Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: s3UchDVplPSNsoc5hX8ADa1A4zUZ+cfIgE1cUT4+rG4=
Subject key identifier: 92:74:71:94:8E:61:93:F4:D2:90:ED:34:DC:FF:35:F2:45:7C:97:15
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 019D382E0445DE703A07AE20E420C1AF55DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: 2hK58jmjMeFOl8F+g5WPe/49u4oBA6mxVMHgNfy0qhM=)
2: m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa (hash: 7OLk561MR7BV3oxXePdGss3bEUcPG6YjZLBOYNNOHXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:04:45:de:70:3a:07:ae:20:e4:20:c1:af:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=927471948e6193f4d290ed34dcff35f2457c9715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6e:db:9d:b0:c4:30:f7:f7:ea:d4:e3:79:f2:
0d:13:bf:44:a0:29:2e:7e:c3:96:3b:e2:13:ef:97:
a5:1d:d8:de:98:d2:96:39:82:39:30:0c:2f:a9:06:
8c:21:3b:d6:31:b2:88:7a:c8:2d:0e:ff:61:36:45:
76:35:54:4a:96:ab:6b:bf:f2:35:e2:fc:e5:63:07:
27:21:bb:0e:5b:04:f8:5e:5d:3e:10:f9:10:00:34:
08:44:cd:12:f7:0f:9e:0a:e7:60:e2:37:12:76:75:
dd:86:69:a9:b3:4d:02:12:a0:03:d6:8c:f4:e4:fb:
aa:7d:bd:98:65:4f:3a:71:5f:20:2b:2b:e5:f9:67:
a5:de:93:17:98:08:f4:50:9e:7b:3e:86:4b:4d:d6:
68:5c:2d:ee:7c:db:43:f3:cb:c5:2a:33:05:1b:aa:
c6:b7:0d:1e:ed:3e:7f:3f:c4:c7:72:c0:5c:cc:b2:
eb:34:70:76:4a:be:36:d4:62:ba:f2:72:94:47:e9:
01:19:49:9b:b6:a8:31:fe:81:34:3d:fa:54:1f:23:
41:5b:7e:1c:2a:4c:94:69:b5:21:84:81:dc:66:2f:
8e:67:82:75:61:4b:36:9e:97:bf:32:1b:24:6e:ea:
bf:ad:04:9a:c6:82:19:01:31:f9:28:81:9c:f0:ee:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:71:94:8E:61:93:F4:D2:90:ED:34:DC:FF:35:F2:45:7C:97:15
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:02:1e:d9:8a:38:57:f4:22:2b:68:97:3b:59:46:f4:2b:f3:
75:92:0c:b2:b3:b9:15:80:80:c4:17:55:74:b9:6f:8b:e7:42:
24:b5:68:75:77:37:1f:50:9b:74:f1:60:7c:85:a1:ba:af:6a:
85:ec:14:eb:00:22:cd:95:e0:50:0a:92:e6:9e:a2:1c:4c:1c:
da:5a:5e:96:89:4f:cf:20:a7:6d:9f:6a:bd:b6:3b:19:1e:75:
4a:3d:dd:49:fd:d5:00:5b:67:32:8f:18:5d:a4:e4:d6:1f:6b:
75:80:f7:57:15:85:9e:6a:5e:12:3e:85:c2:a3:e4:29:59:b3:
9e:c8:ed:68:c7:d8:4e:96:6e:8d:46:0f:48:a6:6e:e1:0e:16:
58:26:d6:d2:8d:59:cf:5e:77:d2:4e:a7:3c:3c:29:9e:a4:e3:
07:ca:ad:2b:ba:81:be:7d:b0:c8:18:e5:60:85:29:7a:0b:93:
a4:7f:4d:d9:6d:1e:80:1f:e2:47:e0:c9:58:04:ea:94:8b:9d:
fe:d6:c0:0c:29:8b:3a:66:33:f4:6e:7c:3f:eb:0e:5d:be:f5:
73:49:8c:f4:ff:5b:c9:5d:39:e5:09:ac:2d:95:24:29:43:13:
0d:25:c7:a2:8c:a8:38:49:ea:97:42:00:a6:d6:65:90:fe:d4:
34:9e:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:24 2026 by rpki-client