Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
File: QvZoAOPk7qCxeqfOG-anEIW7C7U.mft (raw, json)
Hash identifier: Vc+WZxlNzkq4tQuWpbM+8hoHlgRVqCLX42+y+eITRHk=
Subject key identifier: 50:BA:B9:01:73:60:13:EE:E4:43:08:EC:48:22:84:AA:EB:EC:25:9C
Authority key identifier: 42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
Certificate issuer: /CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Certificate serial: 019D27A90EA139221D83F70D170D6053E2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
Manifest number: 01D4
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: QvZoAOPk7qCxeqfOG-anEIW7C7U.crl (hash: iDh1KTQ5o7KtjNsgtHhGIP4H/PJINWX6pdmu2kgay7s=)
2: n9a58dsjj-11JZXVNwGgDE0aR6o.roa (hash: /VwFrdihL0ZGB+9qxlSnirlGLekorqZnI5OlzYbZQaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0e:a1:39:22:1d:83:f7:0d:17:0d:60:53:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=50bab901736013eee44308ec482284aaebec259c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:a8:55:cd:d1:58:2a:6e:ac:e4:bf:2b:c7:
9c:a6:c3:ce:d4:ea:38:51:42:7e:0b:6d:9c:fc:bb:
47:64:a7:94:d8:9a:8c:b7:2f:a4:e5:6d:ad:eb:24:
23:30:2a:d3:b9:4a:3c:b1:1c:8d:04:03:e7:c0:4b:
79:c1:9e:21:e7:33:85:89:ef:ad:48:4e:a3:13:9c:
3a:74:2a:db:b5:3b:31:3f:0b:ef:4d:74:68:83:53:
a6:68:32:93:0d:e0:d9:c7:b2:fe:64:3e:44:c7:67:
2a:a9:d7:2d:31:3d:af:5f:21:87:62:77:81:74:6b:
88:24:7e:0d:c4:e7:8e:03:35:50:f5:82:8b:29:f7:
f4:e0:89:27:9f:ae:eb:1b:0a:4d:0e:f1:2d:45:df:
05:d4:d5:2d:3d:99:4b:d4:bc:83:5a:02:d1:7a:52:
fb:c6:9b:c8:f5:9e:ef:4a:de:42:b2:7e:bd:0f:4a:
37:a7:a4:03:be:b2:c4:d5:d7:c2:61:f5:d0:64:ef:
39:82:78:3e:91:05:e9:de:43:f0:ad:7a:41:fd:9d:
76:81:e1:2c:5d:06:9a:3a:d3:e0:67:24:5c:c9:87:
96:73:81:33:a0:71:5b:5e:3f:e3:7b:59:a7:4a:c2:
f9:70:c4:eb:40:6a:ed:13:bc:1d:b6:a0:91:c7:6f:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BA:B9:01:73:60:13:EE:E4:43:08:EC:48:22:84:AA:EB:EC:25:9C
X509v3 Authority Key Identifier:
keyid:42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:15:18:29:0d:32:96:f0:82:a3:59:18:56:77:b4:7e:33:7d:
54:18:0e:6a:31:39:33:34:31:1d:ae:58:19:9b:b8:0d:17:29:
a0:40:53:83:31:e7:89:20:55:6f:77:a2:fa:07:7c:e4:0b:72:
b4:38:f1:56:e9:a0:7b:13:6d:9d:7f:50:79:82:43:9e:cb:10:
27:3f:02:33:de:f3:3b:b5:f0:89:8d:31:2b:61:58:20:b0:ce:
cf:30:f9:07:60:b4:8f:ad:7e:d2:d7:e9:7d:09:0d:0e:59:6d:
b1:b9:e6:01:46:d6:02:9c:f3:b7:26:48:48:93:75:14:29:c8:
a7:6d:78:4c:ff:5e:34:4c:32:39:7a:22:45:82:da:a0:f6:0a:
3e:17:e0:26:b6:0a:7d:0b:50:65:d6:50:75:ad:94:c3:98:7c:
8a:8f:5a:16:49:34:99:da:ad:fc:3a:36:db:05:9a:8d:c8:c5:
21:ff:3d:36:d8:ad:43:3d:e6:49:02:2f:f2:4a:10:75:8e:b3:
9d:39:d5:ee:c8:38:ce:e5:3f:0f:5b:4b:b3:d9:7e:15:3b:c9:
a5:3d:03:07:c0:8a:4f:d8:bc:53:89:79:db:c0:07:b5:fd:95:
bf:96:be:e7:01:e4:40:45:9b:e2:53:53:59:c9:4c:81:d8:e5:
c9:6e:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:13 2026 by rpki-client