Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: 4ykjTAH5bPVt7qACKYYpushlc9glEzP2dH/b51vIUhg=
Subject key identifier: AE:76:DC:92:E1:1F:C0:7F:A4:28:B8:6B:0C:42:4D:81:C9:87:13:CF
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 019D28BB766B3EEF16D2ED0CD28B64114C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0C95
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: fIl8xxivGUZsaj8kaaW_71inehg.roa (hash: zYHkvAQ/ytlKOUn9y5s0CfOnBXPRV19zcGQTulQeAcg=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: qpwfmFLKVHK/V8a/YBkK+JYJcw87QuYlqBfO8g+6DtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:76:6b:3e:ef:16:d2:ed:0c:d2:8b:64:11:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=ae76dc92e11fc07fa428b86b0c424d81c98713cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:bc:1a:67:62:c6:b8:67:15:38:53:9b:7b:
6c:5c:a2:fb:41:36:db:43:4e:06:ea:cb:10:b1:91:
ae:1e:a3:2b:b0:0b:55:9b:87:ba:ac:12:94:22:1c:
3a:c3:fe:e5:4e:c2:e3:0d:64:6a:be:41:ce:3e:e1:
5f:4b:46:6d:e1:a6:f7:4f:ae:34:d0:cb:10:82:f3:
32:43:46:75:ff:8d:4c:43:be:c3:ec:45:62:be:7b:
f5:27:28:91:6c:9e:c5:32:38:6b:d0:b8:a0:fc:0b:
41:8a:a6:c3:92:47:ab:f5:82:d5:37:8f:4d:5d:18:
a9:bd:e4:87:e7:55:e8:28:ef:7a:b8:10:03:e4:17:
f4:bf:6f:33:5e:2e:5f:1c:39:9a:60:36:f5:7d:ba:
e3:75:e5:52:3a:0c:cc:c5:45:85:cc:f7:0d:a4:5d:
26:92:e6:ce:c9:44:15:ba:a0:0e:08:84:e5:51:f2:
a4:6d:92:4f:10:c2:e4:29:54:f9:a8:b6:93:ca:01:
e4:eb:d0:da:0c:df:03:6b:81:70:d9:be:a6:9b:66:
3c:d1:af:10:da:aa:c2:e1:53:ab:89:77:8f:45:42:
66:b9:59:23:50:01:bc:3c:25:4a:3e:04:7b:69:0d:
13:a9:17:c6:8f:b7:7d:81:1d:c6:95:5c:14:c4:36:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:DC:92:E1:1F:C0:7F:A4:28:B8:6B:0C:42:4D:81:C9:87:13:CF
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:c2:b8:e6:3c:0c:3b:94:6c:66:b5:0e:57:f6:e2:b6:5f:
2e:e9:b2:49:e6:62:3d:bb:bc:89:41:cb:79:9f:fd:71:c1:e6:
14:63:79:61:c3:33:80:37:44:15:77:51:47:b6:39:88:a7:b2:
a1:8a:45:32:eb:79:44:4b:9f:d8:77:c9:cf:3f:c8:29:a5:40:
f0:46:d0:5a:0c:b0:33:2d:3d:e5:c8:c9:ab:9b:0b:1b:92:5e:
2f:ef:26:f7:17:b8:6b:52:25:d7:0f:f4:34:a1:c4:dd:df:48:
c6:14:d2:b6:b2:56:62:ee:eb:69:0e:e3:28:ed:77:dc:87:69:
de:1c:c5:eb:3e:0a:13:b9:fc:1c:5d:f8:c8:51:50:c9:ae:79:
8a:0e:37:e5:99:57:b8:6b:b9:f6:d5:9d:6e:10:a0:e3:f8:82:
02:a6:5b:c7:ea:cd:96:12:1d:b7:e1:75:c6:ba:b5:4a:9f:3d:
5d:45:5a:d9:c2:f4:90:bf:96:4f:cd:6b:1f:5f:1d:04:f4:41:
02:75:58:15:bb:ee:53:6c:0e:28:83:8d:3a:94:8d:ef:12:e1:
43:a8:3c:7b:68:b4:02:1c:60:95:f2:49:bd:f4:5e:92:5d:0c:
c8:c5:95:1c:55:df:72:68:75:66:57:04:7a:ea:46:f3:a4:16:
fc:f9:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:40 2026 by rpki-client