Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: bmBwsNoY83BamkQJNGxuZOFw5oAZ8+uwDnCYNz4xmNo=
Subject key identifier: A2:72:65:0D:60:15:84:E0:6B:62:B7:B7:79:1F:EC:78:7A:21:E8:87
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 019D382EAC32A5F05F06E69632315D3858DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: 9p7dGXDhhIMjMpnYQ1dR4KNOndM.roa (hash: v32tTh04pVTtA27giNDJzrAPLcEj/C1fD9RHh94I4MU=)
2: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: n/7ZmxKKNajx0dV6rpK7kK/IF7d7VYkBl6Dms/oCyxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ac:32:a5:f0:5f:06:e6:96:32:31:5d:38:58:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=a272650d601584e06b62b7b7791fec787a21e887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:61:cf:b8:48:c0:fc:bf:b2:7f:3b:d3:50:
e2:3e:73:a0:36:36:d0:b2:2c:41:5b:44:54:20:be:
8a:20:ab:f2:52:7f:1f:06:2f:6e:0b:90:1f:40:fb:
b1:fc:3c:6b:65:7b:0d:1b:ac:88:c5:c0:89:95:0d:
18:79:35:2f:a8:ea:3d:53:6d:eb:7f:0e:69:0e:27:
6e:5b:59:3f:56:07:6e:28:2f:7d:02:d5:69:02:a8:
8b:41:f5:07:70:b9:80:e3:d9:1f:3b:69:f7:f2:07:
8b:59:2c:8d:6f:e2:1b:88:cc:5f:28:3d:5a:c4:d8:
a6:52:7e:ac:82:65:ba:17:9e:0a:b8:dc:8d:df:a4:
71:d9:23:44:f8:b2:9f:97:14:e9:0d:0f:ba:9c:6a:
fa:6c:61:e7:aa:f0:28:c4:56:63:29:04:7d:05:df:
33:99:73:9d:5a:d5:93:04:c1:cf:c7:9f:89:63:65:
3a:05:70:d6:2b:9e:22:29:c2:42:28:e3:fe:83:d6:
50:3d:7c:d5:97:10:e3:30:0c:bc:38:34:c9:18:e3:
db:7e:83:d7:3c:12:13:7c:40:87:ad:cb:06:43:63:
59:a5:59:dc:39:0f:29:a3:96:21:11:ad:2f:39:a8:
b6:22:2f:57:39:10:8c:fd:6c:ad:d8:f2:bb:3a:6a:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:65:0D:60:15:84:E0:6B:62:B7:B7:79:1F:EC:78:7A:21:E8:87
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a6:e2:7c:1d:df:2f:49:be:e6:9c:83:fd:63:7b:8b:93:bc:
f2:08:6c:0e:be:17:a5:94:77:d5:97:9a:e0:5e:be:3c:1e:6c:
54:8e:a3:07:4a:85:a4:04:67:80:c3:4f:5d:91:99:54:a3:05:
f0:09:e1:01:ba:9f:38:5a:20:9d:0b:70:1f:07:bc:ce:f1:2a:
df:f2:8b:b6:1d:13:5f:7b:b3:d3:03:9e:72:ae:c6:b7:4c:78:
ad:82:00:15:58:ea:da:1e:bc:a7:9f:33:8a:44:b6:0f:f8:e8:
52:5b:4f:a6:71:37:76:72:b1:c5:52:10:b5:a3:e0:79:71:54:
47:2a:5d:03:36:76:a5:81:96:24:06:97:13:cf:80:b3:22:c0:
8c:be:0a:86:4c:6a:8d:01:2b:8c:b4:ae:a6:f9:0d:07:97:5e:
e4:ab:24:9f:4a:92:b5:d5:ce:1e:3c:6f:a8:9c:0f:da:37:50:
36:ac:3a:81:89:a1:80:0a:52:90:d3:41:a6:fc:90:09:08:0d:
77:9f:74:75:d1:75:3d:f3:83:a5:aa:7c:86:a3:16:f4:32:67:
2f:32:84:f1:25:78:fd:f5:ca:e4:70:7b:ac:57:16:a8:75:42:
5b:67:7a:cf:eb:9a:aa:d5:05:61:19:01:54:46:f5:e7:8e:2f:
16:12:67:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:23 2026 by rpki-client