Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: FVIx0YX8MIH1dPxTn9k9Krwfo2OlxdSPP3z2M5NmMvk=
Subject key identifier: 3E:90:77:EA:99:F5:A5:3A:B2:D8:DB:9D:B3:18:71:12:18:24:93:EE
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019D390A0BB7B52113BF08A282E672248CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 10:00:52 +0000
Manifest this update: Sun 29 Mar 2026 10:00:52 +0000
Manifest next update: Mon 30 Mar 2026 10:00:52 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: +qLa29vh5StYBzRmIUAF4MW8un/Uduior5fNDjcDi2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0b:b7:b5:21:13:bf:08:a2:82:e6:72:24:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Mar 29 10:00:52 2026 GMT
Not After : Mar 30 10:00:52 2026 GMT
Subject: CN=3e9077ea99f5a53ab2d8db9db3187112182493ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:88:57:87:19:f5:a1:6e:cf:a0:4e:99:96:
52:33:83:d0:06:6d:33:67:83:eb:7b:b5:77:90:09:
6e:67:de:e8:85:7c:73:ef:40:67:07:6c:76:71:2b:
20:f0:67:dc:b2:a5:6c:e8:92:ac:97:1a:a6:38:a8:
da:4b:b6:95:de:66:eb:a3:2e:6f:62:37:89:1b:ff:
86:31:a8:8e:29:17:38:e0:a0:5e:ae:03:33:a3:db:
1c:0b:f3:3b:e2:df:9e:45:8f:f1:b5:e2:d9:f3:a0:
5b:7b:13:78:41:22:d0:5c:91:d2:eb:c1:d4:28:75:
0e:07:bc:17:99:c0:fe:15:96:aa:73:1b:a7:f9:cb:
08:3d:ca:75:89:97:18:bf:97:12:ce:5f:91:40:6b:
11:bc:73:db:40:a8:36:d2:1d:90:47:41:33:8f:7c:
32:cb:73:ad:7c:8f:9d:dd:32:a2:63:42:9b:ae:12:
74:6b:df:de:a5:5b:97:cf:57:26:d9:e0:f9:f2:b6:
7d:58:8b:0b:c2:92:fb:26:e1:fe:8a:46:6e:ed:7f:
13:65:9d:b5:fb:48:18:4c:2b:a8:f2:95:e6:3d:19:
38:cc:5c:fb:9a:15:b8:9b:0e:c5:64:2f:36:53:9a:
ec:cd:b8:c1:e3:87:62:02:4a:5d:ac:96:79:aa:b6:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:90:77:EA:99:F5:A5:3A:B2:D8:DB:9D:B3:18:71:12:18:24:93:EE
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:98:e1:00:b5:9d:8b:f0:85:0d:b4:fe:af:ca:e2:b9:5a:85:
be:46:3b:80:d5:0a:e3:61:0d:11:7d:7a:16:bb:46:83:99:3b:
5e:c9:d6:83:06:b1:82:ee:7d:46:43:84:5d:23:c5:24:ce:e7:
0a:fe:83:7a:5f:b4:ac:bc:84:da:cf:32:f3:0d:60:fc:c4:e7:
e4:8a:ae:f4:fc:55:02:60:30:8c:22:b4:c9:78:c8:64:2e:17:
99:ac:7c:13:5c:dd:08:b8:03:45:26:1d:bd:f3:ea:1c:d1:27:
80:50:08:28:59:e4:59:a6:f7:8b:ef:70:ca:e8:90:55:fc:61:
2e:b2:f2:85:d7:54:c9:d6:60:69:dd:3e:a4:68:c3:5c:68:4e:
51:f2:71:79:0a:8d:d6:61:83:18:bc:57:ab:cd:5a:16:b9:99:
3c:8c:00:b7:b4:bd:7a:5b:58:e7:d3:c0:a5:fb:d3:7b:05:a2:
ef:f0:cb:3a:f2:55:c3:a6:f9:27:c2:59:26:48:e0:fd:7d:61:
5f:f3:ae:0b:c0:90:5f:58:61:d6:ce:1b:77:a0:56:af:4d:f0:
ef:7b:50:d8:a1:f0:61:5c:38:ca:a3:79:7c:4b:89:64:d5:48:
f3:c5:74:b1:33:2f:c9:c0:d1:fa:71:f6:e0:60:14:d5:be:c7:
04:2f:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:11 2026 by rpki-client