Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: w1LjexUhOmrpJbfwyqdiZkG3KJGae8VStmzIwm5P/Q4=
Subject key identifier: DA:17:01:E3:68:44:38:E1:6F:1F:1A:10:EC:75:45:D4:85:8E:16:FB
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019D2816AE1FDB7049D8380ADD6D16C79441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 74
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: cXH88PLpDQm+DMvsNJzN8KYnhJIRbYYOUomXIzRaQVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ae:1f:db:70:49:d8:38:0a:dd:6d:16:c7:94:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=da1701e3684438e16f1f1a10ec7545d4858e16fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:84:4b:41:c7:6f:51:79:99:8a:89:79:fc:
e6:58:c4:b3:7d:62:cd:ec:52:a1:46:13:e8:09:c1:
b1:11:bf:9f:44:a9:5d:6b:81:68:37:61:3d:46:bc:
2e:32:49:c6:4f:0e:c0:43:cc:af:f4:98:ed:3a:2f:
5c:12:a4:bc:da:82:f0:3c:de:6f:23:10:41:2d:25:
e8:7b:d1:97:92:89:02:67:aa:17:b3:5e:b8:54:9e:
04:a3:1c:dd:18:2c:81:d3:09:7e:98:a8:e8:63:bf:
5d:e7:f5:9b:84:a2:35:cc:42:02:ff:98:e5:a0:66:
44:dc:30:41:ff:a7:79:c5:97:a4:96:c7:d4:59:42:
5c:12:5c:c0:93:46:fa:c2:b8:55:37:92:29:85:c7:
32:79:7f:24:3d:4d:e0:e7:0f:07:a8:68:ff:aa:25:
7d:de:65:00:fb:c3:26:30:1d:c9:db:30:ed:9b:34:
a6:3a:4e:6f:c1:42:93:8d:b0:e6:79:38:31:4f:4b:
e9:8c:1a:80:92:a2:84:4c:42:c1:0f:11:b9:6c:12:
e6:7d:36:0a:0d:b2:64:8f:7d:78:a7:ad:2e:0e:b6:
fb:a6:d2:f9:09:7b:ff:d1:3c:2d:d3:56:e3:14:b8:
a8:19:12:62:2a:48:07:16:37:60:84:b8:02:33:e4:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:17:01:E3:68:44:38:E1:6F:1F:1A:10:EC:75:45:D4:85:8E:16:FB
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:68:89:08:49:2d:51:53:54:2d:e3:d5:aa:3f:e5:3e:5a:e0:
5e:f8:1e:6a:ec:76:92:17:e4:2f:fb:72:d4:65:4c:1e:10:0a:
51:7e:20:3c:1f:10:14:51:27:e0:2c:5f:fa:62:f6:7a:38:0c:
d3:88:74:ee:89:90:2a:ca:f5:ff:98:6f:ef:19:0e:95:51:56:
7b:9d:1b:53:21:65:1c:9c:5c:ae:50:0e:62:0a:2c:e1:2c:24:
6b:a1:84:a3:7a:8d:ba:c3:fa:8c:04:1c:d3:0f:51:ad:59:81:
4a:21:89:8a:6c:86:c1:76:36:4e:a1:3d:1e:ea:2f:40:99:db:
a9:a3:e8:00:5c:fd:dd:4c:a1:11:66:99:74:90:0d:2e:64:be:
ea:e8:cd:48:d5:ce:e4:7b:94:8d:c2:14:ec:ef:eb:75:a5:6b:
0f:a8:01:f3:4e:8f:eb:f5:e2:03:be:64:a2:12:7d:c7:78:c0:
d5:47:07:ee:cc:35:f6:10:11:96:20:bd:5b:dc:95:fd:75:22:
43:11:6f:84:50:41:b7:a3:6b:d5:3b:b1:12:38:04:4d:1f:ab:
94:c5:0b:d9:e8:58:5e:4e:16:bb:dd:f9:b8:e1:81:53:25:0c:
74:d4:41:96:d7:14:e3:39:b9:8e:cb:fd:38:46:5c:80:f3:43:
e3:d2:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:14 2026 by rpki-client