Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: J7TBA24glrKIIEHYBkTVbCMsQWbFDElAMydC/QdDvpU=
Subject key identifier: F3:A7:E8:B7:E9:21:CA:04:5B:D3:F0:6E:AC:47:54:EC:80:27:29:F3
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 019D3865EF129B8C1FD050EE2353279F0C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: uQLglyQOqIFEGZSyn3KtOsdbOxNUyc89gmbnR7Tmg38=)
2: e3szWYnRwcnVrlDIwYxJ3pYMom4.roa (hash: BKtUpfmwzLTGUQniKBkvPeoFHhYGa5oaDqKuTCxUab8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ef:12:9b:8c:1f:d0:50:ee:23:53:27:9f:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=f3a7e8b7e921ca045bd3f06eac4754ec802729f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:c8:fc:bb:d1:a6:5b:4b:87:cc:e1:22:8b:
c1:46:99:df:97:57:bf:6f:9a:7b:42:8f:a2:ae:0f:
da:13:7f:3f:3a:9c:ee:6f:7c:0b:be:00:52:1b:f5:
f6:70:2e:07:5a:0e:bb:c0:2a:44:33:d3:af:ad:b0:
ab:8b:97:18:53:d5:e3:48:8f:78:d3:ed:27:02:5b:
5a:df:58:ee:e8:04:1d:25:61:9a:5c:44:7b:4a:0b:
fd:9a:b6:c2:df:cd:79:c9:66:fb:36:d7:d5:06:73:
91:d9:dd:33:40:1d:d4:d9:0a:66:50:3c:5a:f6:73:
ff:4a:ea:86:58:3c:31:a1:9c:64:fe:af:df:7d:f3:
18:35:e5:8d:ed:51:09:ab:4b:c5:ef:58:5a:19:f8:
0b:fb:1b:f4:cf:2a:c0:13:23:dd:39:3a:1b:01:e2:
63:23:0e:c5:2d:4b:8d:a3:2b:e3:ef:23:02:7e:eb:
16:c5:c3:4c:7b:df:bc:2d:2a:ab:a8:51:4c:3b:02:
d2:fc:2c:30:32:88:c3:38:a4:f7:a4:e0:b5:c0:4a:
62:a8:06:fd:16:e8:6b:bb:da:23:bf:2d:a2:82:82:
35:3c:57:a6:e2:25:8e:88:6f:c1:50:61:89:32:9b:
cb:8e:e9:e0:9e:1f:0a:64:b1:a7:38:b4:b7:6e:e5:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:E8:B7:E9:21:CA:04:5B:D3:F0:6E:AC:47:54:EC:80:27:29:F3
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:93:0f:02:77:5f:df:dd:e6:95:3c:6b:72:a1:95:bd:64:81:
3b:fa:d3:d6:45:43:d7:ad:2b:a5:02:dd:86:14:05:6b:93:49:
bf:cf:3f:49:6b:9a:f5:0b:f4:75:0b:a8:54:6b:c3:5f:95:28:
10:74:7a:90:d0:54:71:dd:9d:87:71:4f:10:c5:f6:3b:12:23:
68:8b:e4:15:95:27:c2:32:ac:01:6e:ab:ee:54:41:fd:07:8c:
1e:ce:6a:e9:32:00:4c:fe:4e:73:b5:69:f8:68:9a:0d:7c:41:
91:9d:f9:3f:90:ec:c2:ff:dd:63:6d:07:e8:40:50:6e:dd:49:
19:c9:31:c6:c0:8e:f2:1f:6d:82:b5:16:f4:34:0c:10:c7:73:
bd:b9:31:b9:41:86:a4:cb:19:33:d3:07:dc:ba:7a:35:69:ba:
b7:7c:e7:3b:87:4d:34:91:a6:4a:65:9b:f3:c4:f0:9b:95:db:
9f:29:e7:e2:02:0d:a1:f1:01:85:a0:41:bb:9c:32:82:6f:5c:
53:1c:03:14:2c:7e:18:e6:5d:ec:2c:61:33:40:15:61:e3:72:
ac:54:de:f9:3f:6f:d1:58:c3:e6:fd:15:cd:7b:ac:e9:49:36:
06:c4:58:27:6f:be:4e:c8:00:6f:9d:b1:e6:c7:92:ba:30:1f:
14:33:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:31 2026 by rpki-client