Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: wDvG8N7dohQ/JCBWF3Do6GSzaFJET1IwPvMqEiLH13U=
Subject key identifier: 03:58:B1:77:DB:F8:17:0D:7A:A3:E1:BC:6C:BC:47:31:C8:94:E8:29
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019D38D2E1E7E77E771C6B397F041D782993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: YweY9PzoSJlA+MBA89TaA7V4so4exLdMt9wz4QcdmwU=)
2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e1:e7:e7:7e:77:1c:6b:39:7f:04:1d:78:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=0358b177dbf8170d7aa3e1bc6cbc4731c894e829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:9b:57:3e:b0:9f:ed:46:a9:e4:ef:56:2a:
01:fb:18:f6:1a:27:6a:aa:d7:b9:e7:13:63:7d:77:
bd:e3:16:59:be:14:05:ee:53:86:bf:96:65:b3:3d:
06:95:2a:11:d0:ae:e9:ca:a0:6e:95:d5:c4:98:20:
92:92:4c:1e:61:b1:d3:47:e3:72:8b:c9:31:15:7f:
24:7d:8c:9e:3c:64:01:e1:ad:87:bc:ee:38:f8:e1:
17:8f:33:2a:88:28:bd:ec:e5:f6:39:99:ca:63:a8:
04:87:40:84:d5:d0:92:31:84:cb:61:10:ae:c6:d7:
2f:12:ed:04:f8:47:ac:4c:a1:ee:3e:0e:e1:e6:2e:
ee:5b:e0:2d:a4:53:f4:a4:b3:ff:da:31:c7:40:14:
7d:7a:e5:0a:67:d2:3f:49:d9:34:c2:de:50:64:48:
1f:c8:26:ab:3a:be:d7:e2:c6:eb:25:20:41:b1:d6:
4f:13:ce:4a:1a:dd:23:39:4e:b4:51:91:5f:55:34:
d7:c2:27:26:e6:be:82:a3:fc:61:a2:72:5a:c8:f7:
31:ba:2b:44:03:fd:6f:0d:32:d4:72:c9:f5:f6:fa:
16:57:17:b1:f9:67:bd:7c:9b:ed:90:e6:55:7b:db:
1d:0f:a5:95:1f:49:22:1e:8a:eb:27:df:df:96:ab:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:B1:77:DB:F8:17:0D:7A:A3:E1:BC:6C:BC:47:31:C8:94:E8:29
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0c:d0:e0:a2:ce:11:9c:5e:39:aa:3c:44:5d:dd:1b:e3:1e:
fc:ab:1b:9c:68:d6:f6:16:f0:41:39:d7:28:45:52:d5:5f:ee:
be:f5:b7:60:a6:c4:17:14:95:9d:0f:64:8f:e7:d4:37:e4:43:
f1:57:90:fe:1c:6b:50:a5:5b:00:6a:0e:62:00:25:54:35:2d:
db:2e:b2:09:33:ce:d0:7c:7b:a1:17:a2:71:cc:59:b2:e8:a2:
25:db:a6:e6:e9:54:4a:b0:71:fd:36:80:fb:7f:16:24:8e:3b:
1c:8c:68:64:fa:cf:fa:67:c1:52:aa:b5:e5:87:4e:b7:72:99:
12:0d:00:42:3f:d8:cd:db:59:ee:84:6b:da:b5:bf:1c:e3:58:
04:15:87:3d:4f:54:75:ad:b5:99:e4:b0:9e:17:56:06:f4:df:
da:50:3d:dd:18:eb:07:4b:a1:04:1a:01:28:ad:ef:05:92:8c:
e4:38:c6:42:20:db:32:d1:9a:e0:a3:64:e2:44:9e:63:db:94:
5e:d1:61:f6:21:25:7d:ba:aa:8e:09:11:9d:97:75:18:5c:ac:
fc:20:e6:ee:d4:94:51:19:ec:d4:f1:ee:04:e7:01:9f:ff:64:
6f:02:c6:f1:9e:b2:82:fe:b9:58:da:d3:43:93:4a:19:41:19:
9b:73:ce:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:21 2026 by rpki-client