Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: 1VD6IBJAVoKRU5mI2uz5d32y6l8cq8g11rd4qC8HZXc=
Subject key identifier: 62:05:BA:89:7D:08:6C:9B:33:9C:D5:43:62:C9:20:89:CA:62:65:EF
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019D39777B8586538462DDC75212DF197D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 7D
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: pcjXQzW768FvJgbbQSQwobwb2pruoLNdnP4Ljx7hPw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7b:85:86:53:84:62:dd:c7:52:12:df:19:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=6205ba897d086c9b339cd54362c92089ca6265ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:db:63:ba:c2:93:49:7f:1b:28:f1:d6:40:
22:43:66:af:78:49:7f:4c:64:c4:50:eb:1a:54:03:
1b:f0:27:75:50:48:1b:42:d2:6c:43:ff:e3:de:09:
08:cb:4e:bf:46:00:a2:e9:0c:cc:7a:99:86:9b:fc:
38:92:c9:ad:47:31:b9:ca:e4:3a:91:bd:ca:38:bf:
75:d9:90:42:cd:94:24:3d:3e:22:c1:ab:02:13:04:
1b:07:f8:7b:37:a8:65:2b:1c:3a:51:bb:20:32:63:
27:6c:16:47:43:a1:60:27:96:6a:e5:9a:d3:61:35:
57:56:05:38:74:d1:31:67:28:e5:53:1c:40:fd:b4:
9f:3f:5c:72:a8:8f:6c:2d:e8:33:f4:52:8b:71:1f:
b9:be:2d:af:8a:cf:f7:ec:dc:f6:c5:21:8a:c4:f5:
e2:7b:c6:54:cc:22:2e:99:bd:b3:87:6a:41:72:27:
6e:9d:31:dc:81:cd:c8:2a:b6:a3:80:59:74:37:92:
b8:59:4e:ec:3a:75:3b:8b:fb:8e:df:ab:56:97:d1:
16:18:b7:7e:49:e4:83:cb:9a:f0:10:d9:d6:be:12:
19:01:5e:e0:79:8d:f6:ec:b1:4d:6a:69:b5:2b:8b:
b8:44:e5:76:aa:8d:10:2b:b5:96:bb:1c:40:82:98:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:BA:89:7D:08:6C:9B:33:9C:D5:43:62:C9:20:89:CA:62:65:EF
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b5:b0:ab:a3:d9:0d:03:35:b3:1a:dd:3c:88:1d:6d:60:55:
7b:f9:4b:08:4b:e6:a6:32:71:f3:11:48:44:e0:ad:b4:cd:1f:
fb:35:1b:30:3b:ff:2c:e5:57:33:22:95:fd:15:24:a3:c2:9d:
8d:84:21:1e:14:26:5a:93:4e:a9:ae:72:34:7d:6a:8c:cd:a1:
52:a1:fc:39:84:61:b6:28:31:11:a7:4a:2f:06:f7:39:64:55:
2b:25:bf:e8:98:7e:8b:17:70:6a:f3:42:d8:b6:eb:c6:1a:f7:
f0:ca:ee:77:e3:e0:ee:1f:fa:b1:22:7b:e6:4c:5d:2e:6c:a8:
f1:c7:c7:29:78:11:a4:9f:65:62:fc:ec:20:bb:52:54:06:b9:
8b:53:e5:d5:2d:db:30:44:a0:37:c0:1a:08:5d:93:d8:2d:e8:
25:d4:0c:82:de:9d:4b:8f:00:ff:b6:6a:bc:3c:6f:11:59:10:
7a:12:29:e0:97:4f:29:c2:8b:1b:ed:29:3f:a3:f1:1d:24:90:
3c:4b:5e:8b:81:e5:7c:27:68:28:fd:99:b0:a4:b3:bc:71:84:
f0:5b:99:f4:3c:cf:5c:ba:c1:3c:f2:fd:b6:e9:14:f8:3b:5a:
d1:1d:8f:95:df:51:ab:3f:01:14:0b:ad:0e:f6:7a:9c:e5:f9:
9e:e4:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:45 2026 by rpki-client