Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: 1NL2QZk5HyQuVZx/6/6kQYnhyObPugzOts83LPN7a2w=
Subject key identifier: 52:B7:A4:48:0B:62:D1:DE:05:D7:E9:E0:CD:F4:D8:93:CA:93:92:EC
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 019D29CDDE9D77040E32320E1C23DDD7AB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 0C11
Signing time: Thu 26 Mar 2026 11:00:50 +0000
Manifest this update: Thu 26 Mar 2026 11:00:50 +0000
Manifest next update: Fri 27 Mar 2026 11:00:50 +0000
Files and hashes: 1: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: qJY/wW8KwG/+YdgemTu2eyQcI+uLMoG13+xDYPs0mOQ=)
2: pDsTCJPX6I7CTPbbV1F-Yk_RqdI.roa (hash: k6qre4EFHCNOu0yYjc+l0cPyKi7Hs3Gqi9mcxhitEa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:de:9d:77:04:0e:32:32:0e:1c:23:dd:d7:ab:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Mar 26 11:00:50 2026 GMT
Not After : Mar 27 11:00:50 2026 GMT
Subject: CN=52b7a4480b62d1de05d7e9e0cdf4d893ca9392ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:b9:ba:2d:b5:7c:0e:36:c7:e2:67:cf:f5:
0c:7f:92:fd:c4:46:5b:4a:90:5e:e9:70:a3:91:e3:
03:a2:45:1f:c9:0d:85:26:38:11:88:0f:52:fe:5c:
32:e3:c1:81:8c:cb:c4:5b:9b:35:40:af:bb:49:e5:
c5:22:11:b7:ab:71:2a:8b:ee:ff:87:24:1e:31:c8:
ea:fb:7e:af:b9:27:8c:14:b6:d4:18:da:9a:eb:39:
0c:67:70:37:da:11:05:b2:50:d5:5f:55:04:05:f5:
b2:03:64:03:13:70:84:79:04:f3:a6:3c:b4:cd:21:
92:24:c5:f6:ae:11:1b:35:73:82:4a:80:a2:32:3e:
c5:7e:ca:97:8d:f9:0e:9a:d4:71:bb:22:d6:e5:a1:
56:87:1c:05:2a:95:62:cc:e5:7e:10:6c:17:9c:20:
4b:4f:9f:e9:9d:cb:83:0f:4d:26:8e:f6:d5:ce:70:
70:ac:bb:00:41:28:c9:04:c3:e6:4e:cd:84:fd:bf:
85:33:ef:52:c6:d0:92:64:62:3d:aa:c6:ee:b3:5b:
c5:dc:f3:22:8f:64:9c:d4:5b:af:7e:de:d5:af:db:
cd:a6:27:59:29:00:89:0b:b1:78:75:53:1a:b2:a7:
5a:bb:4f:61:1f:36:a8:f1:02:6d:8c:5d:7c:11:84:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:A4:48:0B:62:D1:DE:05:D7:E9:E0:CD:F4:D8:93:CA:93:92:EC
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8c:a3:88:9f:42:74:a3:3b:8d:27:e7:b7:c8:b9:c3:26:37:
ef:7d:85:3b:f3:63:4c:47:57:bd:b0:db:37:26:20:d1:1e:f6:
9a:a5:b7:83:06:cd:63:6b:a7:87:6d:df:51:26:76:c3:37:f2:
ac:8a:49:13:c4:6f:17:2b:73:71:89:eb:64:9b:ef:be:6f:d5:
63:73:53:94:fc:90:25:73:48:d3:d8:1f:8f:79:f1:ed:db:f5:
93:19:29:22:55:78:ce:0d:19:f0:7b:08:fa:27:aa:e5:d9:9c:
47:10:c2:06:14:a1:6d:bc:e5:3c:bf:c5:e0:62:ec:17:cc:3b:
02:42:eb:15:9a:98:06:e5:0f:ab:ab:c1:10:b2:ed:a8:b7:a6:
86:84:01:cf:db:8c:9e:98:65:9c:6c:c9:d0:e7:25:0a:3f:e2:
ab:8d:4e:f3:fb:c4:23:19:09:b3:fe:4d:ea:d6:32:d5:e8:32:
54:fe:40:6f:8d:7a:51:c0:51:9d:91:1d:f0:59:49:f0:24:b9:
59:79:ab:21:3d:ba:a3:6c:45:69:67:37:57:46:92:87:9a:62:
e0:a5:91:e2:90:6f:cd:7a:7e:2f:ac:57:9e:1a:4b:02:41:07:
f5:7f:98:0d:f0:d3:f9:df:e0:4b:69:df:00:c8:34:f9:a5:b7:
3a:c1:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:12 2026 by rpki-client