Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier: VjIL1RC1R6DVB/lOSSgXVyClwm71nx1GHRSz3UC0UzQ=
Subject key identifier: E4:52:31:83:33:CB:72:70:61:17:0D:AE:7A:11:F3:C2:ED:1F:30:92
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 019D37C051AA3FF622AB94F52DA03D1412B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: 9svF7XV_8rFyGg_nZWGhuxLsBGo.roa (hash: HYZcH7ciR/GKsfvNl9giR0/lMm/wD2BnMycPbF+v6tY=)
2: O7qjLnP-Av_AUI_nXwDm6aTNtiM.roa (hash: b0YiOln+6ee3N+tmIgf41n0TuffzExlmKLzTRwsvrs4=)
3: Ttr7foitcHqzKL5tFDo4aAXiRHs.roa (hash: l+KPWtcu5vk+NW1gY++Z3UuQD8IwIIkC3ZQ3BVE/Egc=)
4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: IwiZ0qcbho8gjmYrwlvvl9U69Y1GNG7E7VVWDIDidAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:aa:3f:f6:22:ab:94:f5:2d:a0:3d:14:12:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=e452318333cb727061170dae7a11f3c2ed1f3092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:1d:45:47:36:fa:e0:88:af:33:51:dc:2d:
25:69:47:70:9c:01:98:16:40:ea:13:48:cb:44:60:
14:7e:fc:78:4d:e5:2f:5a:85:54:a3:44:5a:94:da:
34:7f:b8:f3:a7:b0:3c:40:91:d7:b6:b1:d1:af:1c:
bc:0f:3d:1c:90:18:d0:1e:67:0e:0f:99:23:6a:64:
b7:1f:d0:59:80:67:b6:90:c5:c8:48:19:1a:bc:e8:
14:49:1b:51:c4:03:bf:2f:dc:e5:03:71:b4:c1:4e:
11:7e:de:67:b2:18:b8:39:ed:94:70:f1:7f:c4:68:
aa:7f:c1:76:8a:89:0d:5a:e8:c4:ba:4e:8b:8a:a2:
09:c3:14:74:f7:0b:70:12:3b:16:10:04:a6:8e:0c:
b8:0c:13:de:6a:12:04:65:65:e6:f2:c3:83:98:c1:
e8:cb:83:b3:7c:01:48:63:7a:55:9b:25:9c:0b:2a:
17:46:5a:09:4d:ef:ea:cb:c2:09:6a:d6:f7:b4:6f:
0b:8e:4c:60:16:b5:8a:e8:f8:c2:a6:45:bd:ae:a3:
99:ca:1c:ae:56:16:46:6d:a9:e5:58:fb:d6:7e:b0:
53:ae:03:62:69:aa:c2:99:8a:95:45:c5:7b:59:e1:
fd:0e:de:b8:7f:eb:ce:22:c4:47:23:b4:40:c3:12:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:31:83:33:CB:72:70:61:17:0D:AE:7A:11:F3:C2:ED:1F:30:92
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6d:96:37:ae:cf:16:f0:9a:f0:57:6a:66:b0:19:6e:af:77:
1c:d8:ef:e2:25:02:39:94:6c:35:f4:13:4b:7e:b6:6a:29:28:
28:a7:50:0f:17:93:b5:a2:ae:44:52:af:69:7f:26:0b:0d:7f:
0d:8a:51:69:43:ac:46:8d:0d:a0:c8:05:b6:3a:9a:af:26:a0:
e9:34:bd:93:92:11:cb:4b:e2:ac:f9:19:db:7a:e8:d4:82:12:
74:e5:1b:3e:71:9e:04:fb:e1:95:92:f9:7c:57:a9:a4:e5:82:
52:2a:4d:d0:96:56:c9:26:9a:da:aa:05:e2:8e:de:c5:e0:63:
c8:74:2b:36:b2:51:2e:16:e9:7f:17:7e:4c:45:75:57:e8:64:
83:a9:0e:ad:3d:38:1a:e2:85:eb:0f:f2:a0:e2:bf:d4:a9:e6:
c2:5d:7d:6b:7f:69:60:2a:de:5a:c2:90:b4:41:72:8b:65:63:
87:cf:9d:7d:b2:5d:5c:b9:4a:20:e9:f3:fc:e7:98:df:48:21:
68:11:57:f7:c2:f8:6e:22:6d:75:d0:0a:b6:5a:3c:bc:70:48:
0b:4b:73:d0:d5:24:ec:db:5a:79:6d:6f:6c:e8:49:59:69:6d:
d7:0b:5b:85:6b:94:f8:f5:20:9f:0c:59:be:2c:08:e2:a6:ce:
b4:8b:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:45 2026 by rpki-client