Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: KeaH1p+VS29Kl8lYdVnkSUoCLoc87nNvOK5r9O3YmXA=
Subject key identifier: 71:19:0C:F5:64:B7:B6:2D:78:5D:E0:D8:A9:CD:3A:10:7D:28:52:FE
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019D39AF173B8A41709447E56BD42E857150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 13BF
Signing time: Sun 29 Mar 2026 13:01:09 +0000
Manifest this update: Sun 29 Mar 2026 13:01:09 +0000
Manifest next update: Mon 30 Mar 2026 13:01:09 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: y03tiaUIDfPO6ckCZkCS23ADqqX7y2S0qXnYOwnukD8=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:17:3b:8a:41:70:94:47:e5:6b:d4:2e:85:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Mar 29 13:01:09 2026 GMT
Not After : Mar 30 13:01:09 2026 GMT
Subject: CN=71190cf564b7b62d785de0d8a9cd3a107d2852fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:f2:42:5b:ef:8d:76:2a:d4:19:4f:ed:41:
05:f7:61:24:77:8b:50:c1:e0:a2:42:f6:34:1c:90:
95:62:5f:8f:85:d4:87:f9:a9:15:4d:25:38:3e:92:
83:0d:69:78:2d:fd:86:fb:f7:ac:89:6f:f7:2c:75:
e1:be:1d:db:bc:e7:11:5b:33:a1:12:5c:93:fc:8c:
00:c7:01:28:a2:56:cf:77:dc:c6:60:15:f6:7b:93:
83:7b:f5:f1:04:36:41:83:3a:4b:77:d5:57:de:16:
ec:25:f7:df:bc:89:49:f2:a6:e2:5b:60:de:be:26:
97:12:08:23:fb:af:11:35:3b:34:1f:cd:c9:a9:2c:
69:46:44:f7:c6:d7:c9:96:73:0a:2b:b1:30:c0:4d:
f1:b9:00:d2:80:19:3d:77:43:d6:6c:cb:2b:ed:88:
9a:ab:af:6d:2a:10:16:37:a9:52:fe:c1:c2:6e:29:
7c:d5:d3:d4:f9:b1:6b:70:e7:60:b3:c7:dc:8b:4d:
3f:07:70:f0:6f:54:0f:4b:fd:a4:d3:a9:03:9f:d4:
62:d6:8f:31:0b:c0:20:8d:e9:0a:60:ea:06:74:69:
06:2f:90:c3:31:8e:4a:19:b1:58:b1:ea:2e:e0:fc:
c4:8d:30:34:f4:03:df:e0:30:48:b5:5b:a0:3b:67:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:19:0C:F5:64:B7:B6:2D:78:5D:E0:D8:A9:CD:3A:10:7D:28:52:FE
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b7:8a:8f:a3:32:d0:b1:48:e0:ed:13:b7:0c:21:18:5a:6c:
e3:41:ba:da:e8:81:b6:1d:3f:d2:1f:4f:43:1c:6c:37:db:89:
2e:60:50:6d:12:7a:54:d1:d7:c7:02:2a:da:42:fd:04:fd:ef:
9f:5f:27:be:21:00:6b:25:a0:fe:6f:27:5f:76:a0:4d:8f:4b:
d7:83:31:97:85:86:56:e9:d4:f6:3b:40:ab:af:37:df:45:79:
58:8f:ef:db:fb:b4:f8:f9:9a:c7:85:f7:95:7c:59:f0:e8:cd:
39:9a:e3:8c:6f:00:2f:80:0b:e8:78:57:ee:a0:2d:94:8f:20:
cb:38:6f:64:59:a5:8b:18:1c:4a:3b:0e:6c:f6:50:d3:a5:bf:
4e:bf:cb:09:7e:1a:78:5c:c6:26:bd:4c:cf:17:11:08:a9:f1:
5a:2a:7f:b9:f5:dc:32:f7:c1:4f:19:ea:8e:76:6a:7c:99:97:
28:6e:6b:ea:78:23:7c:3f:82:08:43:59:be:60:51:31:ac:d6:
bb:b4:0b:55:aa:1d:e8:b1:4c:17:a6:c5:9b:ca:bd:46:70:d3:
23:e2:28:2c:3f:87:0c:41:8a:c4:a9:29:3e:eb:ee:f7:78:bc:
80:25:73:f5:c9:77:4a:4b:61:ec:a1:b7:a2:77:82:77:a7:84:
7e:01:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:12 2026 by rpki-client