Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: kGnuvvDqFQP4QYe1ZO/bG/v47YbiPobXQrYDhQxQb48=
Subject key identifier: F0:21:09:8B:36:10:73:F5:A3:C7:0A:04:B1:82:32:F8:40:EE:95:EB
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019D37F73CD148E415951084DC56B855FA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:42 +0000
Manifest this update: Sun 29 Mar 2026 05:00:42 +0000
Manifest next update: Mon 30 Mar 2026 05:00:42 +0000
Files and hashes: 1: 4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa (hash: 6AZogLPcjIIOPEMq9zRkZQNHkdZ8ldzB51VGATYSTPA=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: 9aaJQlACkrci4epsxrS+kf3T0+9rhYTiyKOJkGvVX98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3c:d1:48:e4:15:95:10:84:dc:56:b8:55:fa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Mar 29 05:00:42 2026 GMT
Not After : Mar 30 05:00:42 2026 GMT
Subject: CN=f021098b361073f5a3c70a04b18232f840ee95eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:4c:cd:28:90:28:eb:5f:15:e6:6f:ff:b4:
ad:d3:16:9e:64:11:ff:ad:56:db:23:71:4b:14:74:
6e:7b:4b:64:b1:e7:bf:21:e5:2f:c1:8e:82:b8:98:
8b:45:fe:6c:56:02:93:fb:96:55:06:70:39:0f:81:
b8:06:f4:43:90:db:9e:26:87:a7:b3:5c:88:cd:80:
aa:84:da:af:92:3d:cd:4f:75:de:83:5e:f8:dc:7f:
9a:82:b2:ca:c7:32:cc:c7:99:bf:6f:43:28:e6:47:
5a:28:fc:08:07:bb:06:19:e0:3b:fa:d6:1c:92:a7:
ce:ef:f6:dc:3f:c9:8c:4e:d8:e3:8a:b2:e7:c9:b8:
47:4b:16:35:d0:44:2f:87:7d:5c:9f:66:de:b6:ca:
5a:3a:f4:57:f9:19:e7:8f:71:f3:37:fb:46:8b:98:
03:30:1b:2d:a6:d7:c3:57:18:63:d9:7a:05:59:96:
6e:d6:f8:62:e9:45:b9:a2:1d:dd:39:ee:4f:28:75:
c0:88:68:5d:c5:52:48:2f:6f:64:b6:4c:6c:ca:46:
1f:c8:a4:70:82:53:d0:dd:e2:2a:9b:ac:32:cf:ab:
3f:96:13:ee:93:8d:3b:87:b2:7b:f6:5b:98:e3:aa:
fa:de:03:ea:bd:60:34:58:23:a9:ff:15:74:31:1c:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:21:09:8B:36:10:73:F5:A3:C7:0A:04:B1:82:32:F8:40:EE:95:EB
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1f:7b:8f:6e:87:03:45:62:13:39:5d:86:d8:39:04:67:bf:
2c:c8:20:11:4e:d2:20:8e:25:e1:d1:a9:b1:0b:e0:ee:61:72:
78:ea:c3:75:d8:6c:31:c1:10:77:81:7b:c7:59:5a:90:ad:f1:
c8:51:93:9b:b9:b9:eb:bd:97:38:4a:b5:48:aa:88:cc:1c:23:
71:df:52:63:f8:68:f1:f3:9f:db:49:5e:66:89:8a:52:9c:e9:
be:fb:bb:7f:e9:7e:c4:bf:28:7b:a3:eb:66:54:f6:25:6c:b7:
a9:ee:3f:99:89:48:12:20:0f:bb:f5:85:22:bc:7b:c7:a0:8c:
98:d0:61:cc:58:41:52:82:87:b1:cc:85:08:2a:ec:5f:13:2c:
0b:48:c7:36:3d:68:ed:60:04:51:25:f3:72:3f:5d:74:b4:74:
21:f7:ab:d1:1f:f9:31:71:a2:46:45:42:8c:03:64:60:37:45:
1e:ae:2c:fa:bb:ab:bf:36:1b:f5:b9:85:0d:d3:e1:3d:dc:7c:
5e:b2:65:a8:5d:26:89:e4:f3:ea:7b:d7:ac:c0:46:ad:74:44:
5d:ed:14:64:69:b0:52:88:2d:a6:06:fb:ab:3e:9a:de:42:56:
42:6c:0a:ef:fe:6e:56:cc:6c:66:f1:a0:1e:1b:a2:47:64:ed:
5a:6f:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:04 2026 by rpki-client