Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: VZms+z2CAAeo6/a4YJQm2uTbqvuOQFEYyrh8Dk9uYQs=
Subject key identifier: 71:B1:D4:20:8D:10:66:6E:DB:3B:48:F9:42:14:C5:35:4F:B5:BD:C7
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 019D382E228F743CF1CF86A85A5743317D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: 8IknHpKPRllW0MQBiUdxVDr9GKY.roa (hash: TR9K0gn1/vvxwOrEB1fss/ul5XwSQYatd14/mtJabTU=)
2: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: xrpVqLY4u8Wwt8aePHitPBKcrfpaVhUp2/iGngA4nhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:22:8f:74:3c:f1:cf:86:a8:5a:57:43:31:7d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=71b1d4208d10666edb3b48f94214c5354fb5bdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:a0:ca:7b:9c:58:9a:6d:eb:37:aa:26:8d:
0d:fb:8f:d8:ec:d2:6f:b5:7e:0a:b1:ad:b6:70:0c:
8c:36:5e:d7:09:ee:c8:99:b6:98:bf:02:13:e5:30:
c4:cd:73:1c:a2:50:c9:0e:29:0f:10:ef:53:f7:d3:
33:27:26:86:a2:ce:9b:ee:23:f2:b4:3e:fe:4d:cb:
5f:27:65:4f:c2:8d:90:b9:a0:2c:92:85:3f:b5:3e:
3d:13:de:5a:05:03:14:50:bb:9f:04:a2:1a:d3:4e:
24:19:f9:2e:7d:5f:30:31:6d:d3:b6:c0:22:4b:2a:
f1:70:60:6f:eb:ca:e4:09:98:6f:38:84:52:8b:0d:
9e:ed:d1:fb:f9:0f:41:17:7f:62:d1:2b:64:49:bb:
47:9e:16:6c:03:95:bb:ba:f4:04:0c:99:2a:e6:6d:
cf:58:29:03:7d:de:e2:62:94:61:07:c8:83:db:a3:
d0:66:81:7d:e2:1a:ea:08:52:84:a6:9a:6e:7a:ab:
05:0e:74:f9:b4:c8:47:2e:b1:01:a5:56:ad:40:d4:
bd:c6:d5:d7:33:c4:7d:74:28:41:b6:17:05:8f:3c:
47:af:dd:f7:7e:e9:73:0e:01:a1:47:87:3e:91:54:
04:49:5b:34:b5:3e:e5:df:cc:1c:8a:d5:47:15:a8:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:D4:20:8D:10:66:6E:DB:3B:48:F9:42:14:C5:35:4F:B5:BD:C7
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2d:07:ba:ce:9c:a0:42:b1:54:5b:56:58:19:cb:7f:76:eb:
63:41:fe:85:f2:d4:0b:1e:ee:a7:ad:c3:8c:6d:fb:f5:3e:42:
b4:23:c4:e8:1a:ad:ca:2a:5d:6c:3d:8a:5e:21:78:32:14:18:
a7:9d:68:51:80:4f:ce:76:f2:1d:c4:b9:f9:f0:f6:c6:89:18:
10:10:02:a4:b2:e1:fc:18:75:98:14:50:be:c8:92:ba:54:7b:
94:db:0d:57:38:40:68:91:21:54:76:42:c4:ec:48:53:5e:f2:
5c:95:c3:34:07:ed:bc:b0:71:4e:e6:41:28:9b:ed:5b:dd:e2:
89:e2:df:84:cd:50:cf:78:72:8f:c1:92:51:91:0a:25:4f:a7:
97:f8:7c:31:a3:23:e2:90:91:e9:06:49:fb:10:0a:30:23:d4:
cd:2d:eb:85:1c:5c:2c:82:e8:35:d1:52:8d:b1:91:fb:c9:23:
fa:bd:f4:3c:6e:1e:6f:aa:21:19:14:95:21:9a:f2:a5:74:18:
d2:ca:6b:78:28:c2:59:20:8d:d7:d6:56:82:5b:ab:93:7f:b2:
1c:e6:3c:3d:65:61:60:1b:88:34:48:64:09:9f:89:5c:9a:11:
04:17:d0:b2:0e:8b:f8:f3:9b:6c:28:21:cb:31:ae:65:6e:40:
44:ea:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:05 2026 by rpki-client