Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: NqDN2VgLOUu3DUMLmx0Tchx5PA0Yj6NonyBkvZlH7jM=
Subject key identifier: 22:08:34:7D:3E:C8:71:18:CE:72:5D:41:D2:7A:56:0B:16:8A:39:79
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019D247161DF3AE27AA2182467E34F883C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 18B0
Signing time: Wed 25 Mar 2026 10:01:43 +0000
Manifest this update: Wed 25 Mar 2026 10:01:43 +0000
Manifest next update: Thu 26 Mar 2026 10:01:43 +0000
Files and hashes: 1: p7BVCU62BRURJnqp18vcgZBi9lA.roa (hash: DLOPi5ESV+e2DHMAV+0PXNX8prnnrufqQAKqkUfKYls=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: ctr7JpS5oiZOj6jPyjMzgBT++iFR/Xdj4+NEOjhceoU=)
3: tS7Ekl755jz7sx7rmhOe1p5tzfI.roa (hash: JxL6ENaZZO0bTihUCNQQ0Sy7sFcJ4MbgWVnIFPKdL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:61:df:3a:e2:7a:a2:18:24:67:e3:4f:88:3c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Mar 25 10:01:43 2026 GMT
Not After : Mar 26 10:01:43 2026 GMT
Subject: CN=2208347d3ec87118ce725d41d27a560b168a3979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:a5:c9:d5:95:0b:16:09:a1:6c:bc:3b:bb:
e1:b8:03:e8:5e:0c:d4:c6:57:17:47:02:30:46:44:
af:4a:2f:be:b1:a3:aa:ad:e5:24:59:ea:71:38:a4:
27:2e:bc:2a:fc:b3:3a:e0:d5:3c:5e:52:de:39:9b:
0f:97:85:a4:69:bb:42:e5:43:61:e7:e6:33:d4:41:
88:c3:8a:70:ef:72:4b:7d:03:18:60:e9:86:af:3a:
50:d8:cf:8d:f0:43:22:67:cf:b8:ba:4f:b2:46:1d:
58:fc:78:96:30:54:db:39:5c:91:9d:53:18:6b:55:
e2:0c:67:06:45:1b:e6:1d:0f:e4:8a:42:a7:92:10:
13:74:fc:25:b9:e5:f4:ab:b0:f3:bf:84:84:a5:e7:
38:99:97:8b:13:a2:ea:ee:a9:b3:7d:09:04:c7:7a:
cb:19:46:da:c1:2b:5d:70:3b:58:62:d9:34:34:9f:
22:02:46:c5:a8:ff:29:6f:2a:66:83:5c:21:1a:b5:
85:42:b2:b8:2a:93:9b:02:71:d8:5d:9c:99:ea:aa:
c4:18:4a:1b:dc:c9:5e:69:45:f0:82:2c:a8:43:da:
a6:23:e4:52:88:ae:bc:04:db:e9:e8:f1:ef:b7:68:
10:e5:77:af:ad:b8:e9:b2:f6:92:c6:9c:75:29:36:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:08:34:7D:3E:C8:71:18:CE:72:5D:41:D2:7A:56:0B:16:8A:39:79
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1a:41:e0:12:10:19:9f:7f:2e:79:62:0c:dd:ee:9a:d0:c4:
22:ee:35:aa:9a:bc:06:e2:56:29:70:2f:b0:24:71:b5:15:06:
de:20:4d:94:78:b9:a2:8c:f4:8a:30:47:f7:a2:04:b1:8d:74:
1d:bf:c2:0c:f5:b4:5c:ee:ff:42:da:0f:76:d4:45:ff:1f:79:
27:e0:2c:31:c8:09:9c:37:36:d2:bc:b0:ba:f6:de:6e:ba:90:
03:c4:5d:5e:7d:5e:1e:fa:d6:e1:05:54:5a:23:90:fc:c9:96:
5a:d3:85:ac:f8:29:20:bc:88:e0:29:de:52:2d:a8:7a:a7:eb:
aa:4f:dc:05:9f:9a:e5:b5:ba:23:9a:bb:3d:86:0c:05:e8:b3:
4b:c7:df:61:f4:7e:4f:b4:bc:cd:3c:13:4d:09:78:37:06:31:
40:81:cb:e4:50:3e:7e:78:77:de:c1:b4:56:3e:09:59:aa:bc:
17:78:39:20:6f:6b:00:32:00:6c:66:47:a7:cf:7b:b8:07:ed:
4e:90:13:0c:aa:3f:4a:49:45:99:f3:f0:be:79:52:ff:3c:c4:
f5:bb:c7:f0:96:8d:75:92:0c:79:31:f4:a7:2c:eb:59:0c:d2:
01:f5:c5:7d:52:1d:d7:ff:01:0e:11:84:c5:85:f8:6d:45:ab:
40:d0:39:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 15:18:28 2026 by rpki-client