Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: 0B2vfMw4lqHuRotpRLNc7WChuXHlXRzrhrdClI/vgcY=
Subject key identifier: BE:B4:A1:26:30:39:6F:5B:CE:7F:CF:32:2F:FF:A9:4F:6B:01:65:0B
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019CE6A48005958FDCD0F39FF33D3682ECC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 186D
Signing time: Fri 13 Mar 2026 10:01:06 +0000
Manifest this update: Fri 13 Mar 2026 10:01:06 +0000
Manifest next update: Sat 14 Mar 2026 10:01:06 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: CUXAlxmw8G5dLAmFU/2S6KRqFUpw7KDLyaPx9M4mHBI=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:80:05:95:8f:dc:d0:f3:9f:f3:3d:36:82:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Mar 13 10:01:06 2026 GMT
Not After : Mar 14 10:01:06 2026 GMT
Subject: CN=beb4a12630396f5bce7fcf322fffa94f6b01650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:f4:83:33:13:09:aa:42:fc:c0:12:e7:5d:
b9:51:0f:d5:44:cf:8b:12:da:01:a2:cb:23:ab:c9:
6f:23:09:cd:6b:8f:94:e8:af:0c:81:62:7e:a1:e2:
c4:37:00:03:6f:df:62:68:e6:78:85:77:49:1d:0d:
87:1d:b2:d7:6b:cb:1c:33:e9:21:49:48:49:fd:1a:
60:3c:5c:9f:97:76:62:4c:f5:dd:f5:2b:5e:73:b3:
0a:ae:7b:ed:50:f2:8d:10:d0:28:32:46:ff:cb:35:
90:52:6a:35:9c:b5:30:10:37:52:36:77:a1:a5:7e:
a7:18:0d:e3:34:ce:89:7d:9b:e8:ae:f6:41:6e:b0:
a7:ef:46:17:72:0b:aa:2d:5e:d6:bd:4e:00:54:2f:
68:00:0b:d9:44:85:57:0a:4d:55:99:d8:c7:e8:85:
b5:de:eb:b3:87:d0:46:68:75:50:88:92:8c:1d:79:
c9:bf:f4:b9:08:29:72:d9:8e:5f:9a:bc:13:8d:b7:
2e:6b:f2:aa:71:de:3a:db:c9:09:95:b9:73:c0:f8:
a1:29:df:74:75:ef:07:74:d8:ec:a4:dc:00:db:be:
ef:bc:45:3b:3d:17:8b:98:ff:7a:57:78:6c:8d:de:
f8:21:66:c5:ea:a9:0a:02:7d:cb:e8:fb:64:36:9e:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:A1:26:30:39:6F:5B:CE:7F:CF:32:2F:FF:A9:4F:6B:01:65:0B
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:aa:b9:7e:80:96:5c:fa:53:59:f3:f2:e6:e1:14:f9:f6:f0:
31:6b:10:56:4b:fc:92:c7:31:13:b7:d9:61:e1:91:06:b3:5d:
f1:25:26:57:4f:3c:66:7a:f4:d8:65:04:fc:b3:9c:d3:e3:dc:
8e:b1:3f:a8:59:27:db:bc:6a:04:86:a5:e4:b6:3b:71:5a:cd:
0b:b9:ca:28:39:c8:28:a4:91:3f:f3:53:c7:c8:50:96:12:49:
d2:1d:84:57:1b:f3:c1:fc:08:ab:3b:f0:31:3a:29:20:92:b7:
b4:41:20:7c:5d:dd:35:c1:00:d6:b3:7c:34:b9:65:c4:54:a9:
63:97:08:76:48:58:ef:c8:d7:ab:5a:85:f3:1d:fc:6a:cf:93:
2a:13:f9:20:d4:ba:9f:11:28:17:e6:ad:6f:da:d9:b8:a4:39:
1d:e9:3a:82:de:4c:df:f9:b1:e6:02:ed:c1:1c:33:73:ea:44:
3a:dd:8e:b5:ec:12:b6:b7:23:d7:e0:6f:ea:da:b5:d3:0c:a2:
52:17:80:b7:47:94:55:3d:31:e0:e5:b1:5b:3d:a7:41:02:2c:
c1:28:b5:77:44:9f:9a:dd:84:42:5b:dc:77:54:f4:46:5f:66:
ba:b9:a5:b9:eb:ab:2c:02:a6:57:57:d4:97:2d:4c:51:fc:e1:
e8:e8:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:29:59 2026 by rpki-client