Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: h0DPDt5DltCRYlnAfz+VVhQRaIm8kkjFWnA8FFctiyc=
Subject key identifier: B5:E3:03:7C:B9:51:0B:5D:ED:C2:AC:29:E3:92:8B:BC:8B:95:44:77
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 019D37C058DC10C815349F862C4E4E431E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 1727
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: Fs69o1yumuB_h24l2rSGVDLaJIQ.roa (hash: vdZ0BN7jIBHTZi6LLJoCAqiuS0RkgBp+kjGpn9OHcoM=)
2: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: HgcsFP7PDo210Ln1oByzA3n4vB0ZD5UJuvqR6n9DjWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:58:dc:10:c8:15:34:9f:86:2c:4e:4e:43:1e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=b5e3037cb9510b5dedc2ac29e3928bbc8b954477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:da:5b:14:1c:b7:a8:8a:4e:74:24:46:a4:
b5:9d:8e:fa:a1:24:2a:7b:4f:69:80:30:9e:44:d2:
81:c4:ac:1d:da:77:d8:33:5d:1d:32:91:8d:b7:25:
05:d6:e7:71:0f:62:27:ed:ff:32:6a:71:5e:5a:e3:
69:41:21:b7:71:3d:96:3d:b2:cd:fb:6b:e9:cd:d0:
22:53:11:f9:39:13:50:0b:09:3d:ac:4d:c0:6e:c5:
6f:9c:46:b6:0e:ab:c8:62:42:07:a2:8a:3b:7e:6f:
3b:c0:4d:c7:d2:5b:16:af:14:b1:e4:96:35:23:fe:
67:f0:67:e4:d6:0f:8e:04:56:30:05:64:ef:29:ef:
95:0b:bc:ed:3c:b4:e0:de:b2:d6:cf:e1:a0:24:9c:
bc:0f:fe:ca:c0:77:3f:22:33:5b:2f:d0:b0:b5:22:
e2:aa:47:fc:a1:a8:6b:e3:06:a0:6e:2d:b8:98:29:
8a:44:cd:41:fd:ad:45:c1:e6:ab:96:e1:85:d3:9e:
d7:29:52:c7:78:8e:85:56:f7:7f:ea:a2:ae:e0:66:
ce:41:a6:fe:4f:af:35:d0:ef:06:c5:a9:21:2b:c3:
ec:67:ef:1f:a9:b1:6e:ee:a7:02:bc:5d:eb:4c:f9:
45:69:d5:2f:f4:2c:b8:15:4a:94:fc:88:d1:5b:12:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:03:7C:B9:51:0B:5D:ED:C2:AC:29:E3:92:8B:BC:8B:95:44:77
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b2:e9:28:df:9c:ff:9d:9c:8f:c0:a7:89:d7:4e:d3:3d:50:
a5:b8:92:49:91:49:56:95:db:eb:ee:f9:45:a5:0b:8d:c8:46:
86:25:05:08:b0:a9:70:80:6f:16:2a:75:00:16:c8:3d:dd:f4:
b3:5d:56:91:65:27:f4:64:d6:7f:67:75:ee:4b:72:aa:d1:cc:
76:66:0c:ec:68:c3:1f:a6:dc:1a:5d:91:dc:39:16:8b:c5:96:
c9:4a:c3:1c:38:88:20:f9:77:c5:89:b3:ca:24:59:e6:84:b6:
c6:01:fe:20:bb:8b:b8:02:38:6a:2c:68:a4:df:55:01:da:b8:
71:ab:2f:88:6a:00:80:ac:8e:7a:21:7f:c2:be:d4:2b:20:6b:
04:70:98:14:02:50:a9:bf:8e:af:7e:17:18:05:c4:ce:4e:bb:
e8:a6:9d:20:f8:00:fc:f3:00:75:a7:33:b0:63:a7:33:d4:90:
7b:54:93:98:0d:aa:4d:60:4d:6f:aa:06:09:9b:92:40:5e:1e:
67:f8:4e:8c:a8:ed:6c:fb:32:3a:39:9f:b2:2c:0c:55:e0:91:
01:2b:33:28:77:45:f0:f8:61:0c:5a:79:19:f5:96:d3:52:a5:
0d:9e:60:10:0e:7e:51:f0:c7:94:83:5e:01:cb:eb:38:00:5e:
cf:9b:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:48 2026 by rpki-client