Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
File: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft (raw, json)
Hash identifier: XSvu+HP0DSWRWgy8mI4AmfTIw7KhNGqHKCJh8j6mvHA=
Subject key identifier: 0F:E4:FE:51:62:0C:79:FD:02:94:86:78:A9:43:D6:4D:6A:26:CF:12
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial: 019D33E4061454477BD118A0836F605C8A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
Manifest number: B4
Signing time: Sat 28 Mar 2026 10:01:14 +0000
Manifest this update: Sat 28 Mar 2026 10:01:14 +0000
Manifest next update: Sun 29 Mar 2026 10:01:14 +0000
Files and hashes: 1: Qkmm8NzglIDSaRRojnPgAONoFTs.roa (hash: +ytJC/qxZWUUZ4DE43GZcN4/00ano+1+6kAJf6whSh4=)
2: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl (hash: I8FrOyJ7KFVTaFAgxLj58JnAkDJ1V7urV40BwwrZ9G4=)
3: fS9DhAA3eiG8HtVq67hAVe5MUHU.roa (hash: IiJhrxZlH7dtIcu6+WjaoQeyu/z5L+5HOr52j6mMjfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:06:14:54:47:7b:d1:18:a0:83:6f:60:5c:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
Validity
Not Before: Mar 28 10:01:14 2026 GMT
Not After : Mar 29 10:01:14 2026 GMT
Subject: CN=0fe4fe51620c79fd02948678a943d64d6a26cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:fe:80:0f:2c:f4:fb:15:79:46:0e:39:77:
14:d2:47:8e:e3:fc:bc:6e:8f:cc:45:67:ea:a0:6b:
ee:57:0b:d9:bd:09:9a:bd:87:e9:ac:9d:71:39:c6:
cf:0b:97:7f:74:fc:69:c6:e8:3d:42:12:e4:cd:d8:
92:19:76:fc:2a:2c:f2:be:c5:92:5d:ad:64:85:ae:
33:96:29:66:b0:ef:39:1b:85:8d:66:5a:e3:6d:e5:
14:4a:22:6c:2a:06:9a:f8:f5:26:11:15:86:03:6d:
00:ad:db:7d:a8:e3:f4:af:ae:45:df:40:e4:14:44:
57:ce:3c:fc:5a:70:72:af:f8:70:52:d6:10:47:26:
47:09:8c:1a:3e:ae:1a:35:34:e9:e5:09:1e:35:fd:
c9:eb:3f:24:cc:2a:43:a8:83:07:b4:ba:0a:bc:38:
1e:4f:d3:75:41:99:31:5a:ef:65:52:1e:ea:85:28:
32:06:3c:ac:c5:00:21:f8:cd:f8:15:69:13:a4:aa:
d4:04:ea:6a:d0:97:ca:79:67:b5:d9:a3:b3:3d:97:
82:11:cf:7b:1b:84:79:18:73:b2:85:5a:03:8d:a6:
4c:82:ac:f1:3f:bb:6b:cd:c5:eb:39:88:71:b0:91:
1f:c2:fb:aa:82:2e:17:7a:0a:2a:16:84:10:b8:2b:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:FE:51:62:0C:79:FD:02:94:86:78:A9:43:D6:4D:6A:26:CF:12
X509v3 Authority Key Identifier:
keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:df:07:9e:06:91:31:3f:1d:5b:19:62:a7:87:6b:10:5d:
79:eb:1f:e2:01:f6:61:c8:d3:63:0e:6c:8d:a1:1a:6d:cd:79:
ac:74:40:d9:10:0c:0a:d7:8b:f7:f0:84:99:e3:6f:48:2d:3c:
af:b0:7b:6b:fd:82:ff:d8:cb:93:35:fd:30:46:43:9b:3c:c6:
f3:80:20:bf:14:35:1c:bb:77:12:69:bc:3f:7a:2b:83:76:64:
07:32:3f:50:72:31:bb:fe:97:b1:75:e7:57:61:93:b0:51:4f:
db:3e:a5:7c:4d:64:31:55:28:e9:74:9f:09:ea:f8:e2:f7:3c:
6c:de:82:a7:2a:b3:40:7a:7b:19:51:e5:be:c4:ab:b8:69:8b:
a3:db:45:cb:c0:44:2f:df:fe:21:ec:4d:3a:47:1e:ea:1a:b3:
cd:63:52:a2:c2:b8:e0:f8:0c:cd:9a:fa:b9:e3:db:0a:5c:e1:
66:c2:15:7e:4f:ba:73:37:b2:b7:a8:df:e7:dc:10:dd:ee:d3:
e8:e4:fa:8e:97:7c:5c:33:c5:10:21:bf:1e:95:ea:2f:92:5c:
1d:0e:c3:d5:53:5a:41:8c:a7:4c:17:46:c0:3b:ce:ea:4f:c1:
ae:4d:cf:61:38:30:30:19:07:0d:71:8f:a8:b3:2c:15:2a:d1:
75:26:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:09 2026 by rpki-client