Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: yleRsEhDzjKWnT2Z2Bbl7AtJzrt9zaFHr0kzVgeKB7Y=
Subject key identifier: D5:D2:02:48:FA:8D:6F:3A:2F:97:64:7E:C5:F0:E9:86:FB:15:B5:6E
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019D3865750D03583BAE569C91954E50527B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0F78
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: Np_Aj_nRkhMZ7_NKJQ1GEacRUpA.roa (hash: ejeWv0bVkbD4tbjs10obMgkJkumcVMFWXk26yJzaKVM=)
2: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: CjLl3bo4un6heXX8TdN7ETjP9hlc3wZXKCBkQxxwd60=)
3: rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa (hash: h34ncx2/ZVU6/2WFeoHZWwK1+eEDb80qBYHdb3kT8TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:75:0d:03:58:3b:ae:56:9c:91:95:4e:50:52:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=d5d20248fa8d6f3a2f97647ec5f0e986fb15b56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:b1:4e:5b:ee:f7:45:0a:3a:de:91:0a:2b:
b0:53:45:1c:9b:d8:3c:6f:39:2a:95:1e:9b:a6:4d:
42:ee:a7:93:02:63:4f:09:61:cd:d3:0d:f8:e8:f9:
7c:ba:57:dc:18:4d:30:2a:ed:84:8a:74:87:9c:a4:
fa:c9:cf:d0:27:e5:e1:63:42:37:09:11:b1:3a:3a:
40:3b:b9:41:fd:20:72:65:55:1b:f3:af:d0:07:39:
ef:bb:d5:d6:c9:8c:02:1b:c5:a2:42:36:89:39:b8:
ec:b6:d2:c6:e3:28:41:a8:c7:b2:9b:1f:24:13:76:
8f:de:8f:82:47:03:91:75:ae:8c:ac:2a:bb:ed:b8:
b7:8c:bc:83:85:d9:37:0d:a4:95:e5:f5:9d:a1:49:
21:00:ec:0c:ca:21:ab:f5:74:7a:a7:98:db:46:39:
fd:43:0c:b7:85:0a:56:a5:b5:93:7d:90:1b:72:1f:
03:2c:ba:40:3a:06:8f:f4:bb:ba:08:c0:da:3d:47:
8e:b6:3e:99:d4:0e:52:10:3e:dc:33:4b:eb:4a:8a:
24:02:2b:94:5c:b6:a4:62:64:7b:7d:8c:03:8b:93:
71:25:c4:43:4f:31:e8:7f:62:a8:df:f8:58:f2:1b:
10:c9:b2:48:6c:c6:b9:81:f0:e6:60:b7:f1:32:03:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:02:48:FA:8D:6F:3A:2F:97:64:7E:C5:F0:E9:86:FB:15:B5:6E
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6e:d6:43:0f:8f:57:a3:59:09:ca:3a:b1:91:d6:26:59:b9:
c0:08:9b:57:b4:ff:99:b0:d2:bd:43:b4:2d:9d:38:7c:89:72:
2b:fc:20:24:03:1a:81:3e:c8:ba:59:a8:da:05:65:f3:7f:6b:
21:6c:47:1f:59:bf:ca:61:9f:6a:32:44:1a:d5:c6:93:00:b6:
4e:96:65:b8:fd:b3:7e:6d:7f:13:7d:00:44:c9:97:7b:d2:29:
c0:1f:92:ee:59:bb:06:f3:dc:dd:e7:8a:91:e1:42:45:37:7f:
34:58:cd:2a:73:a4:89:01:62:90:cb:12:02:2f:23:7a:d1:13:
e8:fe:b5:61:6c:aa:9d:bf:33:d3:34:b0:9f:77:5d:a2:54:1d:
54:c5:6e:18:c8:b7:b2:93:ca:8d:29:f2:86:6d:e8:e6:4f:0e:
cb:08:fd:4a:57:79:2e:e0:3b:e2:ed:94:39:bb:fb:9d:05:d4:
8f:88:1e:3f:4a:5f:ce:c2:3b:e2:3d:d9:76:ea:bc:04:74:77:
84:e8:37:8f:96:b2:31:e9:6c:c0:b1:a4:4a:8c:66:65:cd:71:
dd:3a:71:89:cd:2a:23:e7:93:85:8d:a0:7a:3b:9e:38:be:2e:
af:82:f6:c0:53:63:53:5c:2b:10:2e:ea:f9:0e:e7:62:f1:e0:
ee:1e:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:39 2026 by rpki-client