Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: eH3GdwJG7vwQRdsqPqNxB3sXyaSK7LvOy+VGRhEKlLU=
Subject key identifier: A1:53:B6:BB:81:DB:47:A7:48:AB:36:A1:D2:76:BB:5C:31:07:8E:D2
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 019D382E0C8CD223A8E9B1F7E5970DDF0816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: 9xoysUUSrzHlJU8lCmZWQqQApcD8Q+gbotrOPcFv2j8=)
2: kSqnJudP1pAwQZ-smOra_DXvmqo.roa (hash: MWXJ230azqqoaYeTEJboZO3ZCTU5ujgS6o/oqGqK34I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0c:8c:d2:23:a8:e9:b1:f7:e5:97:0d:df:08:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=a153b6bb81db47a748ab36a1d276bb5c31078ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:fb:5c:ad:92:1c:22:88:55:77:71:9a:cc:
7d:d8:5e:20:83:85:cc:05:df:c2:4c:84:19:bb:87:
39:5f:ad:ff:85:83:3f:a4:34:9c:8e:9f:cc:4d:82:
5a:78:cd:7e:7d:00:9f:2e:e7:de:04:2b:cc:e6:cb:
29:c3:14:79:60:b9:d7:87:96:20:1e:12:25:97:b0:
91:23:0f:8a:bc:39:cf:e0:55:78:27:47:58:b6:e4:
9c:5c:43:fe:66:c3:8c:3f:da:57:c6:c1:a9:9b:8e:
4e:df:4e:89:a9:ab:3a:cf:27:03:d7:50:ce:df:1a:
ba:7f:ba:36:13:87:6e:0b:5c:63:1d:27:b5:01:86:
63:48:9d:48:a2:85:74:02:f1:d7:8a:25:a9:32:5d:
5c:f2:84:ff:a6:33:00:b9:75:16:ef:36:70:8c:1a:
05:43:b3:a1:17:c5:88:61:6d:fe:fa:c1:a6:ad:33:
5e:87:b8:05:83:50:f1:d5:62:4e:dc:45:e1:3d:f8:
76:d6:85:61:9d:03:ab:a9:8c:bd:a5:b6:04:82:32:
34:a9:bd:75:1b:32:22:08:ba:2f:2a:1e:24:32:63:
40:50:83:de:c1:7d:9b:f8:d6:a8:50:23:04:66:81:
3b:77:9e:fd:03:0f:b6:45:26:23:95:7b:2a:ab:57:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:53:B6:BB:81:DB:47:A7:48:AB:36:A1:D2:76:BB:5C:31:07:8E:D2
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9c:a0:71:ab:48:2c:4d:b4:3f:74:5d:44:12:a9:51:08:6b:
21:d6:53:17:09:d7:d0:cf:ad:16:88:18:45:40:e3:5f:5f:df:
da:8f:9a:b6:d8:ee:15:28:48:3c:06:62:e1:c1:52:3c:b5:3f:
5e:3e:53:85:62:c1:f7:6d:a9:24:ca:3f:25:07:fe:6a:39:e7:
d0:f2:58:7c:38:28:16:d8:dc:46:ee:60:4b:3b:3c:d6:6c:a3:
99:69:28:41:0c:0d:44:38:91:ae:fb:3f:d9:09:9f:5f:16:8e:
ca:09:d4:a9:a8:2e:e1:e9:f7:bc:3f:6b:7d:a5:19:98:3b:91:
65:3e:38:73:58:83:63:f4:b4:3f:96:3d:6b:29:72:8f:b7:08:
2a:50:36:06:d9:21:4c:88:eb:50:57:c7:3e:60:fa:65:9e:3f:
8c:cf:1d:0c:d5:b8:a6:71:d9:24:8a:b8:5a:0a:e2:83:0e:ca:
2b:29:da:03:39:79:1c:14:8e:08:d5:6a:24:08:65:fc:7a:73:
42:5c:3e:42:c3:60:56:c0:9a:8c:04:12:c7:5c:f4:11:48:5c:
25:53:67:eb:8d:8a:0c:50:48:65:c5:18:8b:c7:7f:36:4e:bb:
7e:e0:51:f3:b7:59:96:01:92:6c:96:b7:78:fa:0d:87:55:9f:
af:89:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:36 2026 by rpki-client