Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: lw34UEPlN+frTcwppUx1tO7AodQoLkQvEFOakwF0Pwc=
Subject key identifier: 81:D9:11:77:50:B8:6A:EB:01:C0:03:C6:22:8C:ED:52:0A:10:E1:E5
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 019D2B4E2E0AD9C65E5CCAD7654269B7F30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0E77
Signing time: Thu 26 Mar 2026 18:00:37 +0000
Manifest this update: Thu 26 Mar 2026 18:00:37 +0000
Manifest next update: Fri 27 Mar 2026 18:00:37 +0000
Files and hashes: 1: 4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa (hash: /Aj0axBj9aVxd0CaoZ4TQJb5zpK/Z9ZsET+fz6PD9KQ=)
2: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: JOA9D+Lp+/L7hldTz3xeXpTvaXqka5wdF4VLKDy9o1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:2e:0a:d9:c6:5e:5c:ca:d7:65:42:69:b7:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Mar 26 18:00:37 2026 GMT
Not After : Mar 27 18:00:37 2026 GMT
Subject: CN=81d9117750b86aeb01c003c6228ced520a10e1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:e7:73:f4:83:ff:df:3d:e5:28:54:8d:e2:
be:8d:cb:4a:48:7d:e4:7f:69:30:36:cf:3f:43:e9:
84:5a:74:56:53:f9:19:14:88:aa:89:3b:d0:ef:71:
50:da:38:a9:54:57:df:72:1f:8e:d9:32:a7:4c:db:
8d:b7:2e:82:12:71:08:fc:65:87:c0:40:6d:90:91:
8b:07:7f:27:7f:61:bd:14:88:ba:b2:e3:c9:5d:26:
7b:84:1d:23:bd:3f:c9:15:b9:f3:9b:06:b1:7a:58:
5d:cd:8a:52:de:ee:73:7d:f2:87:c3:bd:26:18:1f:
1c:99:fe:ad:b4:db:dc:2b:54:96:97:b8:a2:ab:dd:
48:cf:65:53:18:aa:f6:7b:ca:bd:93:ff:09:44:0a:
cf:25:fa:26:60:3c:49:07:0b:2c:0a:f3:ce:9c:7a:
b5:09:53:0a:bb:73:93:ab:f0:4f:08:72:eb:87:bb:
c2:d8:54:d2:2b:58:b0:15:63:73:aa:c9:2f:e2:1a:
af:2a:cf:ed:b7:2a:34:11:80:82:bd:0a:af:a4:5b:
90:c6:57:82:49:61:39:19:2d:a9:16:ef:78:ba:4a:
77:06:23:2d:28:04:bb:e0:39:18:a7:3e:eb:99:84:
f6:7e:c6:ad:30:3a:64:e3:78:d2:22:4c:86:2c:72:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D9:11:77:50:B8:6A:EB:01:C0:03:C6:22:8C:ED:52:0A:10:E1:E5
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7e:4a:cf:62:59:34:66:12:98:6b:c5:9a:c9:00:17:35:9d:
8e:26:b2:65:71:92:10:4d:c0:0e:66:33:85:c8:64:70:70:6e:
f4:ab:8d:99:ee:86:f0:33:cb:74:9f:55:f0:4e:9f:b1:46:ec:
f7:6f:18:bd:48:e3:76:8f:22:3b:3e:36:09:bd:bf:80:56:4e:
b4:8f:5a:f5:21:62:39:a8:d0:31:60:49:82:51:e9:e0:15:19:
60:cb:11:da:ad:7d:a2:cd:d1:3d:52:da:41:22:b6:cc:29:bb:
53:97:e1:33:5d:78:87:f5:71:ac:07:7d:a9:75:8c:db:76:2e:
b8:0d:59:c4:82:07:69:42:9c:c9:b6:e4:c6:b1:ae:16:ea:fd:
ef:e7:0a:f3:cb:ef:c1:cf:75:46:86:49:ab:c1:b6:02:2f:18:
77:dc:6f:8f:1d:c0:62:0d:de:36:36:b9:64:f8:75:49:b5:22:
3f:07:2e:0a:ab:1a:2c:cf:0a:14:82:47:85:06:77:0f:d7:33:
a7:9c:d4:46:ba:16:4e:75:46:1c:2d:c7:a5:73:8c:88:b8:ec:
ea:d0:95:95:18:6d:3b:8f:96:88:21:83:13:7c:c2:1e:3a:1f:
51:d6:69:12:16:6c:fc:5d:86:58:e9:cf:70:97:2a:4d:32:21:
a7:91:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:41 2026 by rpki-client