Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: 1/tt3TJ+XYQn+UnMm1He9IctmlGQZ9fRGb2H21LDjt4=
Subject key identifier: D8:A1:8E:2E:73:FD:0F:C7:EE:30:E5:69:63:5B:D5:28:7E:44:05:D7
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 019D37F74AF62B3E0AFE5270558A63ED6AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: 031A
Signing time: Sun 29 Mar 2026 05:00:46 +0000
Manifest this update: Sun 29 Mar 2026 05:00:46 +0000
Manifest next update: Mon 30 Mar 2026 05:00:46 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: ARAtUcKZMHqAInlSBtd7JYFWJqGu73d4VPg5aZpe4IM=)
2: wmkrs-T4Qk-NyFJuLfe4BJQMXMw.roa (hash: ENCrMS/ggVPvYnMViHVPfzOMTrIXGPczqg+j9lYLbks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4a:f6:2b:3e:0a:fe:52:70:55:8a:63:ed:6a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Mar 29 05:00:46 2026 GMT
Not After : Mar 30 05:00:46 2026 GMT
Subject: CN=d8a18e2e73fd0fc7ee30e569635bd5287e4405d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:72:c7:fa:8c:33:e7:3f:eb:4c:dc:2a:02:
72:26:14:21:84:10:ed:4e:09:3c:00:de:20:d5:40:
95:6f:a7:8e:1b:46:55:31:02:8b:43:f2:88:24:0b:
73:e2:e3:6f:d7:14:43:e2:ee:b8:49:4d:3f:74:ee:
1a:03:fe:ec:f3:b4:3e:51:45:90:0b:da:6d:bc:19:
4a:2e:7d:fc:31:2a:95:07:51:63:5d:ec:6f:2d:b6:
9f:af:8b:bd:a6:57:c5:fc:d4:af:bf:9c:73:b5:fc:
c8:c2:da:02:da:0b:94:03:37:c6:a3:5c:ec:63:4b:
53:9c:66:1d:4d:5b:fa:68:5c:1d:fa:84:1a:75:13:
c2:68:53:73:11:a0:a2:25:c7:b1:58:6a:d3:f0:c5:
ad:2b:0b:b0:28:e2:2a:f4:ee:d2:e5:51:1a:9f:32:
34:43:7f:d8:a6:8c:67:69:77:a5:38:7c:d4:b8:a3:
65:c3:fa:8e:f3:9a:2b:04:74:a0:77:e3:a9:b1:35:
01:3b:2c:03:3f:7e:8b:b5:5d:1a:4c:22:5e:68:12:
b3:58:c1:a4:e2:94:9c:dc:e8:63:49:3d:dc:97:03:
ce:e2:57:ac:1a:3a:75:5b:eb:bf:f3:bd:ba:88:18:
19:97:d2:11:d2:f5:9d:ab:2c:ba:0d:71:15:aa:13:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A1:8E:2E:73:FD:0F:C7:EE:30:E5:69:63:5B:D5:28:7E:44:05:D7
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:da:b3:bf:18:dc:2d:31:e8:6f:60:9d:94:0d:71:02:06:be:
0b:0c:44:18:49:27:db:fe:e9:99:4d:95:f0:d2:f3:ce:3f:e4:
35:39:12:e1:be:d5:06:5a:fd:07:5e:93:15:4a:fe:6c:59:03:
c0:20:62:c2:94:53:cd:06:8f:44:39:44:38:c2:53:8f:62:39:
67:38:4b:f7:5a:40:1b:9f:6b:2f:31:f5:98:1c:33:dd:a1:62:
a8:9f:96:62:66:6e:83:37:18:31:79:81:3a:2a:91:2c:7f:6f:
ab:1e:c6:82:45:29:61:5e:c5:9c:c9:2b:4c:25:b2:0c:3b:dc:
8d:4d:7c:ba:75:86:42:2f:ad:51:c5:d1:42:38:5a:98:be:ed:
4a:48:97:45:08:d8:df:bd:de:da:81:4e:c6:9c:92:33:e6:a7:
1a:71:22:93:57:e7:4c:86:61:83:00:d4:d7:1a:92:c7:86:f4:
dd:c6:32:db:7e:05:70:bc:f6:3d:78:a0:a9:99:ae:2c:a8:0f:
4d:64:2d:b6:9e:66:30:06:ae:76:bd:9c:1b:72:eb:ab:47:1f:
d2:7e:41:07:84:3b:e0:9a:75:54:fb:f3:ee:1b:4d:07:8c:32:
26:cf:a7:c6:9f:b7:7d:f5:7a:c0:ac:04:f5:b4:9b:02:a1:3b:
16:03:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:04 2026 by rpki-client