Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: Jxjgk0rRKr427Z1O1HNOKs1jfdlxHFvO5pYTZG3dJCI=
Subject key identifier: D7:5A:80:FB:EA:28:82:DE:C3:63:97:0F:D7:6F:F3:83:7F:7F:5F:42
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 019D2695F7CBC3295F43EA1C2B3B1E8D9329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 144F
Signing time: Wed 25 Mar 2026 20:00:55 +0000
Manifest this update: Wed 25 Mar 2026 20:00:55 +0000
Manifest next update: Thu 26 Mar 2026 20:00:55 +0000
Files and hashes: 1: 73UCxpDNZULQFzYAsKDQ1A7nLKI.roa (hash: Puc2EYq06Fc5Snei+nqiCectlFMfZtUPb3hps442dL8=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: HqXi/A/iLFZodeArf3j+ZTXkQcpwzwaY5M9Vn9ZndBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f7:cb:c3:29:5f:43:ea:1c:2b:3b:1e:8d:93:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Mar 25 20:00:55 2026 GMT
Not After : Mar 26 20:00:55 2026 GMT
Subject: CN=d75a80fbea2882dec363970fd76ff3837f7f5f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:41:09:6c:2e:2d:c8:4a:17:33:e4:45:79:
73:93:25:2d:4b:64:98:2f:6c:8c:7e:23:e4:a3:39:
47:f4:63:f4:dc:8e:73:19:38:21:67:d9:4b:20:a8:
c1:a7:a4:1b:f8:82:d7:1a:42:ff:71:ee:38:18:7c:
90:a9:23:8e:84:27:f3:60:f5:d7:d2:35:70:1e:f6:
20:49:05:4c:6f:9a:06:2f:0c:a9:89:b9:2c:dd:f3:
b9:99:78:c5:ef:6a:9e:a7:85:22:02:6f:b9:af:a8:
e4:94:c8:94:fc:71:38:21:7f:7d:1f:07:1a:33:e8:
e4:d0:92:99:9a:16:1f:1d:73:97:e5:0d:88:a4:06:
79:44:9f:a4:e8:a1:18:1d:90:fa:1d:62:bc:b0:e6:
6e:1a:71:bb:22:03:2c:3d:bf:49:64:97:85:e8:f8:
ea:b1:cf:af:3b:c9:55:0d:54:d8:8c:18:84:44:81:
d9:33:57:31:2a:64:eb:c7:e7:58:87:e3:4e:44:21:
eb:b3:18:c1:f3:34:3b:50:cc:69:42:fe:4f:82:75:
fa:38:ab:56:19:df:29:79:9e:83:68:a9:97:1f:76:
fb:94:d5:51:c2:f0:44:d9:d4:70:92:92:ac:bd:bb:
b9:7b:4d:cb:06:51:d0:0d:0f:4a:72:25:0d:05:ca:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5A:80:FB:EA:28:82:DE:C3:63:97:0F:D7:6F:F3:83:7F:7F:5F:42
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5a:59:0b:70:fd:7b:ff:6b:62:a7:2c:12:8e:21:94:f4:f8:
d4:46:22:62:86:d4:27:d6:4e:0a:b6:f9:1b:19:12:f7:c3:25:
33:13:1b:67:4d:f7:b0:ab:3a:44:87:3e:8b:58:0f:af:c9:29:
40:84:5f:7e:63:c2:1e:1f:eb:e9:1f:86:13:25:9c:2e:6e:bd:
02:0c:cb:02:94:91:a7:ce:81:69:0e:f3:7f:16:3d:c3:45:bc:
f1:02:81:fa:39:37:80:11:5c:39:88:81:7b:19:af:f0:88:3f:
b6:4a:7f:21:1f:81:16:3c:a4:b6:9c:a8:f2:96:a5:f3:7c:b3:
51:ab:5a:79:2c:20:b8:f5:39:f4:21:0b:79:df:b3:c3:0f:d0:
60:64:20:43:43:c9:59:8a:57:7d:b2:89:11:6a:91:11:36:94:
68:b3:0d:8d:92:d8:7c:d0:f0:7a:d1:c6:63:7b:f8:6c:2a:16:
db:b3:d5:8d:09:d4:22:4f:42:9c:49:90:5f:7f:36:2b:62:9b:
f2:ca:7b:cd:b2:67:e0:a1:64:ac:18:b6:bf:b1:14:39:d5:1b:
4e:1d:01:64:86:79:73:8e:e0:eb:ab:a2:32:2e:f6:57:3e:cb:
4d:0b:63:3b:b5:dd:96:07:7b:cd:09:7e:19:be:b9:30:55:68:
d7:79:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:33 2026 by rpki-client