Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier: PW82KbQSz2oFcx3E5h7bsaeZRF6KNzZtRtEHILnP/Co=
Subject key identifier: 1B:F2:15:CB:04:E8:69:BC:F3:5E:89:CD:2D:C3:DF:29:DE:4A:1D:5C
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial: 019D2703B425D9C2175F4ACF1E31E7E96336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number: 05B4
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: kLCkPxTamo0McJHCX2PBnF585gs+s10CDikVCRmsS9s=)
2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b4:25:d9:c2:17:5f:4a:cf:1e:31:e7:e9:63:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=1bf215cb04e869bcf35e89cd2dc3df29de4a1d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:74:21:9e:a2:da:ef:0c:ea:52:f3:de:98:
a2:53:1b:3d:2f:fc:ab:f2:d8:80:37:99:ff:a6:a9:
c4:35:1b:68:41:9e:08:c1:61:e9:ab:f1:c0:f4:25:
d0:33:b1:36:c9:ba:a7:1a:c5:b7:63:fb:d9:e7:02:
84:8c:ed:a4:56:8f:ed:82:19:74:ba:d4:2d:60:db:
b8:78:da:af:65:b1:7c:c1:bd:4f:5d:88:c8:f6:5a:
be:66:33:3e:84:ad:4b:e7:38:d6:23:8e:cc:10:72:
fa:08:9e:ba:8f:bf:cb:ab:6b:05:f4:36:61:21:e4:
4e:7b:64:3d:86:eb:ba:de:1e:94:f0:0e:4d:eb:50:
df:5e:75:55:df:bd:e2:58:0a:95:d9:f7:d4:1a:f2:
6f:08:8c:6e:a7:9b:3f:a5:bd:ba:e7:f0:7e:44:61:
9d:e3:ab:9e:52:64:42:47:e2:cd:c2:27:4f:92:a9:
54:f0:c6:2a:07:c9:96:a9:1b:43:f8:1d:33:53:cb:
3a:30:3c:4d:d9:94:5f:63:49:f1:bb:47:7b:22:72:
38:c4:f5:5e:6a:0c:37:9e:68:29:82:2b:09:f3:83:
1c:1a:0c:51:8c:e6:23:c5:02:eb:4e:0f:c5:8c:f2:
1f:21:35:06:6f:34:7c:30:76:aa:42:8d:c7:67:5b:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:15:CB:04:E8:69:BC:F3:5E:89:CD:2D:C3:DF:29:DE:4A:1D:5C
X509v3 Authority Key Identifier:
keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:b0:5b:27:99:9c:d9:35:1b:d4:89:0a:7c:41:a6:9b:7e:
73:01:52:3d:55:09:cf:b5:45:2d:ab:a3:25:d5:d0:7b:09:6d:
4f:7c:2b:49:05:c6:ed:cd:fc:45:42:70:be:98:a4:ec:69:bb:
a2:c5:96:94:71:91:2f:93:2f:34:e5:99:ec:08:bf:af:19:d9:
5e:77:f6:8c:6d:95:25:4d:94:29:ea:1a:b9:01:e5:41:82:8f:
21:0b:39:76:cc:20:58:03:69:81:ab:8d:93:b6:7e:c1:97:81:
10:7e:dd:df:cc:ac:5a:09:91:49:b4:ba:74:ac:95:a4:3e:07:
fb:a6:cc:b0:12:31:cf:c3:68:4c:57:ce:36:a2:44:37:9e:97:
21:8d:31:00:b7:44:95:40:34:4d:df:b9:cb:4f:9b:15:c7:45:
c9:cf:f1:ba:35:63:85:2f:76:68:06:a7:de:7f:3b:4f:2f:f4:
ca:74:11:f2:51:e6:d7:4c:e7:86:be:17:6b:00:52:b0:fd:c2:
cd:dd:9a:e9:52:bf:20:31:19:44:c7:66:16:26:ea:89:8c:5a:
e8:40:06:3b:81:40:4c:27:e9:36:ae:1f:d9:81:56:28:8c:5c:
c8:75:fc:fd:5e:8f:0b:6e:ef:ab:4d:cf:2c:a2:e7:33:52:c7:
6c:f0:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:32 2026 by rpki-client