Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: VZKXxUYjbw+tdNKQs92MXhcXBiSJ2IScSb86atPdw2w=
Subject key identifier: 5A:E3:E9:DE:EF:9B:2E:8A:29:0D:AE:B8:D6:04:BF:EE:8D:80:8E:4B
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019D386636933C93A43F23BB026F87ECC1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 11A6
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: BJEVa_aX9GRfgBGuldqxrBW_ggU.roa (hash: yxFSDsFQ1W994H/MWEZPZMlBkPI/Yd+y9utpq4Nr9O8=)
2: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: xS/oztHpqOkJw72oRbrQ3eXOJY3P+clRQdtYjw7XFF0=)
3: aZLmDNfDNQfMwJ6001JcSrReXVo.roa (hash: q9+55aFzyoEUFmJ9wbybuO0labtSZYAJl9v8e7OVPio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:36:93:3c:93:a4:3f:23:bb:02:6f:87:ec:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=5ae3e9deef9b2e8a290daeb8d604bfee8d808e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:d2:60:f1:88:b0:8a:1b:2d:ea:4d:08:ab:
70:91:dd:59:e6:bf:23:16:83:76:be:d4:f7:d9:86:
30:cf:ff:bc:63:de:de:85:d2:73:55:b4:1a:89:a8:
7b:de:9b:1e:ed:9c:98:50:07:3f:f5:95:21:1e:6c:
82:4b:36:7c:21:f6:86:42:71:8b:14:e8:3c:4e:b0:
52:a5:4d:55:d1:a7:d7:ac:be:e8:13:31:93:e6:aa:
74:c3:6e:3a:9a:29:4e:2c:ae:06:dc:70:44:c8:5a:
aa:a1:0a:e2:32:85:71:cc:fe:69:98:c4:5e:c2:c6:
fa:ec:e9:04:8a:4a:6b:f8:e2:ce:02:d5:62:31:8d:
27:e5:af:f5:20:0b:b2:4e:0d:04:bc:e4:f6:6b:42:
12:9f:2a:67:f5:9f:79:15:cb:19:a2:88:1f:0a:c1:
f2:f7:19:a3:0a:bf:33:1c:7d:1e:ca:eb:65:c1:65:
b9:cc:3a:de:b3:83:4f:31:66:87:dd:c4:30:97:07:
48:42:0c:6b:21:3f:db:bd:cc:ae:93:11:0e:03:e2:
f1:6d:e5:4f:7a:5d:14:3d:a6:f6:6f:79:e4:47:17:
cf:d9:c4:1d:fc:9c:f7:0e:73:d4:13:6a:1d:55:92:
ae:39:4b:a8:56:8a:75:a8:f2:7a:15:f7:a1:fa:e4:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:E9:DE:EF:9B:2E:8A:29:0D:AE:B8:D6:04:BF:EE:8D:80:8E:4B
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:63:64:59:d5:60:79:67:8a:c3:33:23:65:08:33:9a:88:
8d:ea:19:bc:ad:ac:8c:ab:d6:46:f4:d2:47:8f:88:10:31:2a:
a8:71:a8:99:3b:ca:d9:49:8a:6a:cf:c7:db:5b:43:b2:76:46:
cc:fe:a4:c0:a5:0c:b0:ab:5b:f4:73:3b:17:03:06:7b:8e:01:
19:78:07:a8:97:5e:34:2c:9a:84:cc:75:69:9a:b6:96:c9:7a:
54:5c:c0:ae:bd:0d:94:cd:4a:20:84:89:f4:b1:93:de:8b:e2:
c1:8f:4c:86:ab:58:c6:c5:35:c3:5d:86:37:88:89:6d:29:aa:
36:d6:48:02:d1:4f:8c:fb:9b:3b:41:3d:43:41:22:33:bb:a3:
07:25:cc:27:44:98:a5:1a:06:04:1e:fb:ac:32:1d:31:78:e9:
77:c3:c8:2b:49:3d:31:5b:92:03:ba:b1:f3:e6:03:7b:b5:f4:
8e:dc:30:bc:d8:81:24:06:15:e9:a9:af:52:66:d8:4d:f4:15:
11:08:18:1c:09:fe:3e:c5:35:7d:25:1a:0d:4f:4c:0c:a1:85:
d1:ad:1c:5d:c6:95:0b:7f:9d:80:63:a9:91:02:02:15:eb:db:
11:08:3d:c7:4e:c1:c6:da:62:22:72:60:51:9c:d4:11:81:38:
a2:c5:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:59 2026 by rpki-client