Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: HICM/tkCkkoLWXjJ7suG3Uw2pDCw/BDL+PmNcq7r/Es=
Subject key identifier: F8:05:89:B5:8C:56:03:38:FE:8D:3E:B1:69:7D:E1:9C:17:6B:78:D3
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019D38D3232E4493B14E77B932DF0D1746C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 1223
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: CaRw08U7Cdbfr2D+m5Ho2BBd8kHbKvb1miNFwvbEDqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:23:2e:44:93:b1:4e:77:b9:32:df:0d:17:46:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=f80589b58c560338fe8d3eb1697de19c176b78d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:c1:ba:b9:ca:18:16:25:48:ca:6a:d3:1b:
9e:7a:74:23:55:89:b8:18:90:4d:41:02:90:b8:cd:
81:56:2b:04:43:f5:98:0d:53:94:23:3e:46:21:b0:
d9:7a:81:d9:33:93:a6:80:56:3a:0d:1e:59:21:9b:
b1:52:8b:7c:44:b8:2f:41:00:be:76:0b:e9:4b:7e:
0b:b3:ee:4e:8b:e7:bd:dd:72:c6:4f:31:2d:1a:af:
2c:5e:82:19:e8:d4:cd:6a:6b:5f:fc:3d:f9:6a:6c:
0b:46:f5:29:ba:6a:31:d3:6d:e0:b3:4e:f4:9a:06:
a8:a7:41:17:5b:3b:61:3d:83:0c:30:2c:f7:92:90:
f9:58:b4:13:74:68:f6:e3:1a:1a:00:9f:1d:27:99:
eb:62:62:bd:65:be:54:62:94:ea:02:56:e1:31:ae:
31:6e:a3:21:4b:15:ce:bc:3b:ce:f8:e6:ef:c5:1a:
d0:fd:1e:d4:9a:0e:aa:30:fe:39:3d:dd:c3:da:71:
7d:68:2e:41:45:29:2a:d5:53:cc:a2:35:2c:40:36:
f8:f7:a6:09:82:da:7a:89:00:06:5f:f6:94:10:c2:
5a:e6:3a:47:fc:be:cb:a9:d6:fa:e2:72:d0:13:ba:
87:e4:23:83:1b:7e:ac:f1:70:65:37:40:3e:1d:85:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:05:89:B5:8C:56:03:38:FE:8D:3E:B1:69:7D:E1:9C:17:6B:78:D3
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d5:54:7d:af:1a:e3:39:43:0e:86:72:7a:59:b3:70:e7:23:
40:35:e6:01:9d:ba:8d:10:4d:1f:97:45:6b:8f:65:1e:8d:16:
50:e4:a0:78:2f:1e:56:a7:bf:ee:3d:37:db:22:49:a1:40:e5:
36:1c:e3:9a:96:0e:bb:27:8f:af:46:e4:2f:0d:4e:dd:1e:7c:
f5:79:98:21:53:84:1d:37:24:f0:9d:18:d7:0e:52:05:45:2c:
44:be:c8:6e:77:74:57:f2:61:de:66:ef:39:2c:ad:34:de:16:
bf:ec:37:68:45:0f:2d:29:8e:d1:f5:95:6f:8d:46:a7:21:08:
3a:9e:97:3a:94:30:59:b8:0c:2f:62:0c:aa:b8:21:9a:e6:11:
09:ee:ae:21:a3:24:79:40:46:e6:d4:13:75:15:88:37:b5:ed:
84:8c:ae:12:bb:4c:03:c2:93:4b:0d:75:27:e0:f8:5d:cc:8c:
eb:7a:e7:a6:62:d8:03:b8:7c:64:e0:b8:56:62:a1:22:a9:00:
81:33:fc:60:5a:8a:f3:c6:c8:c2:0c:69:ae:2a:e4:73:ba:a8:
dc:fd:12:c3:e6:27:90:38:ac:05:cb:12:85:ca:47:dc:0c:4e:
c0:1b:af:0f:17:84:dc:32:3c:09:e2:41:3c:2e:11:0b:f5:57:
34:5f:42:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:02 2026 by rpki-client