Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier: cIR+YXXdDwuOuLGha3wgfubdTKGIQdCBEsvLvNMWSiE=
Subject key identifier: 29:BF:1E:C5:CF:5A:9F:FD:F6:36:79:55:DB:10:44:4F:66:51:EB:14
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer: /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial: 019D3789CA2AA166C9FA05AA7EC482A30ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:10 +0000
Manifest this update: Sun 29 Mar 2026 03:01:10 +0000
Manifest next update: Mon 30 Mar 2026 03:01:10 +0000
Files and hashes: 1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: rNRFRPzD97xopa9v/ZOrEQ7H+YJFgqX4IZCNPibwElg=)
2: elreK20YpaSo7u9v55jxGF5rHO4.roa (hash: lrIYGG9SdGCcfazBvX7lzn+XdBdxuXWCr/oHZ+PyxD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ca:2a:a1:66:c9:fa:05:aa:7e:c4:82:a3:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Validity
Not Before: Mar 29 03:01:10 2026 GMT
Not After : Mar 30 03:01:10 2026 GMT
Subject: CN=29bf1ec5cf5a9ffdf6367955db10444f6651eb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:78:c1:82:46:e1:37:bb:e9:a5:91:c7:be:
43:7e:34:ed:2c:77:0c:42:7f:63:1a:69:bc:5c:27:
f2:3f:8f:a7:1a:10:73:9b:78:cb:65:79:03:4d:65:
a5:c0:df:40:ef:6a:55:46:b2:73:96:c8:69:ef:96:
c9:2a:c6:50:96:9a:ce:c4:06:d7:64:1b:ac:a0:34:
00:43:e6:2d:0b:ac:e3:e5:17:c8:85:e6:ff:96:3d:
31:9a:83:8d:9f:0a:ec:a8:60:07:c2:38:51:58:d2:
69:f1:ea:6e:a3:f4:6e:29:f0:52:c4:78:81:c1:16:
f9:25:a1:87:97:50:16:6e:b6:38:c1:22:07:e7:a4:
bf:73:5e:75:2f:b9:e6:c5:c7:b5:b3:ec:1a:cc:9c:
fc:1f:da:f8:ec:a5:ee:08:09:1a:13:17:43:0b:89:
78:af:b4:31:04:d3:16:f7:a3:2c:07:39:c5:f2:18:
82:9b:9a:0e:5b:38:0b:ff:27:23:80:3e:4b:33:b7:
63:ea:b1:24:b4:b7:9d:d1:6e:0f:52:09:a6:93:a1:
b5:4d:34:d9:63:b3:77:0a:15:5a:7e:c3:dc:92:bd:
ce:a4:c0:17:e6:c1:8b:31:7a:f6:09:53:1c:86:2e:
67:2f:ee:26:2a:5b:3c:bb:8e:da:e8:a2:fc:9e:5b:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:1E:C5:CF:5A:9F:FD:F6:36:79:55:DB:10:44:4F:66:51:EB:14
X509v3 Authority Key Identifier:
keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dc:1e:67:de:0b:06:a1:57:6d:55:17:3d:e9:b0:41:89:58:
90:14:89:ce:fb:64:03:25:4e:87:98:c3:d3:bb:1f:01:09:56:
d0:55:3a:c5:86:66:90:e8:cf:d0:58:9e:ae:0c:1e:90:ce:af:
82:37:9e:29:b5:90:6c:17:32:a5:f7:81:0c:50:c5:bc:ba:18:
2b:fe:f9:30:3b:0e:7d:cb:2a:01:a1:98:8a:e2:5c:a1:0d:dd:
31:66:c2:76:21:39:4e:2b:fe:de:79:44:4d:0c:ea:af:f4:74:
d8:22:2b:20:7c:9d:2d:3a:3f:62:d2:62:0a:eb:ed:44:c0:1d:
bb:3b:50:54:15:45:65:4f:2a:96:52:0a:dc:4d:ce:18:ae:b6:
67:c9:93:f7:c4:64:dd:d4:c1:a4:a9:85:e6:2b:63:6a:6a:f0:
74:50:55:58:41:67:6d:d1:66:e3:e2:6e:1b:4b:b0:23:de:eb:
b9:09:7d:66:19:3c:f1:b9:14:58:8a:89:8a:5e:7d:f1:bb:fa:
ef:27:59:91:ed:98:33:b4:30:63:d1:df:82:83:24:08:f2:23:
83:01:d9:4d:8f:6b:29:56:49:7f:87:d1:c4:c4:2f:ad:85:9b:
52:31:46:3c:f4:ea:06:a2:ba:0d:eb:ca:e0:f9:f4:c5:a4:89:
63:42:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:59 2026 by rpki-client