Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: vtzw+Vu3VYHEWnKXavuZP9g58+oDc/6Gpuc4kl7X+nk=
Subject key identifier: DB:E5:6B:7E:B0:23:FD:F6:7A:91:A4:96:4B:F1:3E:C4:1F:61:FA:5B
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019D273A87D041FE5191715BF20DBB8633D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
2: gjHfWoEHc9QTn6Mvq7ZDpa1HWi0.roa (hash: qlBolvwxAE3Oa4lo8khdT9eAg5j/fv2rE6rmykA9rEE=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: 47hYwXRpRQLBwjXL80oI/RtFECagLOvfnV/2/yXKGYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:87:d0:41:fe:51:91:71:5b:f2:0d:bb:86:33:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=dbe56b7eb023fdf67a91a4964bf13ec41f61fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:9f:32:cd:4d:5e:19:34:e4:54:8a:63:98:
b0:dd:32:d0:65:75:ac:90:ec:34:2c:71:43:d4:18:
f9:fa:5c:9e:22:2f:a7:7b:4f:be:0a:0b:ac:b5:95:
db:b1:d1:e4:57:6d:e8:70:a9:25:f5:55:42:5d:95:
dc:cf:2e:d0:62:9a:29:c1:e1:59:cb:83:be:b3:ae:
29:f2:67:49:3e:7a:96:68:5c:91:44:f9:e0:4c:a4:
58:6c:c7:46:8e:4d:ff:2a:07:aa:38:4a:99:f4:a2:
cd:d6:ed:2d:4c:ec:52:10:ad:d2:b5:bb:ad:34:02:
6c:ac:1d:85:9d:48:7a:9b:dd:b0:3e:64:62:5a:ea:
0c:66:44:8b:eb:5d:ac:ad:52:0f:90:cd:f2:62:ad:
23:a2:95:75:2c:20:42:55:02:0c:a3:68:80:e4:bd:
0e:b2:2c:a5:1c:c8:2f:49:c9:f8:0f:9d:f2:91:05:
db:a2:19:86:0e:64:2f:d0:89:7e:d6:77:ee:c2:5a:
46:09:18:b1:d3:e2:02:6c:55:0e:a8:2d:75:b9:19:
d7:e0:12:fc:6f:86:b6:70:9a:50:b2:89:ad:44:e2:
86:ec:c2:6b:5c:c3:20:4c:51:86:a8:d4:33:44:ea:
50:56:97:a0:cb:ed:c7:d2:79:49:4c:f2:a8:f5:21:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:6B:7E:B0:23:FD:F6:7A:91:A4:96:4B:F1:3E:C4:1F:61:FA:5B
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2d:d8:86:89:af:bf:0a:ba:e9:43:45:6a:e3:11:f8:b1:d0:
ed:3d:47:70:3a:77:d7:f4:1a:9b:41:3c:68:d3:e8:5a:2c:f1:
e4:92:e0:fb:79:f1:8a:e9:56:c7:40:98:b5:02:cc:af:2a:5f:
46:05:4f:16:65:57:4f:68:66:18:99:a0:a8:89:b7:84:a2:cf:
89:aa:ba:c9:1c:2f:02:4a:57:28:e2:74:b6:ad:04:08:25:a3:
4d:49:0d:0a:97:8f:da:71:ab:31:c4:0c:1d:af:6d:3c:07:36:
ad:e3:15:2e:cd:94:d3:fa:f9:20:3f:44:f9:0c:bd:25:3d:5e:
79:9f:6a:a7:46:28:97:e3:f2:a3:6e:97:df:d0:5d:29:ee:aa:
c3:98:92:a8:a4:91:2e:40:ec:96:3a:49:bd:ed:38:31:01:d1:
cd:8f:22:7d:e8:67:db:ae:c3:89:f0:e9:71:70:bf:71:4b:fe:
26:52:b1:c1:ae:8c:74:77:ee:c1:e8:12:b7:84:86:34:dd:42:
cc:de:ef:f0:ad:25:5a:b2:94:ea:6b:61:5b:9d:80:e5:5b:fa:
aa:21:d5:ce:c6:ee:54:fd:fc:b2:a4:c2:1e:8b:d8:9a:87:10:
76:8f:09:03:3e:83:ed:3f:92:51:27:55:22:e1:61:b3:65:b3:
b7:6b:f1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:21 2026 by rpki-client