Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: +Q7T9m3PDN8FieuWw7YuC0ZNmdSK60i+x9XQqsiV9e4=
Subject key identifier: 03:71:CA:9B:3E:A6:0E:F2:23:B5:1E:0B:44:0A:26:2A:7F:95:A3:B1
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 019D26CD27280268A01D96AFD52628C6E806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0A99
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: tnzniF/qGf1t/ABsl99qHgwkFJuRo/m1TcKBHH1SbUY=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:27:28:02:68:a0:1d:96:af:d5:26:28:c6:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=0371ca9b3ea60ef223b51e0b440a262a7f95a3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:20:a3:ec:8e:5c:da:6a:38:61:ee:f1:93:
3f:ad:53:29:6a:34:74:12:f9:0c:5b:5d:f4:4c:f3:
a3:b0:47:9d:c9:ee:49:db:a7:b0:2e:26:d9:57:ec:
b4:cc:30:28:8c:e5:18:40:e4:7f:e0:8a:2d:9c:64:
2a:d6:8f:bd:8a:8b:cb:11:be:26:59:c7:7d:bf:2a:
79:8a:fc:90:74:d8:ea:28:8d:ed:32:ba:b4:60:f6:
98:e3:68:b4:8a:92:7a:cc:0f:ba:5a:08:18:4e:d4:
24:8a:1d:1e:74:aa:84:f3:7a:a0:6b:9c:68:12:38:
4b:80:cb:f3:37:40:83:67:be:94:ac:cd:41:42:5e:
26:73:b4:74:a6:c8:b2:a8:af:62:38:83:18:cf:f4:
f7:52:95:4d:71:99:54:65:0b:34:a6:9c:28:2c:50:
dc:09:b6:df:ce:81:d0:c0:5b:b2:7a:ba:c0:79:e7:
37:77:1e:63:0d:d6:05:20:09:24:85:58:c0:7f:29:
78:61:a6:56:00:22:63:ee:8e:b8:54:e2:0e:7c:fc:
e2:d9:ba:e1:bc:c7:ff:74:75:aa:2e:ac:a0:38:f8:
cd:0d:31:df:44:90:f7:dd:82:69:b8:63:20:93:8c:
a0:3b:95:fe:3c:a5:fc:a2:52:d4:d5:dd:4b:73:17:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:CA:9B:3E:A6:0E:F2:23:B5:1E:0B:44:0A:26:2A:7F:95:A3:B1
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ef:eb:e1:7c:50:75:1f:7e:c5:44:72:b0:bd:ca:5c:c5:6b:
c5:dd:b6:4f:99:c0:45:72:f7:74:d1:68:2c:43:f8:db:18:fc:
1f:d5:41:67:d5:b3:3d:50:af:ac:2c:84:0e:00:0c:55:71:73:
b6:b9:84:32:97:5b:84:70:79:90:34:ee:61:66:26:8a:5e:49:
f5:30:c3:28:e6:be:96:ec:5b:6f:3c:4c:44:61:25:57:e5:49:
2e:b8:30:68:05:93:53:29:e5:02:7d:9a:db:e4:b5:b8:53:db:
34:41:56:1a:fc:90:0e:a8:25:df:b2:9c:27:32:d6:ce:de:38:
38:b3:54:b2:01:19:18:ba:12:2a:9d:cf:2d:76:a1:f7:6c:b7:
bb:64:ee:a2:d3:61:00:0f:5f:18:b6:4f:15:d6:3f:ed:bd:8c:
20:93:be:4e:0a:3f:23:16:6f:17:75:b4:68:64:f9:84:95:2f:
94:2a:cf:25:03:f5:1d:9d:27:15:c2:6c:8d:4a:17:91:3e:8e:
57:68:21:10:2d:58:29:e3:95:31:df:c6:f1:84:67:a9:8c:f0:
87:c0:fa:2e:2d:e8:e7:4a:f0:2e:bd:23:1e:6d:54:50:94:46:
90:df:dd:fd:eb:da:7c:b0:f4:f0:7c:4d:a2:9d:cf:49:22:de:
87:1a:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:09 2026 by rpki-client