Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: lPxdJCKIKwiTOrIGIVLRwJVv5cW7xLkGaG4Eby+uSqg=
Subject key identifier: EF:6E:53:89:64:7B:9C:68:0F:A0:F6:EC:F7:AD:31:31:D4:FB:A0:73
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 019D299785147B77FB5E38640FAC44F36253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:01:29 +0000
Manifest this update: Thu 26 Mar 2026 10:01:29 +0000
Manifest next update: Fri 27 Mar 2026 10:01:29 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: L0DhhJShOZ3pkKOmkz4EAwjStb6LNb4k5F2bQsilrLE=)
2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:85:14:7b:77:fb:5e:38:64:0f:ac:44:f3:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Mar 26 10:01:29 2026 GMT
Not After : Mar 27 10:01:29 2026 GMT
Subject: CN=ef6e5389647b9c680fa0f6ecf7ad3131d4fba073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:1d:6f:4c:88:80:7b:06:39:a2:c1:91:68:
ce:74:5d:1c:21:2d:17:55:63:bd:a8:35:2a:de:c3:
17:d8:1d:55:d2:37:1f:6c:20:fa:ed:fa:a8:47:e4:
b2:07:39:92:36:de:d0:78:28:c4:16:37:88:61:63:
28:a0:81:84:27:ba:c5:db:d2:dd:ed:fc:6b:90:5f:
a7:ab:23:4d:51:cf:78:7c:e7:86:d7:9f:e0:01:15:
8b:55:de:7a:57:3d:8a:f6:27:e9:88:04:57:e4:21:
1f:af:91:86:ac:d4:e6:b5:ff:36:d2:35:8d:63:47:
2b:1c:42:40:69:1c:35:3a:be:4a:c6:39:6a:95:06:
d6:15:15:57:01:b1:cf:ec:85:21:6e:0f:fe:70:17:
eb:5c:cc:7f:91:90:99:d8:bc:17:27:87:e2:2a:6f:
12:9e:ad:a8:06:47:d2:3d:72:e7:5e:97:75:15:7f:
45:d4:9a:12:1d:ce:e4:4d:b6:30:c0:9d:ac:7d:ef:
95:c1:e0:00:88:ac:7f:01:38:02:de:4e:ea:5a:b9:
d6:6a:18:54:49:d7:27:aa:f3:c6:be:aa:d2:06:55:
a5:19:2b:08:d0:90:4d:67:34:7e:0b:d8:c8:49:f8:
51:4e:83:02:5a:16:7e:5b:c2:36:4f:3b:56:1e:88:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6E:53:89:64:7B:9C:68:0F:A0:F6:EC:F7:AD:31:31:D4:FB:A0:73
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:07:33:3b:24:12:01:13:74:a8:82:49:86:3d:bc:1b:fc:82:
b0:93:8c:25:0b:0c:05:ea:06:05:b5:da:5b:7c:3e:ed:cb:d9:
e4:13:89:84:c4:81:50:51:eb:18:bc:a9:b3:19:06:05:b7:ba:
56:7a:0a:4b:83:06:4c:aa:d4:16:b4:c9:68:11:1b:2b:49:57:
42:07:11:62:b3:15:7a:84:a5:68:8a:85:46:2e:14:51:ee:39:
25:39:f9:d1:45:98:aa:f8:4b:60:1b:94:b7:40:97:3c:26:af:
6d:19:01:25:da:c1:7a:54:33:4e:29:4c:9a:ba:db:b9:83:d4:
a9:d7:e2:5d:ee:5d:9e:d6:a7:45:0a:12:eb:14:28:8c:d6:4a:
30:12:e8:01:6a:71:ae:48:6e:82:61:8c:b5:1b:b4:e8:55:ff:
13:a6:7d:f4:1a:da:fd:1e:f2:7f:2a:1a:1a:f7:a4:fe:e8:db:
b6:69:60:68:64:45:b6:e5:1a:ec:b3:64:b0:3a:da:8f:68:40:
d4:d0:5e:5c:90:f7:aa:9d:b9:12:b3:f4:3f:6f:e3:3f:f8:0a:
b7:ff:f6:59:bd:82:53:2f:93:79:b3:ff:78:05:d1:a8:74:dd:
c9:e0:d7:de:d2:1b:5c:fa:33:fd:be:5a:f6:69:ae:b7:b3:d5:
15:70:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:35 2026 by rpki-client