Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: g/X1MJJc9hkfkBR8FMh4pexBicr3WWRSQ029l4v54m4=
Subject key identifier: E3:90:A8:17:F4:4C:FD:4B:BF:33:8E:A7:84:62:A2:E7:62:1B:A7:3B
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019D39AE829C2C141BEEAEBCE452E5AD4244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0713
Signing time: Sun 29 Mar 2026 13:00:31 +0000
Manifest this update: Sun 29 Mar 2026 13:00:31 +0000
Manifest next update: Mon 30 Mar 2026 13:00:31 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: 52hUfxRWjOsq0aY+EU1OY01dY3ErEDpraWXUb/kwYlk=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:82:9c:2c:14:1b:ee:ae:bc:e4:52:e5:ad:42:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Mar 29 13:00:31 2026 GMT
Not After : Mar 30 13:00:31 2026 GMT
Subject: CN=e390a817f44cfd4bbf338ea78462a2e7621ba73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:6e:08:26:6c:49:1f:1e:e5:69:6e:24:34:
26:1a:ef:92:e4:f5:e8:2e:a6:56:c4:50:ff:24:32:
ec:9c:29:4d:e1:fc:5b:a5:11:b6:c9:bb:fd:43:e9:
7a:71:b3:92:bb:80:c7:5c:8f:59:41:9c:62:a2:49:
ba:42:9f:c1:4c:be:8f:cb:50:9c:f8:bc:1a:46:30:
7a:ef:8b:34:c8:e2:78:54:1a:b5:48:9c:3c:d2:a0:
11:b1:cc:b2:da:28:d1:06:4e:47:e4:53:65:6c:b1:
1f:44:23:f0:e7:db:10:b8:b2:43:25:97:ab:4d:87:
b8:6f:2a:af:cc:d0:95:dc:bf:d7:d6:fc:ae:96:aa:
78:c4:99:d6:79:a7:56:9d:a5:25:d4:20:32:63:bc:
a2:07:fc:62:ca:db:70:3f:9b:3b:10:e0:64:10:77:
77:1f:52:46:65:f6:07:eb:61:16:e7:27:95:50:1b:
b9:f6:41:61:ca:fa:9c:87:c5:d0:e9:03:5f:00:db:
64:e4:29:c7:72:01:16:d5:60:c0:a0:4f:27:05:ec:
65:79:ea:45:91:8f:98:b0:fa:ff:c0:e5:e1:90:3b:
a3:ad:da:80:2e:6a:49:c6:73:4c:e3:7b:81:60:bd:
ac:31:bb:cf:24:8f:3f:0f:26:b0:d4:ef:3a:0a:d6:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:A8:17:F4:4C:FD:4B:BF:33:8E:A7:84:62:A2:E7:62:1B:A7:3B
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:24:ee:48:50:d4:20:a7:8c:af:72:49:86:1f:13:8a:79:42:
32:7e:6c:b2:6b:b2:24:26:87:99:ff:12:ae:a3:4a:3c:39:37:
c7:b8:75:06:40:f6:29:14:1a:c8:65:bb:4a:e8:93:2b:8f:a8:
88:54:4e:fd:bd:f3:e6:88:68:79:13:c7:24:c8:a5:e6:87:e4:
7f:93:88:95:bc:f1:e8:cb:f1:d3:03:25:6b:53:5b:ee:a9:6a:
d5:52:d5:35:9c:e1:8d:87:cf:ae:2c:b2:2c:68:8c:5b:f8:4e:
07:23:06:e1:df:d5:98:f8:09:32:68:4c:36:2e:3e:d1:6f:58:
7f:ae:4f:32:79:3d:a1:89:6e:4d:6d:78:47:95:64:15:32:fd:
6e:11:37:25:03:be:46:2b:b7:df:2c:ed:a6:b0:fd:f5:33:1c:
39:70:e7:94:45:db:df:37:d5:b7:07:0a:9d:c5:55:f8:16:ee:
77:ce:b3:9a:21:e5:9f:a6:c1:02:97:2d:2f:a0:09:ad:49:ac:
e6:5e:a7:55:d6:97:00:ce:d2:91:b5:38:07:f2:6c:08:8a:e2:
ed:66:b0:b9:b5:f4:22:29:4d:0d:f3:df:45:61:ce:2a:46:ba:
2a:2b:e4:d2:ff:47:82:ff:cf:f8:6b:2b:39:44:bb:da:1b:6d:
c8:86:fb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:32 2026 by rpki-client