Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
File: Qqq-41QockWGZCkvpZLj914autQ.mft (raw, json)
Hash identifier: 9KSUNBQg0mktYy33nBQbTJaR9rwkSE/0gs3zYYrK7Sw=
Subject key identifier: CE:7A:C6:4B:35:93:63:53:88:74:AA:74:B6:5B:70:6B:D2:7E:BE:EE
Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Certificate issuer: /CN=42aabee3542872458664292fa592e3f75e1abad4
Certificate serial: 019D39E5E0C790EC7E90B8A48D077B083CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:59 +0000
Manifest this update: Sun 29 Mar 2026 14:00:59 +0000
Manifest next update: Mon 30 Mar 2026 14:00:59 +0000
Files and hashes: 1: EkG3e2CzMWqMey50Z0zLUoced24.roa (hash: zN704C7SP9ziI6h8RBTc9pIfbTJJHW3SA5CkRr77PJo=)
2: Qqq-41QockWGZCkvpZLj914autQ.crl (hash: KGM+vF+tR87D0fSf8qnOexMhUsIL2vmAp4w1zcRkM0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e0:c7:90:ec:7e:90:b8:a4:8d:07:7b:08:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4
Validity
Not Before: Mar 29 14:00:59 2026 GMT
Not After : Mar 30 14:00:59 2026 GMT
Subject: CN=ce7ac64b359363538874aa74b65b706bd27ebeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:d4:f8:38:a0:15:7d:94:46:c7:8e:cc:39:
b1:22:a5:4b:bc:3d:b0:90:4c:cd:0a:18:aa:7c:fd:
01:de:c6:34:89:ea:93:eb:87:3e:02:2c:21:bf:55:
71:ae:03:41:15:a7:5e:c9:94:23:e5:6d:a1:99:15:
df:fe:2f:69:56:4a:56:3c:e8:21:6a:bb:e6:4d:8a:
9b:fe:32:3b:24:0d:98:f1:9f:85:0e:ec:88:24:9d:
02:4c:6e:63:70:1c:7c:13:c6:07:74:f8:68:13:61:
00:39:cc:d7:38:12:ab:9f:cf:a0:b1:b6:04:e0:2e:
39:e3:0b:e5:a8:cc:29:38:fc:5c:62:8d:60:c0:ff:
da:9f:1c:90:d9:8f:4d:9a:ff:b9:f7:62:d3:7b:5d:
6f:ca:6b:10:f2:27:03:56:6a:d1:04:a4:7b:72:43:
68:99:be:2c:fb:59:37:96:fa:67:37:f7:5f:23:c4:
bc:b2:d4:4a:46:ae:8b:d0:a8:5d:4b:df:35:08:88:
24:13:a8:41:56:3f:1f:2e:76:3c:ea:41:a6:6b:02:
ee:38:3f:4d:27:a2:46:f3:d1:6e:d3:5d:af:31:9f:
47:25:8d:2d:3d:5f:93:9c:05:c6:09:ee:f5:74:6e:
ef:d3:c4:c1:09:36:44:9f:39:f9:6f:c0:6d:b3:0b:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7A:C6:4B:35:93:63:53:88:74:AA:74:B6:5B:70:6B:D2:7E:BE:EE
X509v3 Authority Key Identifier:
keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:47:a6:3b:a6:96:4c:68:50:d5:b2:90:47:67:f6:f4:ef:01:
7c:40:77:09:2a:54:45:15:b2:e5:0e:30:58:7a:57:64:1b:71:
b5:d8:c7:33:c1:f8:93:ff:59:bc:28:ac:ed:72:8b:ee:ee:3b:
70:9a:42:f9:5d:29:f3:70:dd:4c:c8:0f:a8:33:e9:f1:33:5b:
62:20:f1:08:f9:b9:cf:31:04:ba:4d:5f:fc:f3:55:96:dd:45:
09:8d:51:3b:d9:3e:64:bb:3c:38:bc:8b:0c:71:61:fb:2a:fe:
17:1c:7e:a8:52:29:b5:c6:8c:75:d9:44:07:a2:a1:5e:f4:aa:
58:88:3a:25:bb:5a:dc:e8:ca:08:57:7f:3c:38:f6:cb:00:e8:
5b:94:8a:87:81:8e:41:65:b1:96:91:38:32:5b:6a:50:c8:70:
d5:6d:f1:a0:aa:25:46:c8:7c:e9:6b:e1:d5:40:67:f8:c0:cd:
89:84:00:9a:03:b9:05:15:8e:e4:0e:df:41:0b:b2:2a:bb:61:
81:57:ab:41:f5:9d:ce:49:21:52:4a:4d:cd:7c:50:0a:84:ae:
57:3c:8d:c4:ca:bc:b6:b3:69:92:da:7f:7f:85:d1:04:77:4a:
a1:3e:ed:fd:8a:7d:f2:13:a7:8c:07:cb:c0:55:23:c0:3e:7a:
a0:4a:ae:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:44 2026 by rpki-client