Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: XdgzWq4Bcc/Px9k60B91PEaLY60j2uKg7dL4dvKM9fY=
Subject key identifier: 3B:24:8E:CB:DF:D0:12:88:94:B9:C9:BD:83:A5:94:18:33:36:A5:4C
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 019CE5FF58EEC0FFF4BA538ED486B79BEC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0F4B
Signing time: Fri 13 Mar 2026 07:00:42 +0000
Manifest this update: Fri 13 Mar 2026 07:00:42 +0000
Manifest next update: Sat 14 Mar 2026 07:00:42 +0000
Files and hashes: 1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: r0JW2+r9Lc0XX0tJ6/yVj74+on4r7JTtlSMDShttSPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:58:ee:c0:ff:f4:ba:53:8e:d4:86:b7:9b:ec:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Mar 13 07:00:42 2026 GMT
Not After : Mar 14 07:00:42 2026 GMT
Subject: CN=3b248ecbdfd0128894b9c9bd83a594183336a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:f9:a5:e0:8d:3c:d1:ab:bb:10:3d:e9:c8:
aa:e6:ae:27:d1:81:b4:9f:d7:d2:a0:2a:ee:58:3a:
c2:fa:9d:86:54:f0:fd:c9:24:6a:eb:d6:69:8c:af:
61:6c:bf:a5:a2:07:1e:96:98:70:38:d5:2e:d3:7e:
8c:b5:ef:11:56:41:9c:0d:e6:c2:03:f5:e3:01:82:
6e:16:06:d6:7a:67:c2:c0:37:61:da:c6:42:ec:5e:
41:2f:e9:24:c9:11:e3:7b:03:c2:ef:cb:15:8b:80:
5e:ec:eb:c3:3d:33:67:b3:e7:d4:e9:e2:73:68:7f:
2d:2e:96:36:ba:fa:eb:7d:b0:ca:ba:a2:d8:f8:27:
7a:cb:a0:46:39:8f:7f:6c:e7:8a:d1:4d:8e:04:a7:
36:c8:98:86:ba:f6:d6:8c:34:dd:c0:9b:4f:ac:c8:
a2:7f:97:b9:7a:ea:00:98:11:5b:1c:c7:00:0c:70:
01:01:a1:d2:08:63:4c:55:33:e1:fa:23:ec:07:74:
91:c3:a1:a6:57:7c:77:f7:07:d2:3d:db:3a:0d:90:
40:66:88:a1:1b:54:ed:4d:d9:a2:fa:0b:4d:52:fb:
09:a3:f4:47:cd:2e:b7:9b:a6:67:f5:fc:a5:5b:ed:
13:62:c4:e6:4f:b8:9a:69:53:03:09:15:a7:92:f3:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:8E:CB:DF:D0:12:88:94:B9:C9:BD:83:A5:94:18:33:36:A5:4C
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:f8:ce:4a:72:c4:79:58:30:42:9f:ec:f2:ef:12:ad:04:
14:8f:de:6e:6a:6c:29:bd:b7:45:aa:b5:13:cc:90:a7:96:5a:
a4:db:fe:cd:62:b0:a7:13:ef:bf:55:3f:a5:71:8c:79:f9:ec:
32:fe:41:23:a1:f8:b6:00:d5:54:1d:0a:90:0e:3c:08:5e:3c:
15:76:79:1e:2a:07:de:a5:ef:c2:54:99:9d:16:2d:2b:38:ef:
3e:2d:c6:87:8e:b9:db:f1:6b:f0:6c:bd:6f:c9:66:42:fc:e0:
f1:e6:51:41:c6:3c:e5:c7:c3:41:32:4e:1a:d8:21:d7:44:9c:
21:0f:04:ce:5e:b0:e1:62:0e:36:60:a1:cb:06:5e:80:76:50:
4c:14:c8:00:55:36:f9:de:f8:a5:00:14:34:27:3c:f7:02:2e:
8a:6b:3f:46:c3:32:21:68:0c:01:01:99:fe:b4:33:c9:89:1d:
59:dd:38:1c:50:6f:9e:16:3e:0f:f9:6b:cd:02:84:12:08:b9:
27:14:f1:37:a7:77:42:3b:b7:65:87:a4:69:c0:62:7e:e0:b2:
ca:75:c6:00:bf:1a:10:42:c1:06:89:6c:e7:dc:c5:ac:c3:da:
b9:52:08:fe:7e:7d:8a:ac:bd:d2:eb:d2:99:07:57:92:80:ac:
ad:33:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:09:44 2026 by rpki-client