Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: votH0Ce+v85gONgavgvTbDeZgD5Up+4bpHAOELPSo+k=
Subject key identifier: 73:D6:0D:14:86:89:F7:96:A6:4D:C4:52:63:2A:45:74:70:17:FE:57
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019D277282867BE3CAB469AF03187D1B0B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 111A
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: 1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa (hash: BkBrVdmzVpfXD4QvBO8xygY9UajM60k/x4abGcDGbmw=)
2: 9enrJ1aLGA3RCeme7xBZCB62agk.roa (hash: vRnXuA5NETYBT1BeqdHLACLYGuovCr87R2REHEDrMcI=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: Q09F9w7BqDffpSLLcBCQGMZclMDUupExX9q6egXf6EY=)
4: wSuoaH9wOLl866tBer1nWZMIWCc.roa (hash: IgY4urUfYKNfspzPi766lr6KcHLSrEwdZwQgGXHYG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:82:86:7b:e3:ca:b4:69:af:03:18:7d:1b:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=73d60d148689f796a64dc452632a45747017fe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:ba:a9:0e:58:ce:dd:63:d2:87:19:07:31:
6c:22:9c:08:ce:d4:d6:a8:57:56:a0:40:b6:0c:36:
0f:c9:ae:36:2a:1a:53:86:be:bc:63:c3:a7:5c:4c:
11:a7:dc:e9:20:52:7d:e3:27:1d:3a:ae:75:15:d6:
e9:32:92:03:8e:5f:46:3b:fa:85:bf:9b:79:77:c6:
ef:01:12:37:31:80:68:9d:72:2f:a2:e6:cf:b4:b4:
bb:89:90:c8:20:d8:be:83:6e:d8:4a:91:df:92:13:
40:8e:f1:65:22:74:cc:b0:fc:11:e3:e8:71:31:17:
22:19:65:80:81:7d:74:45:8f:5f:fd:82:f6:40:5b:
c8:37:dd:04:35:7e:ba:85:6c:7d:dc:c9:39:32:8f:
b2:6f:71:d8:50:26:6a:88:9f:ff:23:0a:d8:00:fb:
7b:1e:50:21:07:af:47:a7:24:86:97:e0:ac:0b:ff:
63:e7:3b:7b:dc:31:c6:af:9a:dc:d0:22:73:f9:57:
29:4b:01:4b:c3:d5:3a:54:d6:89:22:0d:7a:d2:5c:
85:bb:a8:d5:a4:b7:ed:d1:bf:31:3e:41:a8:38:99:
d6:d7:1f:8a:09:45:e9:41:0d:3c:9b:20:1d:6f:bb:
91:d5:d0:7b:da:94:96:49:90:8d:b8:08:e8:73:dc:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:0D:14:86:89:F7:96:A6:4D:C4:52:63:2A:45:74:70:17:FE:57
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:de:23:a8:54:38:4c:68:f1:2b:4a:0a:e9:71:b3:d1:ea:65:
f1:75:24:f7:d3:f5:2c:13:ac:52:53:77:d7:43:70:77:18:24:
10:e5:d8:02:e8:3e:38:ab:51:2a:67:84:28:04:a5:4e:19:44:
2a:bf:46:50:bf:10:02:9c:bd:07:9d:fe:e5:f2:0e:c5:9e:66:
24:24:30:48:a1:4e:cb:50:f4:19:d4:63:63:ef:da:17:d6:a6:
3d:ca:9d:84:2e:55:a0:f9:f1:45:8c:b3:4a:60:20:ea:55:a4:
2b:aa:f3:06:fb:39:af:83:b2:ee:37:45:c0:f7:83:5f:8e:21:
06:9b:26:ca:1b:b4:53:20:80:2b:32:8e:be:03:58:d5:44:4f:
66:cf:1f:c4:b6:6f:b3:85:ba:e9:de:ca:cc:14:2b:30:4f:97:
4a:91:92:21:8a:0e:8a:42:8a:ed:8c:32:0b:9d:29:63:2f:83:
69:10:d5:cd:f4:ac:5c:90:84:65:fe:f7:40:96:cb:c5:7c:cd:
4b:cd:f5:b9:94:04:20:37:b6:cb:d1:a8:ce:64:64:ea:76:64:
98:da:35:20:3a:56:fb:54:52:05:1c:2e:11:4d:7c:1d:e7:3c:
01:87:8a:97:6d:30:96:0a:6c:19:25:06:f1:fb:da:0c:9a:24:
01:ba:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:23 2026 by rpki-client