Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: 70abJn2vkMQXobVsGJhB0xNsZRmGTA1B8GTLopK3s3s=
Subject key identifier: E2:C0:54:0D:E7:19:3E:C8:1A:10:80:89:16:19:D2:11:BB:7B:D9:7C
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 019D37C080E3F01409953307D31AF8D9F521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0E5A
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: ufEjOOEH7bh69xBVoTOLZm8h25EwqRl1tF/DBvE2oAA=)
2: ftokh3mUyVZGh6yXd6ouZ8YIGkQ.roa (hash: 4Ym0wTobeB1H+GWUNtcZZO3RjaiOd4ZAgsLU5dSiWcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:80:e3:f0:14:09:95:33:07:d3:1a:f8:d9:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=e2c0540de7193ec81a1080891619d211bb7bd97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:32:87:ef:ce:2b:3f:87:0b:2d:13:99:50:
81:6b:f5:fe:ff:a7:bd:9a:65:b6:78:3c:e3:43:52:
f2:39:60:55:69:c7:7c:1d:63:3e:7d:fe:1b:f2:b1:
0f:00:ae:97:f6:ac:13:94:a6:a3:ea:e8:76:29:42:
f8:9b:32:d8:13:93:f9:96:81:bb:2f:e1:97:0f:9c:
7c:4f:07:03:ee:12:14:84:10:e4:c9:60:dd:ad:ec:
6b:36:8b:ef:ef:fa:d6:e9:a1:96:d5:c2:a5:92:a3:
e0:6c:28:f6:3c:2e:68:a9:f6:a2:fd:31:33:41:4f:
a5:87:32:fe:df:b4:46:21:50:40:eb:78:cb:83:50:
14:56:42:ca:b4:84:75:4b:40:9b:df:96:95:ae:44:
e6:3a:7e:9b:58:30:8a:da:02:cc:03:86:fc:f6:4c:
32:bc:b1:77:43:12:25:fa:1d:c4:1b:ac:7c:57:76:
71:9f:3e:0a:39:3e:df:c3:eb:2d:ee:73:26:8d:42:
96:b3:76:f6:06:e5:c1:f1:c2:f7:aa:24:df:e2:f3:
5e:2d:91:8e:1f:8d:89:6f:fe:f7:b4:f7:2e:f1:63:
c4:4a:0b:54:6e:2f:ae:3d:a8:99:34:b5:2e:6e:72:
af:b1:e0:7e:81:1c:b5:0b:5d:85:97:8c:d4:ac:ce:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C0:54:0D:E7:19:3E:C8:1A:10:80:89:16:19:D2:11:BB:7B:D9:7C
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:49:89:5e:e5:0d:1c:4c:d4:9d:dd:03:b6:3f:3a:4f:62:
1d:87:e7:60:fd:e6:18:14:fe:e8:11:92:4a:68:78:c2:d8:4d:
9d:42:ad:c8:01:8d:d4:de:b5:84:9a:f5:34:a8:e7:ae:98:84:
c9:b0:6f:b3:29:4e:38:92:4c:f0:d9:c6:b7:b2:40:36:ef:28:
ee:29:77:01:84:c6:d1:93:58:e2:e3:58:2c:40:bf:49:63:61:
d5:54:59:8b:9d:df:95:c4:07:04:3f:66:1e:d4:48:2b:43:d3:
13:59:2a:01:7f:8f:08:46:e6:11:ff:54:88:f1:bc:db:b4:20:
e5:34:36:7e:22:2a:1a:83:14:8b:23:a4:c3:d3:df:e6:aa:67:
57:ee:af:13:b0:23:58:4f:bd:06:0b:5f:32:76:c2:84:0d:7f:
6b:55:91:6f:07:c9:ff:2a:9b:31:11:d4:65:2e:08:13:63:5d:
61:ac:cb:59:42:a7:f9:93:47:45:01:a2:91:26:40:c7:0f:71:
71:5f:b9:61:47:c3:03:9f:fe:a9:4b:8a:b1:46:d1:f1:eb:52:
67:24:49:0d:0a:d4:2b:5f:3d:ab:d4:25:0e:2c:42:b4:45:68:
e7:dc:49:66:2e:45:7f:f5:7a:e0:28:94:64:90:aa:79:6a:78:
c7:8c:90:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:45 2026 by rpki-client