Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: IfaEuEwl2dX2iYsyuwQUNV8cCQamLD3Zo+9Mgcm9HZ0=
Subject key identifier: 85:C7:01:BB:93:2A:71:67:48:4F:76:0D:4E:E4:41:5F:26:8F:E7:BC
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019D277281E318541AEA988DB8D77308479A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: 2P84CxS3Pz1RF98xXal41ivqXnwrv3869p+IiMeXoWw=)
2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:81:e3:18:54:1a:ea:98:8d:b8:d7:73:08:47:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=85c701bb932a7167484f760d4ee4415f268fe7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:59:00:20:21:a7:a0:27:38:d2:34:5a:0e:44:
75:f9:7d:53:c4:c4:43:a0:4b:36:6a:dc:88:d7:99:
98:6d:f2:48:4c:20:23:9f:5a:c7:36:0c:3d:96:c6:
6e:a8:53:82:6e:de:e5:4f:43:9f:1d:49:6f:bb:74:
48:d7:9a:e1:49:06:b6:12:ab:4c:6b:da:e9:fb:9d:
06:f4:1c:13:90:88:9b:61:43:a2:4d:68:eb:2c:ee:
b1:16:36:3c:2f:76:30:67:af:79:f7:3c:5f:87:7c:
56:eb:49:3f:1e:bb:a7:b6:ea:1a:0a:0d:0c:73:16:
e5:9d:13:36:c4:ca:fc:aa:3d:5e:d3:59:ae:c5:0d:
64:1b:61:bf:6d:55:14:98:4c:27:32:12:83:0f:b5:
d1:48:fb:f6:e1:9c:9b:11:b2:ae:0e:79:97:f4:6a:
ac:6b:f8:1d:ab:2e:90:5b:53:1b:d5:25:fd:76:66:
18:0b:f6:23:32:99:36:6b:36:57:ba:f3:37:41:a7:
da:23:f6:05:17:5e:cd:60:00:3e:6d:42:40:e6:f2:
b7:29:6c:54:af:a6:75:aa:2c:40:e6:73:15:92:64:
8e:03:88:a4:fb:9e:89:de:30:2d:29:31:25:c9:ec:
b0:8f:43:64:a3:69:62:79:5a:e9:0d:df:39:a8:88:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:01:BB:93:2A:71:67:48:4F:76:0D:4E:E4:41:5F:26:8F:E7:BC
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d9:81:c4:2e:f9:b5:73:ec:c3:16:ea:d6:19:e9:2a:ad:86:
4a:b6:e1:90:e2:98:df:dc:0b:c5:d8:9e:a6:ae:c5:bb:3c:b7:
e6:f4:25:67:bc:74:a9:38:4c:fb:36:b8:cb:c8:39:7e:e3:ad:
0b:7e:8f:ae:76:e9:d4:b4:4d:22:e9:d1:64:05:17:9a:b3:72:
9c:fb:6e:5a:4c:e7:9f:a0:d5:ee:6b:7d:b0:29:13:c2:f1:d6:
e0:9b:8d:98:b7:72:4b:fb:1c:c8:90:1b:d4:c1:aa:ba:a9:7f:
e9:4d:fc:fb:ab:a9:5f:37:31:d4:45:7f:5f:ad:54:77:99:2a:
ee:44:7c:9d:cc:b6:6a:f8:8e:e4:05:9f:b7:eb:49:c3:4a:2e:
dd:22:58:3a:5b:3d:90:93:cf:77:a8:fd:8c:ba:6b:7b:a7:fe:
e3:60:73:25:f2:b3:53:c7:84:b3:63:af:22:6e:15:7e:27:32:
ea:fa:6e:6d:81:0a:49:32:e9:2e:c0:39:26:7a:74:d5:2a:25:
9e:16:d0:ec:80:36:cb:e1:b5:d9:f5:4e:55:6e:70:53:e2:53:
5f:6b:4a:5e:b2:a9:ac:3e:0e:eb:8e:3d:6f:3d:71:d4:23:4a:
bf:97:64:cc:b7:45:f9:ba:29:d5:12:d7:61:74:9b:65:e0:d5:
a8:a3:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:03 2026 by rpki-client