:
d3:a4:5f:e3:a4:94:fb:3f:a0:fe:55:a3:ae:bb:b1:6f:4c:c9:
13:e2:42:ce:0a:2d:29:6f:89:0e:3d:89:e7:2d:06:7f:4f:d3:
97:61:d6:d6:96:b4:48:b4:28:8f:0c:f2:81:eb:e1:e3:4d:77:
a3:98:8f:80:09:8d:15:85:f2:bc:f2:6c:69:d2:e9:4a:65:da:
e7:ea:03:96:e2:87:67:39:a2:bb:79:be:b4:bd:0a:3d:6c:f1:
10:2a:f4:75:44:04:8c:ed:42:bb:da:36:46:df:0e:e1:64:c8:
2f:10:6f:77:34:7a:79:64:0e:46:a3:0e:f3:55:03:6c:11:90:
b2:9c:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:11 2026 by rpki-client