Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: 2hPLuhAnaZ3kTV4CBSgKvExKgPtCQGrHgKSfJdcoL/w=
Subject key identifier: 2E:B3:A6:DA:AD:66:D7:1C:56:7A:51:82:50:4B:6A:F1:C9:D8:6C:79
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019D1233EE7ABC07CF359681F220CF35F5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0A69
Signing time: Sat 21 Mar 2026 21:01:26 +0000
Manifest this update: Sat 21 Mar 2026 21:01:26 +0000
Manifest next update: Sun 22 Mar 2026 21:01:26 +0000
Files and hashes: 1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=)
2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=)
3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: a/xxkm2iLfpfifZSxoUIvIw16oAEPI/xgWXA86OQg4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:33:ee:7a:bc:07:cf:35:96:81:f2:20:cf:35:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Mar 21 21:01:26 2026 GMT
Not After : Mar 22 21:01:26 2026 GMT
Subject: CN=2eb3a6daad66d71c567a5182504b6af1c9d86c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:77:ee:b8:4f:84:39:c3:71:6a:5d:e6:ee:
7f:14:0e:19:0b:5a:c6:87:4c:71:53:67:64:47:b6:
28:13:aa:c7:ac:5a:44:53:05:5b:11:b3:08:4a:b5:
ea:03:67:37:4b:b9:60:da:6f:97:ce:fb:ff:85:b1:
e7:66:cc:d5:90:0f:8f:75:b2:94:75:d8:a0:2c:00:
6e:44:c6:69:2a:ac:0f:79:6b:7d:10:67:c8:ca:6b:
c2:7c:57:f1:63:5b:24:b8:bb:85:f7:b9:0d:18:7a:
11:d4:dd:d2:ac:1c:9e:91:17:1f:ca:4d:a9:cc:5b:
91:c5:2d:84:e9:50:ff:84:3b:f4:9d:e7:b3:4f:e7:
0f:07:6c:b2:be:35:e4:10:d4:54:7b:fd:b3:ed:79:
49:9e:fa:d6:8b:d4:33:84:05:f5:3a:28:99:64:f7:
5c:75:27:f2:b8:db:1d:30:98:ad:30:80:8a:62:7e:
78:68:55:0e:2f:7d:91:d6:a4:f4:a9:19:cf:46:7f:
9b:e0:0b:38:89:74:12:9b:3d:93:c0:29:a5:71:34:
42:d0:2d:fd:a0:83:49:59:2d:51:f7:60:63:71:b5:
5e:15:6c:11:4b:78:66:65:c9:11:99:74:f8:0f:de:
b4:45:5e:3e:9a:f8:13:1a:70:cb:93:c9:86:41:17:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B3:A6:DA:AD:66:D7:1C:56:7A:51:82:50:4B:6A:F1:C9:D8:6C:79
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6a:84:bb:29:fa:3e:ec:2f:91:76:03:5e:01:3c:25:f2:f6:
83:23:54:20:58:f3:6f:70:7d:16:cc:93:57:5a:b9:2d:0d:d3:
b4:38:d1:7a:6b:8d:a8:30:be:65:2d:9c:97:9c:57:02:46:b3:
c3:1d:38:55:b5:73:03:f2:8a:f3:dc:84:0b:93:0b:4b:3c:32:
7e:60:f7:e7:66:1a:81:7d:87:f0:3a:d9:4d:36:69:9d:7a:32:
0b:e0:d2:ee:14:e4:6c:80:8e:01:31:51:4f:4a:6c:92:f3:62:
aa:c9:00:e0:2b:6e:c7:b9:dd:fb:31:38:e7:ce:19:23:d9:6d:
da:3f:0b:5b:45:0c:89:ba:7d:d5:23:83:62:2c:0d:ee:c4:b8:
a7:0f:a2:2d:7e:4b:b9:5c:48:4c:8d:53:87:81:dd:66:c8:1c:
33:b6:cd:44:a3:34:6b:ce:a8:f9:d6:57:6a:a3:f4:d0:f6:dd:
9a:d1:43:bb:56:96:a4:0f:41:c5:4c:8d:9a:a7:ea:fc:dc:cf:
8f:84:72:f7:8d:8f:68:0a:d7:c2:1d:ae:f5:91:b8:db:7f:74:
57:bc:a5:2b:db:fa:fb:c4:3e:d4:58:f4:a8:e2:d1:e9:36:4c:
7c:49:7c:47:cd:66:28:ed:3c:d6:25:67:73:53:43:7d:b7:84:
84:d7:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 07:18:43 2026 by rpki-client