Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: AGH+fhvW+GUDcqIYxp3PfYBtHYLk9EOt3gyhBVXfrio=
Subject key identifier: 13:4C:62:48:E1:65:8C:B4:CC:A8:34:CB:4D:C2:2C:87:8C:BF:0C:3B
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 019D33760BDC28C1FA7DEFC34FAF4D43D9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 16ED
Signing time: Sat 28 Mar 2026 08:01:07 +0000
Manifest this update: Sat 28 Mar 2026 08:01:07 +0000
Manifest next update: Sun 29 Mar 2026 08:01:07 +0000
Files and hashes: 1: D14MO7BIQvaHAdeDBscgN5omBJ4.roa (hash: r6jJ5ch2wUm0LzOkighkT3HkT455ug6IrSIakMtnP58=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: GFxHqb7PWBhjgJRTG+uR0OhkrAUK99oEVZb3+HFwT90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:0b:dc:28:c1:fa:7d:ef:c3:4f:af:4d:43:d9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Mar 28 08:01:07 2026 GMT
Not After : Mar 29 08:01:07 2026 GMT
Subject: CN=134c6248e1658cb4cca834cb4dc22c878cbf0c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:b2:7c:83:0f:2e:a7:d8:38:a3:e5:3a:35:
ff:f3:b3:a1:12:01:e5:fe:65:69:1d:72:1c:cf:da:
6e:10:c0:fe:4c:f0:0a:62:c1:5c:79:78:29:6b:74:
d9:ca:e6:82:92:c3:40:39:84:12:fe:e4:c1:41:51:
11:07:b8:7b:91:8a:1a:c3:a0:06:69:36:23:cf:3b:
2a:a5:cf:2a:aa:88:f6:7f:aa:be:ff:70:30:71:71:
e6:2d:64:8d:fd:4f:31:52:f2:8e:3a:2b:1d:ba:b9:
c8:72:75:c3:72:b0:95:a2:cc:08:c9:2e:ef:86:0d:
fd:48:5b:58:37:8d:b8:86:77:67:6e:fb:cc:b7:3b:
62:cf:a3:64:87:89:38:15:60:0c:ec:6a:be:48:ac:
46:a0:42:6a:07:2b:7a:da:10:5b:4f:1c:bb:8a:23:
90:0b:fa:df:4a:21:be:cb:aa:ea:29:b8:da:45:8c:
65:9f:df:c8:17:cb:5d:c2:17:0a:56:c3:38:a8:f8:
ac:a3:03:7d:ad:b1:fa:35:54:2e:54:de:5d:b5:6b:
6c:9e:2c:d7:0d:38:d7:e8:de:53:52:cb:b5:df:57:
97:db:e9:a8:87:4e:0a:cc:42:5c:79:01:19:1d:8e:
81:80:e8:9b:08:f1:82:32:10:75:dc:f3:99:6c:d8:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4C:62:48:E1:65:8C:B4:CC:A8:34:CB:4D:C2:2C:87:8C:BF:0C:3B
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b1:b8:ea:b5:c5:58:2a:4e:f9:58:46:b0:40:c0:7a:9a:21:
1c:1a:56:c8:70:7a:90:4f:45:73:23:09:48:53:38:b0:4f:49:
c8:19:d4:80:41:47:02:69:8f:2b:83:f7:77:d5:69:e7:3c:0b:
a4:b1:f0:77:cc:ab:f0:a3:15:7e:98:a8:ff:18:9d:d4:06:a0:
ae:6a:2e:e2:d7:81:09:15:d1:1c:28:6b:6c:bb:77:a4:6e:5b:
f2:78:dd:37:60:e3:82:98:17:dd:60:50:75:5f:55:42:f3:57:
4e:ab:08:5b:3a:63:6d:46:d4:cf:56:08:1c:ee:52:97:d5:b5:
a0:b9:07:3c:2f:42:5f:42:92:97:d3:3e:27:19:a7:15:4c:94:
e5:d0:9a:7c:fd:ca:65:fb:78:37:c8:09:73:1a:76:8b:76:1b:
62:23:1e:05:2e:13:12:1e:b0:23:3e:7b:28:82:e8:8a:94:15:
16:0f:22:83:cc:62:8a:87:9b:06:c2:22:a3:8c:27:52:be:44:
37:f2:0e:88:31:14:f4:8d:6b:13:d0:ee:f5:13:54:c3:5c:19:
21:94:c1:83:76:0b:f7:71:af:91:b6:cf:83:99:f4:2a:11:bd:
19:4c:4f:59:96:0f:0a:a1:bc:45:0f:1d:81:9e:95:45:a7:06:
69:b4:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:05 2026 by rpki-client