Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: pvkzzIntcwVSOzx5lwI7sxkDpEklNV2N65goocr/UHA=
Subject key identifier: B3:91:81:5F:D3:28:9F:9E:61:4C:01:1F:64:FA:ED:82:B3:AC:19:5F
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 019D37C02189FDBBCC664304AC73F51001CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0DFD
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: MXrIZpY41SQjiu6V34vDaKGyKCI55AULO360oiXKRJY=)
2: qkoAr_KuXYuK5zR2LayC2hJcN9Q.roa (hash: QgFzqo+zZRD3aFWIozFXdcVEC6p5YunAVsbUCMVWzNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:21:89:fd:bb:cc:66:43:04:ac:73:f5:10:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=b391815fd3289f9e614c011f64faed82b3ac195f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:80:e6:44:9b:6f:5f:77:a8:5d:96:9f:59:
15:d2:38:07:96:36:71:0f:1a:3a:05:6e:38:cc:27:
b9:43:44:0d:3c:2c:c7:0c:47:df:22:42:5d:ee:68:
dd:7c:dd:c5:74:e5:26:6c:57:8a:15:56:1e:85:d9:
67:8b:77:21:66:9a:a8:ea:d3:6a:88:85:c5:e2:a9:
bd:a9:72:91:fb:62:36:13:06:29:a2:76:55:9d:d5:
ba:ed:ad:18:26:d2:8a:cf:f1:32:c0:dc:e9:8e:1e:
8b:ac:53:85:bb:7e:87:32:c6:b4:75:b8:c8:80:5a:
8e:69:2f:95:82:35:94:78:b4:55:84:7b:3c:dc:e5:
1f:0b:09:a8:e3:af:7a:c5:17:32:70:05:dc:9b:8b:
a7:6c:3d:35:f9:23:f3:d1:57:18:bb:d4:9d:d0:be:
00:52:cb:fe:2c:b5:71:9e:6c:91:d5:eb:92:69:35:
cc:41:10:3e:0b:55:5f:e2:30:56:b8:04:60:5c:de:
a0:51:0f:19:8e:7f:f4:be:62:1d:07:e4:d7:65:34:
7b:8c:54:df:c4:dc:fe:43:68:29:52:c9:87:8d:88:
7e:3e:99:6f:98:5c:86:39:7d:6f:c3:4e:b2:53:b7:
72:14:a3:ee:1d:32:d4:14:48:cd:9f:3e:61:54:92:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:91:81:5F:D3:28:9F:9E:61:4C:01:1F:64:FA:ED:82:B3:AC:19:5F
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:54:ad:8f:cf:e1:7f:5e:98:1a:5f:51:ad:86:b9:41:b1:33:
1d:10:fc:cd:6f:08:f0:54:37:f3:f9:2a:e2:25:e4:26:e6:17:
7c:ed:38:59:24:9e:1f:0e:b0:7c:8e:c5:38:01:47:7c:96:15:
cd:e2:4e:6d:45:5d:11:a0:e8:dd:a3:8b:bc:d1:a0:bf:ed:1a:
69:9f:d6:7e:f1:57:32:ca:50:13:a7:ec:06:04:1d:98:9e:73:
b5:b5:d9:7b:17:cb:6e:db:1b:76:1b:99:3f:4b:76:13:61:c9:
af:08:7b:db:64:ef:36:ed:26:b4:8f:ea:3e:ca:db:2c:3c:69:
44:8c:72:e9:20:a7:d7:32:0b:a4:6b:3a:13:83:70:2a:0c:6d:
29:b6:65:62:d9:94:43:b7:8b:9b:7a:5a:d6:29:82:6f:c2:7e:
78:34:3c:4e:b2:67:ef:92:1a:c0:c0:6e:dc:aa:a9:0b:d7:a3:
2b:2c:8b:b9:5d:5e:6d:fb:69:40:62:6e:39:98:d0:62:9f:0a:
7d:bd:d1:00:49:9b:fe:a6:45:66:52:cd:07:f4:31:a9:64:b3:
9c:c5:2e:2f:19:e4:32:06:e4:85:be:28:54:9d:27:6f:49:c4:
09:48:11:21:e2:d1:f0:d8:f4:97:45:16:c8:96:fe:b6:9f:eb:
7c:2e:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:40 2026 by rpki-client