
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File: qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier: VBunaQYxgbQ7egCQ7jytLGANaYUlSZg/VaTunhDtYZI=
Subject key identifier: 32:3F:20:B7:4E:7E:96:F9:D4:CB:67:4B:42:F6:2E:93:64:EE:46:B4
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial: 019D39AECCBB35981EBA125729EE9C5C92BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number: 0DEB
Signing time: Sun 29 Mar 2026 13:00:50 +0000
Manifest this update: Sun 29 Mar 2026 13:00:50 +0000
Manifest next update: Mon 30 Mar 2026 13:00:50 +0000
Files and hashes: 1: okBlAs2MxKegFun8jqPmx6S71TI.roa (hash: ROgvc03TJnSVXqJkAtutWAdPihx/iJeoNeNlOaYR9fo=)
2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: omkl+3w3QMnqtPjfOQp0HP0tf2E/gDsfFbm0x5fGIA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:cc:bb:35:98:1e:ba:12:57:29:ee:9c:5c:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Validity
Not Before: Mar 29 13:00:50 2026 GMT
Not After : Mar 30 13:00:50 2026 GMT
Subject: CN=323f20b74e7e96f9d4cb674b42f62e9364ee46b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:1a:7b:99:05:5a:93:9d:de:bc:08:e7:d4:
bd:61:bc:36:5b:51:10:69:84:c9:db:52:ae:fe:60:
b5:3c:41:64:29:4f:89:2e:f2:85:d8:2a:b6:5b:1d:
96:07:55:6b:4b:b7:01:c7:5d:f6:2c:7c:1c:af:7e:
26:73:1b:e6:4f:41:5a:35:52:64:31:b5:15:c0:f1:
a1:a5:1a:82:e1:76:b4:55:86:1d:4e:c6:50:59:a6:
2b:77:85:43:1f:ec:4d:c1:8f:07:7f:88:d8:dc:c9:
38:eb:02:70:33:11:2f:ce:b6:19:c6:9f:ff:7f:62:
fa:f7:1c:14:89:bf:53:a8:2d:ef:d8:dd:e1:7a:5e:
21:53:e0:4c:ad:13:1d:09:64:fd:66:fe:48:6f:a9:
e2:f0:6c:e8:2b:97:ee:03:ba:3b:1f:12:a1:6a:49:
60:6e:9b:2c:87:4c:90:4f:a0:b8:1a:88:c3:ce:af:
6a:10:82:e7:06:d6:74:76:c6:19:51:c8:34:6f:80:
34:48:23:71:c5:84:e0:5a:95:52:88:f6:99:35:e7:
aa:2c:4c:da:47:9a:8f:2a:e8:f4:33:07:de:b2:41:
b7:06:f2:6a:67:77:4a:3e:f2:38:c3:90:be:71:91:
6c:54:92:db:d8:66:a5:91:16:1a:17:9e:40:e9:a1:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:20:B7:4E:7E:96:F9:D4:CB:67:4B:42:F6:2E:93:64:EE:46:B4
X509v3 Authority Key Identifier:
keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:2e:99:41:ab:31:be:35:55:af:9c:0d:59:de:f1:f7:99:
c7:5b:99:90:b2:58:df:9b:e4:f6:bf:2f:44:e6:8d:18:c3:97:
a9:cc:f1:3b:58:e0:81:ec:b8:0d:11:cd:bd:a6:98:86:78:34:
5b:0d:9c:e0:33:df:9c:43:0c:5c:c6:6f:ed:33:ec:ec:b0:3a:
72:77:a6:5f:a3:34:0d:55:cc:41:7d:4d:e7:02:86:b8:c1:a9:
8b:f7:ea:ec:f6:b5:6b:54:64:c4:45:cb:55:29:fe:87:0e:80:
dd:1c:72:e6:43:47:2b:5c:2e:bb:21:7c:dd:07:e4:64:6c:f1:
cb:39:cb:8a:32:c2:f7:15:20:96:71:39:4d:85:e6:b0:61:ba:
ac:42:8d:5d:00:36:25:6a:67:ed:99:85:8f:ea:7a:6c:20:8c:
58:67:da:e0:a9:b4:93:49:ab:11:20:5d:1d:70:ff:09:8c:72:
c5:db:1f:23:5a:40:98:a3:eb:17:48:41:cc:41:b9:d1:b3:01:
ca:ec:ff:d2:b0:78:0f:a1:86:08:9d:28:04:cb:c0:ba:41:4d:
3b:b2:a2:da:41:2c:19:e4:27:47:b7:16:b0:37:75:5e:3e:6c:
36:dc:21:b4:64:a4:fc:a5:10:3c:35:f4:26:60:9d:e3:d3:f2:
f3:f9:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:37 2026 by rpki-client