Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: rHpvWTTqvgbzAEG98IrrRphL8ASUNPDuKhjEoJsSVzY=
Subject key identifier: E5:57:16:66:E1:D6:E6:E8:CC:CB:31:4C:36:34:03:E5:0B:96:BA:81
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 019D39E5FC50A14CB9CE5733760A53E0AE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 0425
Signing time: Sun 29 Mar 2026 14:01:06 +0000
Manifest this update: Sun 29 Mar 2026 14:01:06 +0000
Manifest next update: Mon 30 Mar 2026 14:01:06 +0000
Files and hashes: 1: BcVQyrwrHYullQZhoBE1L5P8lQE.roa (hash: 29V5LoBGnauLvwgtP04iC++YohVScFoggyXh/yIZelc=)
2: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: bapBZ9YhTk4X4yUpLtcF1bGt3ZAkLVuTHdDq+1FvswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:fc:50:a1:4c:b9:ce:57:33:76:0a:53:e0:ae:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Mar 29 14:01:06 2026 GMT
Not After : Mar 30 14:01:06 2026 GMT
Subject: CN=e5571666e1d6e6e8cccb314c363403e50b96ba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:01:77:b6:d5:61:d9:93:e7:52:f1:ca:25:
16:f1:31:cd:e2:fb:88:18:fd:e2:48:a2:2a:31:b2:
00:39:2b:f2:58:e6:3f:c1:ca:d6:cf:8b:5c:a9:c1:
d3:e1:fc:2c:9f:38:6f:07:e3:c3:ed:02:07:bd:74:
4b:ea:8b:a5:65:7d:97:b9:47:e0:41:4a:ed:b3:01:
03:73:7c:5a:9b:dd:04:f4:31:2a:d6:b2:a0:88:7b:
16:c7:39:9a:d6:fa:d4:f8:4f:83:16:75:57:ec:26:
26:50:56:98:00:b4:c4:8e:9f:f0:f9:d9:be:4e:d3:
eb:82:49:96:22:17:f1:44:7d:22:39:57:a6:ae:4f:
ef:46:24:8a:16:67:30:26:96:8f:6e:64:72:15:6b:
64:4d:2b:c7:21:5c:0c:af:09:ac:63:43:c1:45:d6:
92:7f:15:4e:05:28:75:04:70:dd:f8:cf:f5:85:b0:
ce:f1:2c:aa:55:11:2a:e6:04:6f:a8:be:b4:10:bd:
43:37:d1:4b:5f:17:1b:3d:19:99:7e:b4:11:22:39:
3b:19:10:09:ee:40:89:39:92:6b:aa:6f:19:6a:d6:
09:68:94:c5:a6:dc:90:8c:04:a7:3d:37:f8:b3:8d:
2a:bf:5b:12:d9:04:8d:15:ed:90:29:1c:50:be:cc:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:16:66:E1:D6:E6:E8:CC:CB:31:4C:36:34:03:E5:0B:96:BA:81
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8e:32:ca:5b:50:5e:70:90:e2:af:60:f6:b4:4b:3c:56:e5:
51:52:2f:0b:8f:2b:a9:c5:0d:7a:79:41:ee:f8:7e:ad:df:e4:
b8:f5:3d:ae:49:d7:72:66:48:67:4c:e2:be:3f:1d:f6:bd:e3:
df:1d:13:7d:39:90:16:3e:e1:39:4d:6e:50:09:07:79:17:ba:
58:46:5c:cb:e5:94:f7:7f:e2:f7:c1:94:00:71:7c:88:db:81:
bb:c6:70:54:8a:17:eb:29:e1:4e:37:ca:7a:31:47:98:3d:4f:
6b:46:4a:48:65:b5:7a:7f:39:c8:1a:44:05:72:6f:ba:c1:66:
4c:f9:34:6b:3c:4b:64:83:05:7c:55:8e:2c:d3:7f:09:cd:03:
e0:2c:a3:ec:b7:fc:c5:ad:4e:16:00:68:e0:ac:c5:f5:97:f9:
56:d7:9f:91:5c:b6:ce:5e:19:e4:1c:96:39:bf:40:7d:a3:c9:
de:d3:2a:82:9f:ee:c4:68:46:01:d1:2e:c1:b5:9e:2f:5c:bc:
23:0f:54:61:44:87:00:2c:e6:fc:4f:37:d3:82:9b:83:5b:47:
e3:8b:4b:06:7d:0c:10:c7:ce:45:f4:c2:7c:11:d1:54:cf:2a:
d8:b0:8d:0c:a2:dd:b0:bd:f4:4a:7a:52:fd:e5:4d:24:c8:3d:
24:1c:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:00 2026 by rpki-client