Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: VPZpzRDM5DN2Hkx0Hq2ndzcAbEyuJeF0uxWUEhaxFaI=
Subject key identifier: BE:3F:CC:B5:E3:A4:56:95:1B:53:C5:C3:28:54:C1:5D:78:41:FA:B8
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 019D2771DB315BDA1582BCADC950C8B11660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 0461
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: gH26acr/DJEz30e1loVk0lNwb1HE1cR/dEQ/q5QH28I=)
2: onU8z40HzXbnWY9IaUiQLwKDFGU.roa (hash: JmAau5mAfXMJlxpYOlZN7re/iLo9qI2ZxQ8BfJtKX+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:db:31:5b:da:15:82:bc:ad:c9:50:c8:b1:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=be3fccb5e3a456951b53c5c32854c15d7841fab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:62:a4:a2:16:3b:e8:25:c3:5b:cd:3f:21:
c3:59:cb:09:fb:6f:f0:67:f7:23:08:d5:86:cc:c9:
da:10:3e:c7:5f:da:87:42:10:e6:a2:97:05:66:9d:
52:31:3e:4d:c1:51:d4:b8:58:a0:76:1d:74:12:f3:
ef:96:f9:9d:e7:9d:6a:68:7c:f0:99:12:ee:dd:2c:
00:c1:dc:2f:55:ce:dc:ff:8f:c8:64:96:bb:f9:e7:
65:c7:94:d3:52:c0:00:00:a7:6e:52:01:cc:54:71:
b9:30:08:8c:03:3e:a1:d0:66:80:8b:5d:62:62:57:
d8:99:d4:3e:8d:7e:38:c0:f5:92:59:89:65:cc:7f:
8d:ad:fd:a9:65:79:15:a2:7d:96:1f:1b:29:7b:45:
f0:4c:f8:25:2e:6c:42:da:29:fc:7a:ae:b9:9f:d7:
e0:17:6b:d0:a1:ed:4c:dc:31:c6:28:78:f9:eb:1f:
3f:2c:c5:cc:97:d2:d7:4d:3a:19:a4:10:07:78:f6:
6c:ac:42:91:14:58:2b:53:82:f1:96:9f:af:45:15:
9a:d3:b4:4a:fa:bc:06:bd:5b:89:22:00:c5:1c:f8:
6f:42:a2:a2:1a:4d:82:ec:7d:be:38:95:f5:b9:7a:
d5:32:7d:e0:7b:44:fb:56:08:ad:31:ad:83:e4:58:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:CC:B5:E3:A4:56:95:1B:53:C5:C3:28:54:C1:5D:78:41:FA:B8
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:06:35:68:27:d5:29:86:b7:53:76:4b:53:1c:e6:9a:5c:42:
9c:c6:9d:31:5f:6e:ea:89:f6:82:57:a6:95:f4:b4:7e:01:72:
e8:1d:53:2c:bb:c9:20:e1:99:d0:f5:7f:ed:d6:c6:5b:9f:df:
5a:7e:d5:47:eb:4b:f5:89:3a:d1:4b:04:cb:b8:44:b0:ce:1f:
6a:76:c0:96:1c:82:99:15:70:8a:4c:b1:c4:27:e5:28:8a:12:
c5:3c:0d:7e:84:89:5a:7a:b4:83:f0:a9:1f:95:ca:1e:59:72:
09:57:56:6f:29:4c:0b:cd:b1:bd:e5:ea:1f:01:f5:d7:e9:f4:
4a:99:da:95:a8:e2:8b:d0:4e:5c:bd:07:d6:09:60:cc:a2:6f:
94:3b:84:1d:d7:0e:9a:4b:e7:1d:aa:f1:30:9d:b9:22:bc:76:
4e:d8:b5:a8:18:cc:ea:d5:de:fe:86:f8:bc:87:89:87:c3:22:
71:a3:f7:21:10:92:1a:72:62:0b:7b:68:f4:d8:83:f9:50:5c:
df:08:7c:21:ac:4f:65:a3:d3:52:4c:e7:04:60:4e:d1:c7:f2:
2f:73:5b:f9:15:24:b1:ac:be:a8:c4:fe:a0:4c:8f:31:93:6e:
3f:66:ae:ce:08:8d:fd:3a:b4:24:81:54:ae:88:27:3f:72:46:
be:0a:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:23 2026 by rpki-client