Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: gHBQbTHzaYfKj1mdgnem8bl8x4K7PAf8PKqLGJrCThg=
Subject key identifier: 65:B6:AE:BB:36:A7:9C:8D:C6:DD:67:14:63:03:FA:EE:98:05:1A:50
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 019D23278DB59A1DC949A856AE5983FF15DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 1362
Signing time: Wed 25 Mar 2026 04:01:27 +0000
Manifest this update: Wed 25 Mar 2026 04:01:27 +0000
Manifest next update: Thu 26 Mar 2026 04:01:27 +0000
Files and hashes: 1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: tCYkJDNr4xM1ZXLmuY4hteoMNMjM01RXL+hUSXAMRYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:27:8d:b5:9a:1d:c9:49:a8:56:ae:59:83:ff:15:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Mar 25 04:01:27 2026 GMT
Not After : Mar 26 04:01:27 2026 GMT
Subject: CN=65b6aebb36a79c8dc6dd67146303faee98051a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:46:89:dc:dc:5c:93:58:04:31:1c:4c:c3:
b5:fe:0e:b6:c8:d4:bd:4c:7a:b5:80:38:c5:22:a7:
28:d4:63:ca:45:7c:26:b7:a2:75:7e:38:e7:25:e4:
74:cc:d8:07:e2:41:00:85:11:1d:c4:a7:4e:1a:39:
dd:b9:4b:3a:54:17:bc:f1:c6:e7:1c:1b:11:2e:fa:
6d:b8:b0:fa:6a:62:58:46:9d:ba:d1:3f:de:22:e7:
c5:3a:fa:d9:bc:df:d4:04:b3:af:72:02:eb:0d:d8:
97:dc:ce:8d:b9:39:40:6e:2b:18:e1:06:18:c5:af:
4d:7b:a5:10:2c:96:b6:16:c9:ab:c6:d8:27:6b:4a:
9c:5f:2d:84:a2:7e:38:a4:47:c5:1a:0a:71:42:b8:
33:e3:84:bb:50:cd:49:6d:3a:21:0b:14:8e:91:e0:
0b:17:3c:39:9f:04:84:b6:eb:17:20:f0:e8:51:44:
5e:87:8e:5a:84:e8:8c:66:c0:8f:a8:6a:84:96:d3:
74:75:e8:39:96:11:d0:c5:d8:96:aa:fa:6f:37:1c:
67:8f:75:47:fa:ab:b3:dc:2c:54:d1:7c:aa:f8:49:
3b:53:ca:10:c9:4a:dc:81:f8:a2:e9:30:45:50:2c:
79:5e:dc:0e:69:e2:4c:c9:fa:aa:67:63:a1:0f:06:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B6:AE:BB:36:A7:9C:8D:C6:DD:67:14:63:03:FA:EE:98:05:1A:50
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a4:d5:83:fb:e6:42:f0:43:e3:4e:46:f9:bb:bb:64:8e:06:
24:98:4c:8e:25:89:42:e6:a4:69:ea:60:4f:27:a4:30:2c:30:
fa:2a:b5:82:66:ec:07:45:48:f5:57:d6:b9:a0:09:53:d0:7c:
6b:1d:72:69:31:c0:72:88:da:29:14:de:76:60:bc:be:be:dd:
89:db:72:e1:20:1e:9b:b3:e0:76:59:62:68:51:8c:61:73:51:
7f:76:cc:53:1c:2e:20:22:9a:dc:6b:f2:65:f9:54:4e:d8:90:
ce:97:33:2e:18:b6:e3:02:2e:17:11:51:44:9b:e9:ce:8e:d5:
01:19:9c:05:c5:0c:ee:66:a7:12:7d:c1:82:f5:63:48:7b:c9:
f3:ff:63:cb:ac:b8:af:a5:17:ed:c6:ea:90:3a:c0:32:1d:2b:
f3:b2:fb:50:2b:97:76:0e:66:0a:7f:a5:fe:c0:94:d3:95:9c:
21:e9:04:1e:e7:6e:be:1e:c2:fb:89:16:4a:3c:01:ea:e3:80:
bc:90:f2:4b:84:34:df:7b:f2:77:54:7d:4c:71:4f:be:17:24:
86:7a:87:20:cb:ff:ac:be:42:5b:92:ea:8c:db:4f:d6:39:30:
df:d5:be:4c:21:0f:92:97:1e:7d:ee:55:0d:d8:2a:21:36:d5:
6a:5c:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:58:22 2026 by rpki-client