Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
File: _QwhhAzBSt9SamgcB25mxDQxWCw.mft (raw, json)
Hash identifier: 82hsdMlOIckvF4q64Ctyc8AMotjJiKZOnfM/hvvUdIE=
Subject key identifier: 29:BF:F2:19:42:7F:2A:D8:C0:98:B5:0B:D0:06:C0:18:C1:E0:1B:A8
Authority key identifier: FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C
Certificate issuer: /CN=fd0c21840cc14adf526a681c076e66c43431582c
Certificate serial: 019D32D141416B4C58AE835EB3AE12A903C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
Manifest number: 01A6
Signing time: Sat 28 Mar 2026 05:01:07 +0000
Manifest this update: Sat 28 Mar 2026 05:01:07 +0000
Manifest next update: Sun 29 Mar 2026 05:01:07 +0000
Files and hashes: 1: _QwhhAzBSt9SamgcB25mxDQxWCw.crl (hash: 4ZekHXhSlKHxLAUVdXpwMzcnmoKFLDrFc11IdkYtVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:41:41:6b:4c:58:ae:83:5e:b3:ae:12:a9:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c21840cc14adf526a681c076e66c43431582c
Validity
Not Before: Mar 28 05:01:07 2026 GMT
Not After : Mar 29 05:01:07 2026 GMT
Subject: CN=29bff219427f2ad8c098b50bd006c018c1e01ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:29:3a:90:3a:dc:c8:3e:bf:12:34:e7:d8:
c6:68:4d:8e:55:ec:8f:c6:eb:28:ce:f8:66:68:26:
81:2d:1b:78:14:bf:bb:06:9c:13:33:af:da:e2:35:
84:0b:de:29:7e:3f:cf:0a:9b:15:1e:d0:f4:78:33:
05:ab:95:05:95:23:b5:0f:40:e5:24:90:d5:bf:61:
fb:43:0c:d2:e9:52:ff:25:73:cb:3f:a5:fb:91:3e:
69:16:11:1e:b9:7d:09:a4:cc:6e:ab:b3:c7:21:a0:
07:5d:f2:87:7b:93:a7:4a:2c:25:ef:d8:25:53:26:
85:24:e9:c7:86:55:67:f1:8c:b3:68:ed:fb:37:25:
bb:79:6b:ab:cc:72:fa:31:f7:92:be:a2:50:99:d1:
57:7f:08:12:1b:fe:fb:24:8e:e2:11:01:eb:3d:04:
a0:78:8a:0b:e4:1c:63:42:68:6e:a7:40:84:56:fc:
6d:87:17:96:11:99:41:31:98:eb:07:25:99:db:1d:
1e:5a:3d:f5:86:0c:d5:f5:a0:21:a1:a6:a9:52:44:
04:95:41:3d:be:04:5f:c8:9c:57:8f:68:79:71:a9:
ff:d1:a1:2e:2c:8d:31:79:02:4e:4c:9d:a9:53:67:
64:9c:45:db:21:76:1e:83:49:a1:ff:62:77:ee:10:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:F2:19:42:7F:2A:D8:C0:98:B5:0B:D0:06:C0:18:C1:E0:1B:A8
X509v3 Authority Key Identifier:
keyid:FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ba:8b:f4:1e:6b:b0:1a:12:70:e1:07:bc:e4:78:d1:5e:21:
01:32:7f:81:ce:7e:d0:c6:0d:44:92:c2:48:6b:e5:eb:73:8a:
51:39:6e:df:b4:31:ad:c3:e9:c4:41:2e:ec:c6:f3:40:60:bc:
f4:06:c8:71:bd:c6:2f:af:18:c4:3b:96:e7:be:22:34:9b:e1:
8c:60:63:3b:81:34:fc:21:ba:80:d0:58:b8:d8:08:3e:71:2b:
6b:e8:ef:a2:84:4b:15:ba:05:c7:7c:4f:c3:ad:df:8d:4e:1a:
5a:fa:74:63:2e:3b:04:e7:aa:03:8e:12:e3:94:35:0c:d0:aa:
bd:af:f9:35:1b:64:e3:0f:d9:51:38:4c:56:2d:47:8b:01:8f:
2f:c5:12:c5:c1:51:8f:d7:66:a3:3a:e0:32:bd:53:c8:bf:88:
10:96:7d:22:79:ac:4e:fb:df:01:82:85:f2:c1:3b:45:4c:53:
04:63:01:6e:f1:3d:27:84:3c:24:e5:0a:a5:28:75:bd:e4:48:
63:8a:19:cb:bd:07:76:64:b0:8f:0c:8e:c4:4c:ff:b1:d4:65:
20:1f:4b:ab:d8:09:17:69:90:66:46:10:de:c8:d1:92:a3:3e:
c7:f3:72:72:23:bd:f6:33:8e:40:84:bc:37:8e:55:87:a8:2e:
a6:51:fe:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:27 2026 by rpki-client