Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: n2+T45Am+cF/FvJkV0nPKVjT5iYst3OoKXM/o+iqMYU=
Subject key identifier: 5A:3F:ED:3C:0E:E4:A5:89:D3:EA:C4:A2:03:39:34:49:44:65:32:C1
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 019D389C4169DD825FBECE1826EE6BD98583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0F39
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: yU2+LkzzS9k7I9+Kny2oN7Dk4qh2yLdlKut6+qpvJxs=)
2: cXrbKTXhSK7ki4TmnfmJOJqU_kQ.roa (hash: wGt3eC7XgUqAIQ3KH0Xjs1sf60C7d5hlU+BmNSn3D5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:41:69:dd:82:5f:be:ce:18:26:ee:6b:d9:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=5a3fed3c0ee4a589d3eac4a203393449446532c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:92:bc:18:c2:2a:79:36:4f:cc:36:54:06:
2e:94:0d:b4:9c:5a:c0:ff:60:29:e7:93:81:72:1b:
aa:bf:ee:b9:2c:a8:e5:5f:97:68:ef:bb:b4:63:a7:
df:38:58:a6:25:e3:3b:18:e7:44:00:28:bd:97:e6:
96:d8:3f:2e:10:ce:17:4e:97:23:2f:c6:a0:23:ab:
c2:df:99:21:98:a5:84:6a:b5:81:d3:ae:9b:65:a5:
00:38:79:f0:4a:21:47:64:ed:b9:a4:8e:a9:96:73:
88:c6:ac:6b:30:35:9d:b4:14:ca:40:6b:5b:94:ba:
a0:f5:63:70:f5:82:14:64:6f:bb:bb:f1:ef:a9:06:
ee:f0:1e:d7:f6:6f:ee:5d:84:b4:bb:1a:b6:98:ac:
7d:47:00:7a:f9:54:e4:a4:a5:d0:6b:51:a2:c0:c4:
07:84:c1:df:d6:24:7b:d4:4a:c6:11:9a:49:e1:99:
4f:7c:b1:64:ac:51:c7:ff:5a:da:a2:e5:4b:9f:23:
3b:0b:f2:02:56:5b:b8:b0:96:77:30:4e:b8:e1:c2:
ab:e9:e1:50:c6:0f:3c:80:29:8b:64:19:88:f3:e6:
b8:8a:c4:c8:76:b4:d0:f6:66:e0:f2:c2:f2:8a:48:
0a:f7:cb:87:18:89:34:3f:45:72:4a:6c:46:63:25:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:ED:3C:0E:E4:A5:89:D3:EA:C4:A2:03:39:34:49:44:65:32:C1
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ec:75:e6:82:78:b7:4b:b5:92:d0:17:b0:1e:56:ca:aa:70:
57:e3:b3:a6:33:82:12:a5:69:66:fe:a7:1f:21:bc:36:f2:a4:
5d:41:8b:db:02:80:37:8f:bd:1f:2a:ee:d0:f6:25:1c:f0:d1:
30:fe:46:34:b6:44:a5:63:83:11:ee:d9:2e:0e:ea:cc:ae:1d:
1c:de:fa:1f:20:5a:d0:b3:52:57:6b:d5:e1:f2:67:03:2a:7a:
79:a4:81:17:83:ab:66:e7:42:22:d6:9d:d2:1d:0b:3c:9c:f2:
65:82:a3:d9:61:60:26:be:af:db:bb:31:fb:b7:ec:26:4e:4d:
5f:96:17:81:6b:40:52:6d:7f:8d:aa:03:9a:e4:5a:f8:5e:b8:
3d:e9:db:f3:e4:80:90:70:db:ba:a4:84:26:c9:d9:f9:da:16:
c7:f6:54:ce:f2:ce:f5:70:2a:78:28:9d:a5:f7:d6:a7:a5:1a:
3c:fc:33:75:a1:03:6a:3c:97:8f:53:bb:8a:ae:bc:de:78:bf:
73:5b:2b:83:00:56:25:70:c8:76:7b:69:81:8e:db:3a:13:78:
12:07:a9:2a:d5:01:19:3c:21:ac:dc:29:86:57:ad:0a:2e:3f:
fb:de:61:45:cc:8c:b4:37:7d:ae:ee:9f:0a:a3:06:b8:62:a0:
3b:14:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:52 2026 by rpki-client