Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: LLyRMEXgpsk9k4a8ZoLjoatrarKrAboGLo8YEUFeHOM=
Subject key identifier: DE:95:A5:D6:8C:76:A8:9E:F7:26:C4:F1:D0:0B:25:63:0C:B9:EF:3F
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 019D25BAC37DCB05FD1CE6AE412FDD88F790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0BA6
Signing time: Wed 25 Mar 2026 16:01:29 +0000
Manifest this update: Wed 25 Mar 2026 16:01:29 +0000
Manifest next update: Thu 26 Mar 2026 16:01:29 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: w1v8lbenwZDkpdIn90OqGPhxEWey/GjGELN66WRaGgE=)
2: Tky4vnXZioTC1TXQq96JWTokgHg.roa (hash: aDRCWx0v8/LaP/gIfUVdK0QiOW0vds7flVFVgoIFu/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c3:7d:cb:05:fd:1c:e6:ae:41:2f:dd:88:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Mar 25 16:01:29 2026 GMT
Not After : Mar 26 16:01:29 2026 GMT
Subject: CN=de95a5d68c76a89ef726c4f1d00b25630cb9ef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:6d:0e:14:4a:c9:1e:f3:e0:53:82:0f:73:
34:98:b3:66:14:f4:42:8b:f6:42:ea:ef:40:4c:e0:
b1:09:e7:f1:2b:9b:a9:29:38:23:13:33:c4:03:3f:
fa:d8:73:53:82:53:05:f9:43:85:ca:eb:6e:6a:91:
a2:b7:ba:a7:1d:c5:be:df:24:18:e4:c5:f1:08:6d:
b2:d3:49:bc:67:96:9d:8b:70:ce:c9:9c:0b:1a:ba:
32:4b:9d:f1:b6:84:7e:9f:1d:fb:20:66:fe:63:d6:
41:3a:8c:fe:92:65:bc:cf:bb:e9:1a:99:a8:9b:72:
fa:8d:8a:96:44:67:34:b9:2d:f0:4a:0d:62:14:29:
d4:68:65:4d:a1:3c:c7:01:66:96:7a:6f:43:c4:76:
15:c0:10:7f:30:d3:74:73:ef:ee:d1:7b:db:13:94:
90:4d:20:45:2c:bf:7f:3c:ea:e4:54:ef:2e:65:24:
38:fd:f1:f5:df:cd:ee:e0:aa:f6:4d:ab:98:6e:a4:
71:bc:79:76:13:85:14:d7:29:38:f3:c8:34:ec:78:
e3:28:e5:97:c1:7d:da:27:4c:58:64:01:61:3c:a1:
47:4d:fe:77:08:90:58:9f:28:eb:fd:7d:50:54:40:
b1:58:2b:03:f6:ea:aa:47:1a:0c:03:29:f6:d9:60:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:A5:D6:8C:76:A8:9E:F7:26:C4:F1:D0:0B:25:63:0C:B9:EF:3F
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:d0:8d:d0:57:5e:75:06:8d:66:de:e9:a3:35:be:13:a2:
e6:34:b9:db:e6:3d:6a:91:ae:de:9f:6a:7c:da:8a:df:17:f7:
65:b5:5a:bb:85:9e:c9:9b:c3:87:a7:24:c9:fe:0a:d5:b8:ea:
91:fc:83:ea:14:18:9f:da:7e:5a:f4:a6:01:9d:9f:91:cd:72:
bf:4e:78:34:0c:1e:06:98:f7:36:ab:70:2a:b7:47:55:55:af:
62:f3:b4:81:f6:4e:db:ca:b6:ec:4a:26:41:48:66:56:81:74:
0e:75:aa:e1:3c:80:b0:5d:bd:93:de:1f:a5:de:c5:2d:a6:25:
62:ac:d0:11:42:d7:fd:99:11:81:8f:6f:2f:51:60:3a:7b:e1:
13:14:d4:7d:4b:0e:e5:72:fb:1f:ab:83:c8:fc:6a:d0:d1:a8:
a4:7f:ac:ba:54:5f:3f:4d:01:9d:7a:94:55:e6:d9:36:98:23:
44:28:cc:c1:7e:56:a9:a0:8c:05:dd:a8:c7:1e:b9:09:11:bb:
fe:77:f7:8d:e0:74:ca:02:77:c8:36:12:3d:6a:19:db:ec:a5:
07:88:c8:6a:dd:de:8d:23:af:d4:b1:d4:c8:94:a3:47:7a:0f:
b6:50:82:87:7a:2a:07:76:c7:48:54:b4:47:6c:67:0c:e3:f4:
a5:eb:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:58 2026 by rpki-client