Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: pr+0LM67bODvfRtqivfrrjfvHG2D5k/PFBDKCW+qsUo=
Subject key identifier: D6:C1:0E:EA:14:75:35:42:A5:FB:A3:8A:01:54:78:F1:F4:56:5D:FD
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 019CF04BE1CD0C1571AA0810011A225BD5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 141F
Signing time: Sun 15 Mar 2026 07:00:30 +0000
Manifest this update: Sun 15 Mar 2026 07:00:30 +0000
Manifest next update: Mon 16 Mar 2026 07:00:30 +0000
Files and hashes: 1: 0EzmePks-egIiJdpcXeEPBWaiJQ.roa (hash: VNTL9T5egZkLrCiJmBLxazk1HQGTpK6/iS8WwNYTg14=)
2: 97p9ZUhGZG6kJjtKp2TuV47gh5U.roa (hash: x88qWTYqI0aG2w0GajPiY4NGO9pvbzLLCkLeMTUd2t4=)
3: AG_3AL0BiXNne_-iEtcT4CW3QFY.roa (hash: MXbxSxIompr7PTpUg8mtZo8EDK4eK9dEM10GngyQSBQ=)
4: R3GyXBYJhMHhgq5yrGVUK3jdnkA.roa (hash: g1FeF6e8PlISr+mSxj+h+WNftfc+dabb3ghrlPO9BE0=)
5: S1xGdMwCL7zcvvXwmIxBk0TUOII.roa (hash: Dt+ahUx8ad2ugzMhIwhEEjwNwt3G09wi3vOVTLugUWQ=)
6: XundD1ATPkgExkAuZ9fhY2EBgJI.roa (hash: +uqd1waFJ4ZIkhGQA2rPiPNb2R7bE9L91cSGBFAjyVM=)
7: p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa (hash: RTQGUQH3DHZP7KXMTE9osS1yh94s1ux67e3vp2zT3Iw=)
8: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: QRqromZnGAoIU7/jFwFRG7Z9h5dKrrCIQ49rJ55b3WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:4b:e1:cd:0c:15:71:aa:08:10:01:1a:22:5b:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Mar 15 07:00:30 2026 GMT
Not After : Mar 16 07:00:30 2026 GMT
Subject: CN=d6c10eea14753542a5fba38a015478f1f4565dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:76:88:25:d6:dc:33:7c:14:b7:e3:b4:df:
76:ac:82:8f:be:92:1f:62:98:17:22:da:3f:12:70:
aa:cf:87:41:c7:b6:bb:9c:45:79:d1:e5:31:4d:1a:
e9:d1:85:ae:fb:a5:0d:7d:95:13:17:3b:ba:f4:f5:
5f:27:b0:16:a5:c4:7d:bd:19:18:49:6a:62:cd:33:
5e:8f:a4:5b:a6:cd:18:8f:57:eb:e2:39:70:48:16:
e1:6b:54:1b:f5:52:0f:db:35:95:4e:af:22:9b:db:
c3:29:9b:06:a2:b4:cc:ea:7e:c3:cd:21:76:de:c9:
e6:ec:3f:2a:d0:bc:60:a8:a2:89:60:a4:c8:02:4e:
58:8e:b8:03:f2:24:ab:1f:95:1f:0d:ee:1f:f9:62:
11:68:c7:6a:19:12:d4:b4:08:5f:ec:13:f8:09:43:
ce:4f:4f:35:4f:cb:fa:11:a6:f3:e1:9d:af:5f:fa:
e6:76:dc:71:f6:82:0c:3b:fe:97:69:69:8f:c8:f9:
a4:92:61:d1:21:40:e1:d2:46:a3:e0:8d:df:5e:95:
a5:67:0a:d1:1c:fb:a6:43:56:db:83:a3:a1:7a:39:
70:24:b3:1e:ce:39:dd:84:9d:91:db:20:97:6d:65:
64:7d:0a:2e:95:36:9b:74:82:a0:14:4d:d4:89:d7:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:0E:EA:14:75:35:42:A5:FB:A3:8A:01:54:78:F1:F4:56:5D:FD
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ad:ec:27:9b:88:bd:c1:b2:44:64:78:6f:ee:4f:d4:b4:11:
38:5f:8b:61:8a:04:98:53:b0:23:2e:80:20:78:f1:cf:fc:ab:
b8:23:e8:7d:17:f5:cc:f8:f2:24:65:73:53:1b:04:89:36:d3:
ce:a6:f6:17:de:6c:49:9d:07:53:81:a6:db:c6:59:41:d4:05:
95:21:6d:b4:fe:d1:26:b2:2a:b1:48:f3:b1:53:17:3d:b2:8b:
62:1d:ef:76:b9:ec:6f:e9:f2:95:e7:3a:36:8b:81:31:fd:9e:
66:31:34:91:40:47:e9:97:ab:33:0a:23:23:55:3e:46:f4:6f:
d5:58:9d:4e:22:8f:3c:78:22:fd:e3:ef:a9:1e:13:4b:e6:47:
dc:1f:7d:dd:a9:8a:77:15:39:a9:50:4d:c9:79:62:42:df:d0:
d2:80:06:21:6a:8e:d4:97:0f:f1:e6:c2:19:cc:aa:5f:f4:47:
ae:6f:dc:5b:14:84:7b:0a:10:f6:3f:d1:76:15:09:46:b2:41:
38:cc:06:bb:ff:12:93:88:6f:c9:a0:99:4e:93:cc:35:50:59:
f6:c7:71:d0:1d:a0:68:73:9d:71:0f:4c:1b:98:ee:ed:53:d5:
88:5b:55:45:91:00:79:f4:de:17:f0:8a:42:b9:1c:36:8e:2d:
27:43:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 15:12:43 2026 by rpki-client