Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: ics8kwKc314q1ItFlIJadbul6qusTSI6zwg47SWpFUA=
Subject key identifier: 11:5F:0E:4B:D7:03:C4:65:CB:C8:6C:26:B1:E0:F3:AF:DB:F5:C2:3E
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 019D27E03509CF919B3975259D725D333F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 134D
Signing time: Thu 26 Mar 2026 02:01:38 +0000
Manifest this update: Thu 26 Mar 2026 02:01:38 +0000
Manifest next update: Fri 27 Mar 2026 02:01:38 +0000
Files and hashes: 1: UXdNeJ_2Ddl0fTsV4WKpWbphuQI.roa (hash: 7YnRWBVkQ2KwpLyECOgcBh/stkchlYEprARWfyy/l+Q=)
2: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: MXDdNrAEfxt4ChaeqcIeBOtxeGFAvB15yS55TsFeFt0=)
3: w6aExTmK4M1JcDUj2sMwX4mRvWU.roa (hash: tK7qE6NFsnQxjHhUh4pWia2W9oNUWtIhK9S5aCgGRFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:35:09:cf:91:9b:39:75:25:9d:72:5d:33:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Mar 26 02:01:38 2026 GMT
Not After : Mar 27 02:01:38 2026 GMT
Subject: CN=115f0e4bd703c465cbc86c26b1e0f3afdbf5c23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:4e:6d:57:fe:b2:4f:0d:24:79:80:b7:c0:
d4:a3:42:36:eb:e6:a2:70:b6:22:0f:b9:38:6d:3a:
75:7d:fd:66:4a:ed:73:7c:6c:61:d4:82:aa:9f:fb:
e3:34:98:7d:aa:8e:ab:ca:e3:c1:d4:c2:31:7e:ea:
39:12:e0:a2:4f:9e:6c:26:ad:79:36:bd:6b:cc:aa:
c7:4c:32:72:5e:f9:d6:ad:11:ad:7c:f1:5d:9a:33:
6e:ba:94:36:6b:bc:a1:cb:81:f8:d4:18:b6:f6:0a:
fd:de:9d:a5:b3:34:2b:c5:80:8c:cf:7f:ac:20:31:
71:b8:e4:fa:fa:89:cb:19:be:19:de:05:da:15:5a:
8b:27:e2:36:e9:92:03:9b:9b:9a:de:49:22:87:d4:
08:1c:16:09:6f:9e:d7:63:78:09:62:30:d7:0b:09:
18:d7:85:33:da:97:d2:98:15:00:57:dd:82:a8:42:
3a:d0:db:9e:4e:4b:eb:31:09:5c:64:f9:9e:d4:20:
99:1d:56:f8:12:7e:40:8e:63:c4:4c:29:7c:6b:99:
1c:bd:88:d8:43:7c:0a:59:c5:14:64:04:0f:5e:02:
11:27:6e:12:82:bc:e9:2e:c0:dc:ea:dc:ca:57:dd:
d3:43:e8:6d:47:a0:ea:22:d1:94:b1:8b:c1:5e:78:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:0E:4B:D7:03:C4:65:CB:C8:6C:26:B1:E0:F3:AF:DB:F5:C2:3E
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:2c:77:f5:6d:f6:0b:7d:b0:14:d1:8e:1c:52:d8:61:c7:
c4:1b:49:dd:d5:a5:65:f5:7a:d3:0c:84:a2:88:ea:b7:66:38:
0b:65:a7:ed:5a:1a:a8:9a:53:d1:d4:f3:ab:76:09:ac:a6:06:
e1:d6:f9:df:c3:6f:b3:d1:a1:f2:72:9e:b2:f4:a5:8b:cb:df:
3c:85:c9:54:59:b1:e2:0c:f4:dd:8b:d5:2d:2d:89:21:80:12:
b7:ea:22:47:b8:86:1c:3d:54:f2:40:a5:4c:b1:50:be:88:6a:
aa:94:dc:57:25:a0:fc:61:d9:c6:23:04:c2:ef:7f:c5:65:76:
08:d4:57:43:00:ce:ec:fd:d3:28:30:36:6f:4b:65:b1:72:14:
55:8b:19:29:fc:37:39:78:59:b1:43:e4:f7:35:69:d6:57:0c:
f1:8b:9b:4f:9a:c0:3a:17:08:e5:07:92:e0:81:0f:29:b9:99:
8c:d5:4e:0f:b2:08:3b:16:21:db:a7:f8:5a:65:f1:0b:47:34:
f1:3d:d3:8e:3f:90:a5:11:aa:a0:82:ed:c2:31:3e:a7:ee:56:
0b:3d:2f:9a:23:d1:36:74:5f:e7:a8:33:4b:27:64:c6:b2:2d:
41:52:b5:95:e2:be:fc:af:78:5d:f1:53:13:a1:cb:87:04:c7:
d6:8e:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:54 2026 by rpki-client