Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: ml8G5np0wHJwV+Zl0yD6KI6FojEJo00wNRJcXiGJdSk=
Subject key identifier: 2A:1E:A5:1C:0C:63:30:B0:94:63:89:C8:1D:54:18:19:04:C9:67:3B
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 019D39AF0C02F3881A5E0B76085E30257A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 0177
Signing time: Sun 29 Mar 2026 13:01:06 +0000
Manifest this update: Sun 29 Mar 2026 13:01:06 +0000
Manifest next update: Mon 30 Mar 2026 13:01:06 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: fsYw4bo7MgtzQg9CKJcras14sRO1K4fzE9KLNIvE35A=)
2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0c:02:f3:88:1a:5e:0b:76:08:5e:30:25:7a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Mar 29 13:01:06 2026 GMT
Not After : Mar 30 13:01:06 2026 GMT
Subject: CN=2a1ea51c0c6330b0946389c81d54181904c9673b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:17:cd:a7:5c:ef:ec:01:7e:04:84:95:be:
05:29:e4:56:7e:d3:75:70:8a:4a:bd:96:c6:e7:20:
e2:b7:b6:80:12:df:9c:7e:e0:41:96:34:e8:cf:69:
03:b8:16:40:d7:58:75:a4:fa:f2:eb:5e:eb:72:9e:
b8:ef:37:84:56:19:9c:6b:e1:7c:bc:00:48:26:a4:
4e:e3:11:b4:82:7b:65:2a:f1:eb:59:5a:d5:48:1d:
0d:93:2c:32:85:ad:a4:df:f7:68:b3:04:ea:ad:e6:
06:4e:83:db:4e:80:9e:9f:5d:cf:8a:1f:f3:0d:34:
eb:4f:0b:36:12:bb:b8:20:d8:14:48:c7:4b:c8:f6:
88:05:ff:a0:04:9b:c2:3b:8a:0e:50:c9:97:d2:bf:
f3:7e:06:6d:30:75:33:aa:84:88:c1:40:24:94:f4:
a0:cc:69:42:e3:94:60:ac:eb:b3:42:73:84:16:f6:
51:3f:83:72:93:3c:db:91:88:72:ab:56:05:27:16:
08:4b:20:8d:5a:10:e9:39:9b:97:6a:5d:d4:2d:44:
a0:ac:41:39:ae:3c:39:10:ca:59:ba:3a:06:f1:5b:
bb:52:58:88:67:84:7e:14:f7:ab:67:93:95:8e:5e:
85:7d:e7:b2:03:b7:31:0e:39:ab:1a:0d:89:3d:02:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:A5:1C:0C:63:30:B0:94:63:89:C8:1D:54:18:19:04:C9:67:3B
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:64:fd:42:3c:12:4b:1a:27:41:26:d3:6e:d8:11:1c:4e:ae:
da:71:4f:2f:da:99:0a:ca:be:3c:36:36:12:8f:bf:df:70:87:
3d:f0:e4:6f:fa:8b:1c:40:9c:69:73:2b:42:79:d3:6e:05:01:
83:fe:77:cb:ad:1f:d4:24:59:0a:62:67:0b:4c:96:d2:4d:f0:
bd:07:b0:25:2c:a5:4d:33:73:9d:65:2c:47:62:4d:f1:e9:35:
82:99:55:05:87:cb:d7:9b:45:f5:7d:01:80:a1:81:65:fa:e9:
1d:70:ff:db:b2:5d:48:af:29:b0:b5:9d:8b:74:ef:af:91:84:
b8:c0:cc:95:98:c3:07:bf:b3:92:aa:9f:ef:87:1a:09:9e:a0:
b7:cf:1c:69:df:6f:02:2a:fc:cb:5f:e0:fb:e0:a0:cd:b1:14:
44:f5:85:76:a9:c1:27:44:93:1e:c4:7f:59:36:d0:05:c3:13:
19:92:81:ba:17:05:7d:88:86:d9:5d:fc:2d:33:5e:c2:8c:70:
91:ff:74:6c:5d:db:ec:59:ce:87:ca:8e:b9:0b:31:2c:8b:d0:
7a:ac:c8:3c:9d:47:b1:6d:3a:5a:32:c8:c7:a8:d2:9f:cf:4c:
d5:eb:1e:d7:22:77:af:09:6a:75:c0:10:fd:3c:81:6a:ac:a5:
d3:d6:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:45 2026 by rpki-client