Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/97555d-e16a-4661-a590-0691e4615fd0/1/Q0GV8AOXY6Daeh2w5QlVkTgszGM.mft
File: Q0GV8AOXY6Daeh2w5QlVkTgszGM.mft (raw, json)
Hash identifier: bbJEnshlhuolIXPiEWpSjIktk33/thgw0ZwP4kyqPTw=
Subject key identifier: 9D:41:CF:8C:8B:1F:AD:4F:D7:9C:93:D8:E2:38:1A:E9:D2:57:F3:1F
Authority key identifier: 43:41:95:F0:03:97:63:A0:DA:7A:1D:B0:E5:09:55:91:38:2C:CC:63
Certificate issuer: /CN=434195f0039763a0da7a1db0e5095591382ccc63
Certificate serial: 019D37897DCC17DAA7F773120BEE934D2E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0GV8AOXY6Daeh2w5QlVkTgszGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/97555d-e16a-4661-a590-0691e4615fd0/1/Q0GV8AOXY6Daeh2w5QlVkTgszGM.mft
Manifest number: 7A
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: Q0GV8AOXY6Daeh2w5QlVkTgszGM.crl (hash: sL/USJRd6Le8ELxfpYFhIXN5U7gXaouQAwnKHfoRI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/97555d-e16a-4661-a590-0691e4615fd0/1/Q0GV8AOXY6Daeh2w5QlVkTgszGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/97555d-e16a-4661-a590-0691e4615fd0/1/Q0GV8AOXY6Daeh2w5QlVkTgszGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0GV8AOXY6Daeh2w5QlVkTgszGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7d:cc:17:da:a7:f7:73:12:0b:ee:93:4d:2e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=434195f0039763a0da7a1db0e5095591382ccc63
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=9d41cf8c8b1fad4fd79c93d8e2381ae9d257f31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:1c:ee:1b:ea:40:02:cc:cd:0c:fc:2e:a1:
cc:0a:4f:df:1f:fc:c8:1f:c1:0c:2d:21:83:76:7d:
31:12:09:bc:b2:41:20:0d:a1:a6:7d:7c:3f:c3:70:
a5:63:61:7a:e0:ec:9e:b3:e2:99:a7:ea:cd:19:ec:
8a:9e:c2:78:b2:84:ba:8e:52:d2:c3:29:a3:ed:69:
08:49:11:8e:8f:b0:98:ab:e8:6b:87:0c:36:0a:e3:
b5:fc:3d:11:10:1c:2d:e4:fa:a4:1e:e8:a2:37:61:
3d:e8:b4:b0:5b:50:af:6c:6d:f9:ec:88:71:17:42:
51:83:42:e6:b4:1b:46:7a:9f:20:c7:55:a2:64:23:
f9:df:f6:03:63:bc:13:79:0b:28:f8:c3:9f:a7:7e:
af:68:5e:48:b2:81:e4:e7:c5:8b:b9:19:b2:a2:37:
57:72:8d:8c:61:10:85:ac:a2:ae:63:ce:a5:41:7f:
3f:33:1a:8b:88:61:c0:3d:a6:8c:8b:49:28:0d:b3:
f7:74:d8:19:b8:57:dc:4e:69:70:7b:48:75:a8:43:
f3:29:ee:88:c7:48:73:ee:29:65:91:cd:5d:68:1c:
e8:53:10:bd:d0:dc:c7:69:08:19:b1:5d:5c:36:5c:
b0:49:9e:1c:f8:a6:14:08:b8:07:a1:ca:21:3a:09:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:CF:8C:8B:1F:AD:4F:D7:9C:93:D8:E2:38:1A:E9:D2:57:F3:1F
X509v3 Authority Key Identifier:
keyid:43:41:95:F0:03:97:63:A0:DA:7A:1D:B0:E5:09:55:91:38:2C:CC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0GV8AOXY6Daeh2w5QlVkTgszGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/97555d-e16a-4661-a590-0691e4615fd0/1/Q0GV8AOXY6Daeh2w5QlVkTgszGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/97555d-e16a-4661-a590-0691e4615fd0/1/Q0GV8AOXY6Daeh2w5QlVkTgszGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:53:7b:58:18:10:7b:39:40:aa:51:20:95:cd:18:bf:78:12:
ad:ee:a1:81:9e:8d:a7:4b:94:bf:ec:c5:1a:ed:d2:5d:eb:a7:
f6:9f:e3:00:57:cf:e7:df:d4:64:e0:03:42:12:46:f5:2e:54:
98:a3:b1:2d:eb:2c:ae:fc:ea:38:0d:e9:4c:3e:e2:55:2e:bd:
79:2b:50:d6:5c:95:f5:3f:f9:32:81:f5:1e:19:86:5c:93:e0:
ff:13:c9:54:dd:df:74:71:ac:ee:f5:05:ad:9a:b9:c7:cb:24:
a6:bc:a1:48:9f:b8:bd:46:04:95:ab:ce:30:e9:e3:b2:27:47:
8b:31:5b:78:ea:77:13:26:ea:2d:ef:a2:eb:b5:45:ca:0c:a3:
9b:82:ce:b7:1d:48:71:b7:f4:e9:32:c8:91:30:04:7b:06:54:
33:57:5d:c9:b9:85:61:dc:9f:58:fe:2e:b3:fe:12:cc:88:97:
89:8f:91:c8:c6:85:89:06:37:e8:1f:f5:97:04:bf:35:b5:93:
f9:56:85:50:49:a9:92:8d:4f:17:1e:ba:6c:18:2d:77:eb:f8:
67:82:dd:23:3e:c0:20:b4:81:76:f9:10:51:2a:a8:bf:09:dc:
41:dc:59:b8:35:db:71:3f:bd:ff:6b:ae:de:e7:6c:41:6f:d4:
ff:77:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:17 2026 by rpki-client