Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier: eOfYXHjtptc6yTgAYoBHj0xBVR2UrInZokx3yB7wVrs=
Subject key identifier: 78:1D:AE:DC:4D:70:FC:5E:97:D0:3C:74:7E:49:11:22:1A:7A:14:FD
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 019D29611359C37052B57116A4F7806B40A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number: 13CB
Signing time: Thu 26 Mar 2026 09:02:00 +0000
Manifest this update: Thu 26 Mar 2026 09:02:00 +0000
Manifest next update: Fri 27 Mar 2026 09:02:00 +0000
Files and hashes: 1: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: CzzR0MOxoFRM+t3Ljo0jf9HOd5mXQMuem1dB2gx6n0o=)
2: dzhGd3IrijK6XFNXLPo3QbQe60A.roa (hash: DzSQmk0X+ZHEQPIeJMm37I+zInIF580tNRunoudFrPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:13:59:c3:70:52:b5:71:16:a4:f7:80:6b:40:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Mar 26 09:02:00 2026 GMT
Not After : Mar 27 09:02:00 2026 GMT
Subject: CN=781daedc4d70fc5e97d03c747e4911221a7a14fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:6a:a2:3d:26:56:08:7e:9c:02:ab:c5:ab:
e5:37:e7:22:b7:b4:ad:08:92:bb:b7:46:29:bc:57:
ee:87:cc:9f:c0:39:ad:b2:84:22:ef:56:49:52:7f:
ab:dc:7e:7d:97:35:69:2b:83:09:52:ac:30:3c:10:
67:02:07:40:7d:12:d3:d5:33:74:1f:7e:43:68:73:
a7:a6:38:5d:26:5d:1e:b7:5f:90:b9:eb:d0:bd:53:
3a:ed:ca:34:05:4d:ea:61:b7:98:ae:37:68:20:53:
1a:ae:ec:39:cb:ef:f9:43:a4:a1:ad:95:a2:68:25:
60:58:90:40:f0:72:88:52:0f:fb:b0:f4:38:a1:64:
9a:30:e0:32:d3:80:25:95:85:94:46:76:09:89:e3:
07:29:2f:29:c5:14:56:86:43:89:4e:d3:43:8b:b0:
c1:0f:ef:b6:32:03:3a:11:ab:cf:4a:ef:1d:b1:cd:
3b:98:bc:29:90:5a:5a:0b:e2:df:e9:46:c2:71:b6:
8a:7a:8c:ab:05:c1:40:74:42:59:9c:0c:e1:b0:a9:
c3:7a:54:ff:6d:05:3d:8b:fb:be:c8:f1:04:34:c8:
10:09:cd:c3:90:79:99:82:69:63:b7:37:f4:32:22:
34:ff:b1:2e:c7:e5:4a:0d:58:04:06:dd:3f:db:ee:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:AE:DC:4D:70:FC:5E:97:D0:3C:74:7E:49:11:22:1A:7A:14:FD
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:00:1d:8c:aa:56:dd:0e:73:2e:06:e2:d0:6f:5f:a1:fc:
75:8c:2b:15:25:59:21:0c:23:93:0b:d4:a8:03:3e:78:34:84:
47:53:c7:84:b5:68:9c:e6:35:9a:96:dc:4d:a2:cf:c5:fe:91:
5d:87:33:24:14:7f:e4:f5:e5:d7:1a:c9:67:67:30:fe:9c:66:
da:cb:a7:d3:ea:fe:ef:a9:9f:a8:06:8e:05:6e:1d:02:57:6e:
54:07:3d:a0:11:76:cc:4d:e0:00:4d:57:71:78:29:18:6a:e5:
f3:48:99:a6:31:36:ba:e7:d6:4a:d0:26:be:ce:f4:09:d7:f9:
0c:00:bb:00:09:cf:e5:65:69:14:f5:df:95:16:bb:e8:4b:56:
22:ed:67:1a:f5:87:c6:6d:ff:32:aa:b9:90:66:47:61:4b:66:
46:82:d6:13:80:e7:c8:48:3c:61:55:d3:05:3c:f6:f0:28:77:
95:7b:8b:c8:36:cb:53:a6:7a:2d:e0:79:55:81:00:bd:29:d9:
d3:a6:72:ae:62:c6:31:e5:f1:20:cb:a7:c8:04:15:2a:57:8e:
45:13:dc:42:7e:6b:59:51:bc:da:89:7e:13:3a:04:c1:1e:54:
af:f5:66:8e:6a:58:b9:3c:f7:e1:d0:6b:0f:40:6f:bd:dd:2f:
37:43:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:25 2026 by rpki-client