Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier: yvEyP09LhLT45ZVJXDzHpySuQ9KFsDHKeJdkcwTAM/c=
Subject key identifier: 83:B3:D8:CA:C1:AE:56:BC:FF:C4:12:13:4A:8B:A9:BA:13:82:61:EF
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 019D3A8B26DDC354816C1E5B9D338C7B736C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 17:01:31 +0000
Manifest this update: Sun 29 Mar 2026 17:01:31 +0000
Manifest next update: Mon 30 Mar 2026 17:01:31 +0000
Files and hashes: 1: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: qyqTgxBoWoZ8L5YSpNNtiLrewA1QbSno+04RrA6i2/Q=)
2: ypwxETyZdloPXHbGn8CEus0D4c4.roa (hash: 7QyOW+9NQ3XhqMdU+D9M2fSGw2Trjpkp8kr5Lbld/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:26:dd:c3:54:81:6c:1e:5b:9d:33:8c:7b:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Mar 29 17:01:31 2026 GMT
Not After : Mar 30 17:01:31 2026 GMT
Subject: CN=83b3d8cac1ae56bcffc412134a8ba9ba138261ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:30:b2:71:14:3c:7d:fc:3b:5a:66:5d:bd:
d0:a8:35:55:c8:df:ba:5a:20:ca:0d:81:dd:16:28:
60:4c:41:a7:97:a1:fa:e6:40:52:6b:55:d1:d6:85:
36:6a:df:92:7b:e1:53:17:a1:7e:cb:d3:c4:90:cd:
a7:80:c0:eb:ac:d7:86:e4:f7:28:13:70:36:26:0a:
8e:77:ba:3b:ac:2b:93:ef:09:ef:eb:8f:59:a9:a5:
65:2b:1b:6a:12:39:6a:db:e1:85:9f:9c:8e:98:3c:
e5:fa:64:7a:56:e9:14:6a:2a:34:75:0f:ec:a1:6f:
1c:81:9b:f4:b2:97:7a:c6:64:b7:38:e2:e0:8f:f0:
22:ff:18:8a:15:02:db:9c:c0:af:7e:dc:29:c1:93:
d6:a1:2e:ce:0b:db:fe:bf:2a:c9:12:a3:7f:f1:47:
a9:b1:aa:6e:bc:aa:60:fd:df:5f:8f:cc:12:77:98:
6d:e0:a8:18:c0:cc:05:70:25:e6:60:8b:a9:95:0b:
83:a1:ab:37:54:62:ce:91:66:0f:da:d4:e0:49:ef:
5a:0a:c9:de:4d:d3:d6:cb:7e:8f:90:ea:2d:e7:ec:
8a:00:a8:cf:04:5b:48:89:5f:bf:2e:ca:46:fa:6c:
df:4b:78:ce:a7:4d:ce:be:98:fd:9c:b5:13:61:62:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B3:D8:CA:C1:AE:56:BC:FF:C4:12:13:4A:8B:A9:BA:13:82:61:EF
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:10:1b:0b:23:56:17:30:2d:2d:f9:33:73:2d:c0:20:50:
68:0b:fb:02:41:56:5a:c6:4a:3a:42:00:dc:14:b4:ac:1d:e5:
2e:94:72:ec:c4:53:7c:9c:0c:14:88:a3:66:25:8a:bb:c2:af:
31:7a:c1:e8:11:9b:c3:62:23:b9:54:46:7f:ba:2f:50:94:b9:
22:a7:51:77:3e:6f:0c:47:b7:6e:ac:71:cb:5e:8a:99:f9:d5:
f5:a7:78:b3:ac:b0:df:65:ba:4e:12:0a:32:b6:ec:0b:f7:36:
85:9d:7d:58:f4:26:89:5e:7e:63:d4:5a:2b:19:b9:c5:88:9d:
b6:21:24:52:dd:ec:f5:53:dc:d7:c0:b1:7c:4b:2a:7d:2e:08:
45:1f:83:be:e5:60:22:36:65:21:59:8b:b8:df:53:09:4b:81:
d9:33:27:58:f5:cc:b6:c8:cd:c0:a2:d7:f8:dd:c7:93:35:2b:
78:8e:3d:20:b1:ac:c5:8c:8c:8e:8e:b6:6a:56:c6:74:57:e2:
b8:6d:7c:93:ff:25:91:29:1f:20:bb:35:44:b1:67:6f:84:ab:
f8:08:1a:a4:cc:02:1f:1e:8f:7d:ff:d9:93:8b:35:9e:b1:60:
5d:46:87:31:c4:31:4d:95:66:9f:99:97:07:a9:13:ab:42:bf:
05:ba:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:23 2026 by rpki-client