Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: pcOeUSrVbDvDnUhYBSUdaWxIha3nuFlL81HVpgnElj0=
Subject key identifier: 66:AC:25:DE:15:31:3D:F0:28:A7:53:0A:53:A5:6F:22:AA:C5:B2:31
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 019D3789051ED7568DF509F8988A6B282EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 11C2
Signing time: Sun 29 Mar 2026 03:00:19 +0000
Manifest this update: Sun 29 Mar 2026 03:00:19 +0000
Manifest next update: Mon 30 Mar 2026 03:00:19 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: foFcRABTBkvIlXub2iUdYLT0wNFfbxXBoao5NIzWjIY=)
2: jjNhYUO0WkXUvNbvJZNzRwu7bDY.roa (hash: PYUXYUIOFwhoZ+QPr8MK2mvgKDuZumcu7LyDXuRa6e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:05:1e:d7:56:8d:f5:09:f8:98:8a:6b:28:2e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Mar 29 03:00:19 2026 GMT
Not After : Mar 30 03:00:19 2026 GMT
Subject: CN=66ac25de15313df028a7530a53a56f22aac5b231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:d6:53:c0:0e:6b:b2:44:85:4e:dd:c2:cd:
e3:ce:d5:83:b4:67:da:88:15:bf:4a:96:e4:65:d1:
a6:3c:0d:0f:2e:00:44:7d:d2:69:00:6f:e1:a5:96:
72:32:71:45:6b:9c:61:97:b2:5e:d8:22:20:a1:04:
60:ba:a4:1b:fc:44:8e:43:63:d6:64:4a:5d:6f:f4:
e4:1b:09:a7:20:07:5b:1e:c7:0a:45:22:0c:47:18:
44:c9:a2:bf:32:a9:5a:71:fe:9a:31:34:e3:76:76:
11:75:00:6b:1c:62:fa:7f:8a:6d:94:69:6a:b7:65:
85:e5:b2:9a:12:91:21:8f:d8:31:b4:78:cb:ba:3f:
d5:8e:55:c4:ca:ae:4d:69:49:25:cc:d9:0a:31:fb:
f1:33:5e:c7:5d:9e:f2:b0:68:3a:7d:c1:ca:1e:96:
7b:ed:7c:19:fb:aa:1e:f7:9b:cb:32:70:d7:27:90:
70:95:65:bd:a6:da:a1:f1:5b:4c:8d:32:2e:e5:4e:
88:88:be:23:f4:b7:52:91:b8:cb:71:1a:ad:6b:78:
16:b9:16:e3:60:08:97:f0:77:7b:35:e1:ab:b9:fc:
0f:8d:a4:46:7e:73:1a:dc:e1:a2:38:72:6e:86:c1:
41:e3:cc:73:67:29:cd:07:69:5d:7e:0c:f2:20:2b:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:25:DE:15:31:3D:F0:28:A7:53:0A:53:A5:6F:22:AA:C5:B2:31
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:76:bf:04:d6:45:1b:1c:74:16:03:ec:4b:a3:9c:23:94:89:
af:73:9f:92:e7:b9:25:e5:04:73:fa:e2:4e:d6:92:92:23:e0:
a2:b6:12:c2:90:cc:f8:a5:89:ee:55:8b:18:b1:1b:b9:f0:bd:
ac:3f:2e:fa:87:ad:0d:d2:df:2c:e9:a3:de:f3:e9:7d:0d:de:
de:28:3a:dd:77:12:ce:ec:2a:28:a6:b4:54:2f:02:c8:d6:28:
02:4f:c3:d1:72:36:97:da:0f:90:f5:34:55:3e:d5:9b:3f:ca:
0f:b5:ce:4f:be:8f:7e:42:9e:a7:4f:28:1e:ae:16:14:43:24:
dc:7e:15:67:51:7c:64:a1:7d:86:2e:e1:aa:44:aa:bc:38:21:
8b:ae:e3:d3:8a:76:cf:99:0f:f8:cf:5a:7f:7a:a3:ee:a8:1f:
3a:92:6f:7d:81:53:f5:12:d4:9b:1d:8c:c2:90:e2:61:63:6d:
53:9d:a1:2b:6d:19:c1:13:67:56:95:98:ad:9a:66:9b:32:e2:
d3:3c:25:12:e5:66:86:9d:4d:e5:e8:70:6a:67:ce:37:2b:40:
11:28:7a:ac:7b:d2:fe:15:ef:47:61:69:1a:1b:66:c9:8a:7e:
b1:ab:50:62:5d:50:ff:7d:e7:78:05:19:14:36:3e:57:a8:f1:
66:5f:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:55 2026 by rpki-client