Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: xz0eXKXc6gHNt8WjvwZpXkQ/Bp6Px1JckQKHY0cVR60=
Subject key identifier: E1:CF:67:20:C8:34:6C:1A:9D:3B:04:91:BA:B4:5A:F6:4C:29:92:7F
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 019D29294547295B995A63BAA7E26735DBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 151A
Signing time: Thu 26 Mar 2026 08:01:03 +0000
Manifest this update: Thu 26 Mar 2026 08:01:03 +0000
Manifest next update: Fri 27 Mar 2026 08:01:03 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: pTgo4cyHS7b8nzalVIYxCES3odKPa9CEmDeY+6DCgqM=)
2: fpHmAafjOGhBaMS1gbhoimd-T64.roa (hash: tNORG3Af35zgXnyNJfcnl9XFHgufLnvK+eM/0nmyONM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:45:47:29:5b:99:5a:63:ba:a7:e2:67:35:db:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Mar 26 08:01:03 2026 GMT
Not After : Mar 27 08:01:03 2026 GMT
Subject: CN=e1cf6720c8346c1a9d3b0491bab45af64c29927f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:d8:7e:e1:d0:4b:a7:91:52:95:28:d6:e9:
3f:94:b7:29:7a:be:5c:dd:63:6a:a9:39:61:73:cf:
88:79:5f:66:d0:1c:02:a1:b5:26:c1:93:6c:b4:77:
46:87:ac:a5:cc:38:80:c8:a5:bd:11:27:93:30:c2:
e6:e4:66:dd:d1:c7:f5:61:87:86:08:3f:d0:fd:e5:
35:20:65:dd:68:73:2b:4f:7d:74:f0:72:4f:1a:d1:
0e:ed:de:64:d1:4e:b9:fc:76:9f:31:51:82:9b:d8:
ef:db:70:92:cd:69:7e:8d:3f:cd:cf:85:6d:61:8c:
ef:0c:93:a8:2d:8e:2f:96:7c:3f:a8:07:6c:0e:4e:
62:eb:b0:ab:ad:4f:57:ab:3b:1a:12:6b:9b:76:c4:
75:53:5b:08:0f:c8:c9:15:06:66:ca:65:af:a5:87:
fa:bb:8c:ba:90:16:08:31:76:cd:25:89:4a:cc:f0:
2a:08:d8:49:39:69:ba:ba:a1:5a:3e:ef:77:1a:b3:
76:6e:22:cf:cb:b8:e2:77:e0:3c:ed:d3:92:98:86:
d1:78:a5:60:18:3c:7a:c7:dc:9e:f8:4c:8c:89:af:
4e:31:20:dd:bc:0e:ec:c0:e9:7b:36:9b:70:90:9d:
ae:13:f1:c0:64:68:a6:f6:f3:27:05:25:49:bc:0e:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:67:20:C8:34:6C:1A:9D:3B:04:91:BA:B4:5A:F6:4C:29:92:7F
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:df:0b:00:a9:f3:45:68:a9:d6:d2:ac:4d:8a:90:cf:ed:
0e:6a:f7:b0:d6:4e:b8:91:ab:e0:6c:a0:fd:ea:65:91:a2:a8:
90:cc:b1:04:b6:fb:b2:bf:6b:ff:c7:48:94:bd:e8:5d:b9:92:
8c:3d:86:a5:a7:92:51:c6:69:f3:3a:a0:c8:b9:62:db:75:b8:
0e:29:5b:d8:f1:61:6c:25:aa:2a:59:c4:2a:24:78:56:68:cc:
da:5d:1a:93:2c:27:e5:dd:a6:48:f0:34:76:7f:40:99:94:6e:
dd:2c:bd:96:a2:43:cf:cb:8c:af:12:40:7a:68:2f:ff:e7:ce:
9f:d5:67:28:2a:d5:96:40:38:cc:94:56:eb:ad:bb:ba:9e:aa:
13:05:3a:2b:da:7f:7d:bf:33:6f:cf:d5:03:86:4a:14:9c:b6:
f3:67:00:d7:80:bb:b4:07:e6:5a:36:a5:e3:44:7d:27:a6:e5:
39:04:3f:cc:d5:a7:ab:e8:c4:31:a7:b6:c4:73:3f:85:8d:05:
1b:b0:bb:9f:90:db:f9:5f:5f:2d:b3:b9:c9:da:97:c6:db:77:
85:dc:12:4c:4b:b7:13:74:d8:d1:c5:41:4c:28:8d:ef:d6:86:
46:ee:f0:9e:ab:d5:43:14:09:d4:e5:b9:38:5d:b5:44:59:52:
68:2a:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:45 2026 by rpki-client