Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: eKsPdS624L64sJwvJ4tJwE7IQ7LNx6tTcIt/M8wuGZ8=
Subject key identifier: C3:4D:90:DC:23:29:E7:56:3D:77:FD:F8:00:92:93:2A:94:E3:64:CA
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019D27A9012D59198D443E4EEF52BF18DD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 1411
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
2: ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa (hash: Lay79psaoloZk98TsyG6C83RJH7tMee/A2Y6ldt4Zmk=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: bVNWhKZYD8642woqObYnwNhnHEXNN/He7PlrOc4hhEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:01:2d:59:19:8d:44:3e:4e:ef:52:bf:18:dd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=c34d90dc2329e7563d77fdf80092932a94e364ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:45:8e:5c:a8:9e:54:16:3a:d4:09:ea:63:
03:68:bf:3d:ce:08:77:33:5d:c9:3a:98:50:58:b7:
5d:d4:37:05:36:74:a0:2c:c1:29:7a:2f:47:39:d4:
dc:7b:ed:65:87:92:42:05:88:a9:97:f2:a0:5e:24:
c7:21:6b:d2:8c:4e:d1:c0:7a:1e:0d:48:d3:6a:9f:
5a:ff:ae:26:ee:92:e7:9d:06:e6:d8:58:d5:68:e0:
66:3f:37:6f:f9:cf:b1:85:9c:4e:7b:a7:68:99:3c:
b0:0a:86:59:ad:38:55:21:bc:73:75:34:32:dc:b1:
29:d4:23:c0:ba:09:00:e4:98:96:a3:c3:00:6d:5d:
19:78:ee:db:65:f7:2a:f5:4d:28:8b:a8:91:ac:c7:
68:5d:de:70:70:78:75:7b:b1:e2:ad:71:b3:cc:83:
46:27:3b:90:37:4d:d3:d5:f3:85:57:f4:da:fe:d4:
89:9b:aa:02:ed:e1:47:ed:ee:ef:48:1c:67:b3:d5:
7e:a8:6f:40:60:d7:92:44:c0:7d:19:8e:a9:35:f4:
cd:98:ce:f9:ce:e6:33:aa:ae:d8:3c:89:89:0d:e5:
f4:aa:50:9d:9a:a9:07:3a:a3:93:1c:00:5d:46:0e:
fd:68:a4:de:cb:df:19:6b:7b:27:ce:00:f7:54:68:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4D:90:DC:23:29:E7:56:3D:77:FD:F8:00:92:93:2A:94:E3:64:CA
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a5:03:4d:33:52:5c:51:cb:85:b8:f1:98:24:4e:96:a1:3e:
5e:b4:ef:5c:1d:01:4a:6b:a0:c0:e0:cf:52:bb:1e:d8:e0:16:
86:8c:77:53:7d:5d:56:e2:36:ab:db:c8:d2:e9:d9:98:c9:8c:
59:77:86:05:d3:fe:d0:dc:c2:a4:b3:99:e2:4c:dd:ac:f6:b8:
f8:0f:d4:4b:6e:6a:65:34:18:ce:4a:d2:c4:65:de:00:0a:6c:
32:72:82:71:0f:70:b7:c5:b8:71:5a:9d:f2:7d:19:b4:68:40:
39:f5:23:9b:d4:23:d4:d0:8d:7c:43:1f:60:00:5d:3a:78:4b:
83:8b:67:33:6d:e7:91:1e:96:5b:2a:d4:71:f0:24:12:38:ff:
05:80:c8:76:7b:19:de:51:e0:2b:7c:75:c6:98:1f:52:27:7b:
c8:27:68:1f:f5:85:b3:e0:6f:83:e1:8f:0a:19:60:d1:af:c1:
6b:e8:c7:0d:ed:32:85:64:7e:b4:2f:c8:7f:b1:c2:be:1d:04:
10:c5:15:ee:e4:30:18:d1:fb:83:da:2a:61:6e:2a:3f:c5:ac:
77:ab:6a:82:b3:5c:ef:58:02:2f:a7:e4:4e:cb:85:87:63:4b:
31:ef:b9:6d:ca:cc:bd:a0:8e:ee:40:e3:d9:39:48:21:d2:7f:
48:27:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:04 2026 by rpki-client