Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: +o2LPqLya6VDXPkPaYt4I6b36p4ImaT8zkFQ2gPvrNg=
Subject key identifier: 58:38:87:2C:45:94:CA:C5:3E:A7:E7:CC:DA:C7:83:D7:FC:24:1A:F2
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 019D2703C5BDDA90E6538C02C0CB7A1DD0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 1423
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: V_7nI2rclmISW7ugXTvlUt42zwc.roa (hash: dgCH/3weKUPvWu32YRYMJtSWtM0AYHSCUPBoJHsRJj8=)
2: gH9SOFGnHPwoUMA2V0WudJj9Q74.roa (hash: qynBe2yLaxPIvjQZTw4fuQC6WMeX9Hc3FmOm9LE7GH8=)
3: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: nvFIbO8NlT5dfyuyHJE97HxxgS8VymiBVUEBlgIN2gc=)
4: vC57wbOLFiAKhCB_1aTbbKiskGA.roa (hash: n6ntOBWK7goFgSVFaq97RplF4ii7t5Z5AdSbkU7hXp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c5:bd:da:90:e6:53:8c:02:c0:cb:7a:1d:d0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=5838872c4594cac53ea7e7ccdac783d7fc241af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:d5:ae:c9:c3:64:57:c9:f9:ea:7f:99:28:
05:37:31:18:54:75:e2:73:3a:e0:c6:68:fc:9b:c9:
f7:3d:b3:93:96:bf:fc:9e:30:15:4e:e0:ed:ca:3f:
60:7f:f3:90:c5:18:73:bf:b4:d5:35:7b:f9:80:6a:
b8:e4:6a:20:c5:fc:96:db:17:b3:f6:cd:b5:a3:6c:
23:17:34:f9:f6:70:95:32:9e:1e:4f:7c:f1:ee:c6:
a8:b8:79:58:ce:dd:31:a5:c1:a6:99:98:b4:0e:73:
fe:b9:61:d6:64:b6:af:37:e8:8b:bb:76:fe:45:29:
fd:61:02:af:fe:06:77:43:8a:35:94:6f:38:55:5a:
fb:99:4e:61:4b:27:e9:74:fa:0e:59:90:36:72:fc:
aa:2b:59:45:7a:8f:c7:50:9c:ef:d0:7f:99:f6:37:
14:27:b0:2c:cc:3b:d1:c6:df:da:b9:2f:68:06:ae:
10:d5:d0:e3:bd:e5:b4:20:4a:e8:e3:a3:3d:15:fc:
74:b2:bc:3d:fe:56:cb:87:8a:d5:ab:ee:b1:a6:9c:
da:bf:03:54:27:e6:2e:7c:28:88:aa:ea:1f:20:e2:
21:43:86:77:d9:de:8e:3f:d0:ac:1e:29:dd:7a:eb:
87:1a:c6:34:b2:c9:d4:85:79:91:20:1d:ac:68:01:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:38:87:2C:45:94:CA:C5:3E:A7:E7:CC:DA:C7:83:D7:FC:24:1A:F2
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c5:34:26:a7:18:c4:23:e4:15:1c:cf:2c:42:cc:c8:0e:62:
ea:d5:8e:39:ef:44:3f:f6:35:cf:5a:b8:9c:1f:2e:3b:a6:76:
01:ad:c5:9d:bb:1e:9e:d1:82:0c:d4:41:3e:c4:21:eb:87:54:
a2:8a:fe:ab:ff:da:35:f3:df:84:cf:63:c8:20:4a:a8:e7:3b:
0d:9d:d3:dd:97:03:45:12:67:cf:7b:d9:af:4d:49:0d:5a:8b:
a6:0d:61:02:43:78:ab:b3:20:23:85:f4:29:5c:60:f6:25:b0:
7a:49:c6:63:ca:f1:d2:45:27:1c:7c:93:e1:f5:56:a0:2b:0b:
71:49:1a:15:63:ff:98:d6:4f:eb:9f:62:38:8d:c6:0b:cd:a2:
b6:67:52:e0:16:68:bc:3b:87:87:1b:cc:6d:47:c8:0e:13:76:
18:ed:24:a6:44:49:40:39:69:c7:77:8b:db:b0:e0:3a:d9:d0:
ee:81:97:10:95:14:5e:4c:4a:62:7d:2c:10:3c:99:6b:7f:4f:
a6:e6:a4:24:5e:c0:98:4b:c6:69:f0:ac:90:81:1a:ad:36:9b:
13:7a:9b:73:f9:ee:09:84:e0:1b:2e:f9:97:e9:b6:5a:2b:8b:
de:d9:c0:a8:ce:02:b8:1e:ed:21:4a:aa:35:96:91:6e:e8:3d:
a4:76:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:11 2026 by rpki-client