Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier: dj9o3jLnzDVtJgPw2o8QH7XMfppYvCOsoi6BPlqnUrE=
Subject key identifier: 25:EC:1E:E0:8D:A9:FB:E1:3C:CF:16:D3:A9:01:EA:D9:03:85:6B:9B
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial: 019D28F23F21AC1A4D566A99B3C98DDFC841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number: 116E
Signing time: Thu 26 Mar 2026 07:00:57 +0000
Manifest this update: Thu 26 Mar 2026 07:00:57 +0000
Manifest next update: Fri 27 Mar 2026 07:00:57 +0000
Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: oST7F/tXpXqlzf5i4BmQH+G68VzJbEbnijEczi/sREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3f:21:ac:1a:4d:56:6a:99:b3:c9:8d:df:c8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Validity
Not Before: Mar 26 07:00:57 2026 GMT
Not After : Mar 27 07:00:57 2026 GMT
Subject: CN=25ec1ee08da9fbe13ccf16d3a901ead903856b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:c4:19:b3:69:e3:2e:d2:a3:ab:4c:c8:c3:
9a:44:99:b3:a0:53:6e:a7:e3:3d:4f:2c:99:89:0f:
a3:c8:be:ec:8b:44:a4:4b:24:89:ea:6c:a7:2d:5d:
9b:72:82:d0:08:fa:d4:df:df:98:de:de:92:af:13:
a0:fd:89:e5:49:a7:eb:26:47:04:61:95:fd:1d:59:
23:b7:3b:91:7c:f2:0f:19:db:29:46:62:97:cc:8e:
08:64:a0:8b:28:0e:ec:7b:e0:b7:56:e6:54:3b:8c:
e4:ac:d4:48:48:70:ca:03:de:0f:57:0d:85:66:62:
f3:2d:d6:e8:98:bf:27:9d:2c:c9:09:5d:90:24:2e:
20:7f:34:57:4d:49:18:7f:9f:6b:77:67:e1:ae:b8:
d1:ee:e8:f1:62:10:a4:9f:66:3f:bd:45:53:36:f6:
d5:91:85:89:59:f1:c9:d7:c2:2e:f3:e0:0e:79:f9:
f0:07:ff:f7:b8:2a:02:8f:1b:df:6d:16:91:74:10:
71:3b:b1:85:7c:8e:d2:af:30:38:cf:6e:0c:6a:be:
48:8d:20:15:11:55:39:1f:c7:bc:1b:93:22:df:62:
f2:36:ab:df:7e:3e:ed:9f:c4:e8:7e:dc:d7:41:2f:
00:30:06:88:cd:48:11:ec:04:64:e0:5b:68:d0:8d:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:1E:E0:8D:A9:FB:E1:3C:CF:16:D3:A9:01:EA:D9:03:85:6B:9B
X509v3 Authority Key Identifier:
keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:fd:66:19:97:17:06:b1:a7:12:4b:b6:d3:68:8c:34:48:
b1:cf:dd:04:5e:5d:2e:45:0f:a2:21:f5:0e:8f:80:42:41:28:
97:87:f4:9e:42:19:f3:05:b8:ca:3a:c6:39:9f:a6:b8:8d:47:
41:21:af:83:5b:d4:49:bb:55:b2:ca:eb:79:04:fa:f7:4e:bd:
93:e9:79:ee:05:9a:c8:04:f6:18:d9:a9:23:ca:68:6c:e9:13:
b2:30:2e:83:9b:48:c5:d2:24:68:e3:42:c4:3b:8d:b4:7b:70:
2d:21:9d:25:3e:e0:33:07:63:4a:83:f9:3a:92:bc:70:28:a6:
89:d9:6d:a2:77:7c:9e:2a:c3:8b:bc:51:3c:91:37:4c:67:59:
85:b0:fc:ba:80:eb:96:85:ca:83:ba:e4:5b:e0:34:13:e3:e1:
2a:d0:4d:eb:97:bb:69:9c:18:ce:80:fc:a3:31:9d:cc:75:57:
2d:f5:44:ce:3c:42:7c:4a:58:04:03:b5:4b:31:79:22:cd:46:
60:6e:d8:3b:85:83:1d:97:3b:d1:56:a1:54:a2:bc:36:af:07:
2e:23:34:57:6b:a1:b7:be:51:bf:b8:70:d8:70:63:14:af:74:
85:28:c5:ce:1b:03:b4:21:48:c5:d5:f2:cd:53:91:39:59:29:
5a:12:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:54 2026 by rpki-client