Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File: qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier: A4I3yiASPyxz3VSb4kFH9VH5joTKqD5wSmvQSfX6YY0=
Subject key identifier: 84:E8:A6:AC:F1:FA:8C:6E:4D:B4:57:78:9E:76:F3:8B:A1:DD:2E:D3
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 019D38D36D1C5A8812F056DAD6648819CE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: 31pv5afhekY0LQrxFQLrojoOysA.roa (hash: kFamWlPPASbgIXl7iWyVA0BlMXe9SczhEQ51NUV6M9M=)
2: F_fvPWOIcgcQLRkXfee0rCzjKpA.roa (hash: +l4nroy8DS74WFaBzk7k4ciVn0016qNxOsZCfaEvFxU=)
3: QcPHoJ2c2l28rndVbJK0inr8FtM.roa (hash: WP5BVgcGhzQJJP9ibR1QIPg8X4ahLnCU8MX5j7yNM60=)
4: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: 4/iwWqoDQXwcD1UiIQxrWub2jo60p0AMfVMHx/oI8yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6d:1c:5a:88:12:f0:56:da:d6:64:88:19:ce:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=84e8a6acf1fa8c6e4db457789e76f38ba1dd2ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:fc:dd:5f:c5:ef:14:96:46:46:03:32:a6:
fc:61:1e:ed:ba:e2:c2:11:98:dd:c2:93:e5:3f:19:
eb:8c:11:54:e7:5f:83:4c:cc:d7:2a:f8:74:9c:50:
74:5b:44:9c:dd:ce:aa:df:81:4a:b9:5a:0a:4d:ae:
13:38:ca:2f:1d:b5:58:07:2f:51:55:d0:1f:5e:fa:
e0:21:b2:c7:fe:ac:4b:f7:fd:93:c2:61:c8:b9:a4:
d6:12:c0:ae:d7:9c:80:53:4e:2d:67:7b:c2:ee:f6:
a2:e2:f0:ee:42:4c:9a:fc:83:ca:2c:16:32:54:7d:
20:20:65:17:ba:c6:b4:2e:c2:27:cc:18:7a:54:ff:
d6:94:e6:24:05:c9:2f:fa:f5:b7:9e:d8:49:48:d8:
48:7f:6b:99:ed:4f:13:4b:73:54:b7:dc:5f:8c:e3:
0f:b2:4b:15:c9:e9:ee:1c:cb:8b:fc:78:b7:fd:10:
e6:68:c0:c1:fc:36:de:1e:84:de:e4:fa:24:9d:82:
0f:c7:70:a5:70:4d:9c:1b:e3:6d:3c:34:1f:7c:36:
07:43:b2:05:50:3a:c6:7f:f7:a2:dd:1b:84:3b:b0:
13:0d:80:36:2b:9f:f2:7d:06:eb:05:bc:08:ca:9c:
ae:95:3e:0d:44:61:10:fe:52:32:4c:86:d8:c6:3d:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:A6:AC:F1:FA:8C:6E:4D:B4:57:78:9E:76:F3:8B:A1:DD:2E:D3
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:c1:48:82:ed:cb:af:90:a3:b8:4f:5e:7c:eb:80:96:dc:
c3:e3:29:d5:f0:a7:a6:bf:1d:b0:14:87:5f:d4:37:e4:cb:ff:
79:6d:0e:6e:0b:b7:b9:99:7c:e7:ca:d2:44:f3:01:57:8e:85:
13:ae:9d:f2:e0:b5:f6:3f:3c:86:9e:31:d0:6a:70:ed:14:7d:
5f:7e:d9:2e:05:d7:c9:98:6a:8d:95:6b:e5:42:b7:1f:39:99:
ed:fd:30:6e:70:53:9a:84:bf:94:eb:3f:12:ae:60:f3:f2:1c:
7d:11:79:53:35:18:52:12:3e:58:01:64:4b:d1:f4:fa:85:d4:
a7:cf:d9:cc:13:bf:83:43:5a:7c:db:e1:f2:0d:71:98:05:a8:
ae:ab:2e:64:f8:cd:4f:6f:86:39:b1:e3:b3:1a:fe:70:c1:2a:
30:90:ed:73:b8:83:ac:e0:e4:bd:53:57:57:20:e6:04:97:64:
ff:9e:bf:42:79:01:63:25:be:7a:e7:24:ae:16:ca:2d:2e:7b:
80:d8:c0:03:0d:e8:61:43:2c:1f:d0:0e:e1:28:f3:f0:ef:c4:
56:19:34:df:92:f7:05:bf:1a:ea:25:eb:53:81:dc:d9:dc:11:
42:23:b6:71:72:d5:86:28:65:f0:a4:bf:f2:2a:a9:ff:79:5c:
c0:fe:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:26 2026 by rpki-client