Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: tCFNKQfczEnq1Mxr0NtI3vQugu4+KlamDUFQ7Z/Je9Y=
Subject key identifier: F8:13:6D:A1:5F:B1:58:C6:6F:03:D5:CD:6D:5F:7D:E3:8D:D0:31:5E
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019D378986E63ACB03775A93A28A49A43603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: SVGVwz2/wPIl4wmgUrz6bmnv8VX3g14EZk8io55kUsE=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:86:e6:3a:cb:03:77:5a:93:a2:8a:49:a4:36:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=f8136da15fb158c66f03d5cd6d5f7de38dd0315e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:75:2a:cf:09:9f:9d:b1:23:7c:e0:a7:df:
40:94:fd:28:d1:b2:df:bc:81:e8:24:9a:c1:c0:b3:
d0:3b:34:92:fc:5c:48:f8:e4:17:1b:7b:e0:1e:1b:
94:ca:0a:09:f7:93:92:08:51:ad:52:48:9f:b8:eb:
9a:4f:ba:59:3b:c3:75:80:10:dc:81:38:01:c8:96:
9d:22:9a:44:4e:00:79:9a:f7:aa:65:ec:76:15:6b:
af:98:23:75:ac:ae:e4:01:16:bf:b5:df:75:1e:e7:
b7:83:e9:a6:3d:81:58:f5:38:ae:bc:04:52:c2:34:
63:f1:07:ac:c5:b2:c4:8a:0b:a9:58:66:c5:9d:d1:
bf:d4:e0:8a:d1:d0:d3:58:3d:de:64:5a:44:3b:6a:
df:c1:c1:88:52:5f:ec:13:65:96:c3:d2:34:35:f3:
69:a1:63:67:72:1b:73:73:7f:91:be:71:1e:d3:2e:
e7:7e:12:ee:db:d2:1c:eb:9a:34:20:81:d0:93:e6:
5d:07:b5:b4:d7:88:29:bb:5b:22:10:c4:7e:87:cd:
1d:70:fa:80:3c:ed:b4:12:95:66:8b:ec:68:e5:11:
4a:a7:80:ef:8e:b3:5f:b8:41:a8:ac:9d:0f:dd:63:
76:a0:97:bf:31:22:01:f4:be:7b:ce:20:8e:8d:d1:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:6D:A1:5F:B1:58:C6:6F:03:D5:CD:6D:5F:7D:E3:8D:D0:31:5E
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a4:f7:03:1c:cf:7f:a9:92:2e:79:26:9e:65:b6:78:4e:c0:
63:91:c9:84:eb:ea:b3:82:7e:89:e7:ee:24:d7:9e:07:0d:06:
31:d5:61:05:ba:af:59:88:3f:9c:9c:3a:0b:bf:a4:ba:9e:26:
7f:26:2c:39:93:23:01:13:34:94:42:ce:85:e8:14:db:b7:77:
20:8b:67:b5:6d:41:05:20:d6:8c:d9:3f:d7:8c:51:e6:62:9d:
3e:46:4d:e0:ce:ae:f8:79:94:59:25:84:7f:39:b0:47:57:a3:
7c:43:8c:f5:d8:a8:13:76:e9:43:5c:9b:67:99:65:b1:2d:33:
e0:86:70:96:96:f2:1b:a3:aa:2e:9c:32:a2:37:25:44:15:24:
3e:0d:aa:4f:f4:e3:51:b2:73:4d:d7:97:65:10:43:21:a8:0d:
b0:5e:a0:cc:e9:0e:07:79:c6:33:4f:47:9f:c9:ed:37:ea:9e:
7b:1c:90:20:b5:5e:71:a1:f4:7e:2f:40:d1:b5:81:e3:a2:48:
16:b9:e3:b3:b7:48:70:98:bf:5e:1c:f3:74:c9:89:29:ae:d5:
f0:41:fd:29:9c:b1:dd:a0:50:c3:e5:b4:11:f2:50:9f:70:9f:
23:06:ca:c4:20:a7:12:00:51:ac:23:29:37:e1:fe:22:f9:18:
de:29:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:50 2026 by rpki-client