Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: iW+XdZB99Uj8vREUBPkYLqu7NvM2sIAeNDt2lDwGH6g=
Subject key identifier: 26:65:E0:33:AD:DE:31:FA:E2:42:6E:DE:1B:D9:C4:40:2D:8B:7D:2C
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 019D29613ECFC300257A4A76F327239D9591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 0BDC
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: beMuUxDRY8zKsdrem9zvBrodxEKrgytndtkbi+lVnQI=)
2: U492z7CM5jVf-t4QvcE9_urW2ow.roa (hash: /jlkTTrD37FHNPsTnKi/FAkBYiZarctFzNrBmLp88kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3e:cf:c3:00:25:7a:4a:76:f3:27:23:9d:95:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=2665e033adde31fae2426ede1bd9c4402d8b7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:13:9f:0a:1f:40:96:44:29:57:6e:ee:49:
12:b4:84:64:06:e1:62:2d:67:76:aa:43:a3:cc:01:
2f:1f:13:f0:09:6d:bb:0e:10:90:c2:e8:48:a3:46:
d9:90:58:9f:a2:da:35:d2:6f:0a:c9:39:d9:e4:e6:
21:51:39:8a:2a:eb:a8:ba:b4:fa:09:fc:26:f0:be:
2b:46:28:03:ec:3c:99:c7:72:5a:09:db:49:c6:e9:
90:e0:db:7e:c7:c5:d2:72:b5:31:38:71:61:a6:80:
11:46:e6:34:1a:2f:e7:0b:2d:82:36:97:0b:63:c3:
ce:17:5f:8b:64:76:ea:19:c5:8d:1e:d3:c7:3f:fa:
53:7c:f1:65:32:8d:51:06:be:d9:8e:f6:b4:b2:e3:
a4:6f:dc:a1:52:cd:a7:81:cf:28:d3:d3:f6:d5:2a:
01:f1:01:e3:51:2f:98:53:e5:bc:4d:cf:66:64:86:
e0:ce:a2:6d:6d:04:24:7f:08:dc:05:bb:01:bd:04:
57:dc:bb:9b:c6:75:81:e3:03:15:af:6b:b9:a3:f6:
11:4b:43:39:0c:11:aa:4e:74:2c:ab:aa:75:f0:d3:
75:dc:16:16:87:92:b3:d3:d4:ed:a4:82:03:9e:11:
be:82:09:a1:4c:d8:da:60:a1:50:83:ef:33:65:26:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:E0:33:AD:DE:31:FA:E2:42:6E:DE:1B:D9:C4:40:2D:8B:7D:2C
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:d3:2a:57:fe:dd:50:e2:1c:b6:7c:aa:62:39:04:2b:2b:d0:
30:e2:3f:50:9d:82:ae:a3:bd:29:0c:d3:45:25:c2:08:bb:35:
c1:7f:88:8f:e1:b6:e3:42:70:e6:d4:8c:88:81:0c:74:57:7c:
64:04:b0:36:3d:3d:2e:43:9e:af:b2:65:82:1e:19:c0:85:4b:
7c:b5:ad:95:79:58:a2:2e:c4:4a:2a:c1:cb:06:4e:6e:09:55:
e3:e6:20:49:2b:3a:c1:45:29:e7:91:42:84:f9:8f:f7:4b:44:
cc:21:e2:be:82:d3:ad:96:75:af:54:cd:71:93:dc:8d:38:b5:
a2:62:d9:7e:92:38:67:43:3e:b4:a3:44:aa:59:dc:57:80:b9:
9b:f1:e3:d7:20:a8:b8:4c:27:96:19:89:e6:3a:eb:bd:fd:6f:
c0:cc:3e:e2:25:06:08:2d:ad:99:18:6e:70:ae:42:bf:24:77:
30:85:6d:88:eb:cc:2d:e5:87:00:89:48:8e:ca:1b:4f:77:c1:
dc:af:00:b4:a4:2c:cb:15:10:c5:b6:f2:6c:e7:18:de:a2:91:
21:c3:d3:2f:25:b9:48:8c:0e:ac:a4:94:81:9e:bb:84:e1:8f:
75:8a:36:bd:0d:f3:64:90:d1:a7:88:e6:4d:2a:14:cf:46:1d:
13:2c:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:34 2026 by rpki-client