Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier: wltIXxdC+QdQOcyT6rq+U6ztNeQ/HOGnLwd6HDtoT8E=
Subject key identifier: 34:C2:35:D9:30:6D:29:67:3E:97:DF:9D:BC:09:78:25:69:C7:24:3F
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 019CE2595E96A42762C6F20BB7AD5F483EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number: 0ACC
Signing time: Thu 12 Mar 2026 14:00:33 +0000
Manifest this update: Thu 12 Mar 2026 14:00:33 +0000
Manifest next update: Fri 13 Mar 2026 14:00:33 +0000
Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: H3A9JIaCQw0jUg3Jh6YR8KJSiQAZQpzFkEXHFnQlvyY=)
2: YFsmm4apHvY6ZL8EsMyBPmZGQ-E.roa (hash: QK8FK49xDAR7s4a20/0YVNHlxDPHbZSZvfiRmsUbSrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:5e:96:a4:27:62:c6:f2:0b:b7:ad:5f:48:3e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Mar 12 14:00:33 2026 GMT
Not After : Mar 13 14:00:33 2026 GMT
Subject: CN=34c235d9306d29673e97df9dbc09782569c7243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:5b:0b:b0:14:c1:b6:7b:a5:a0:55:9b:51:
50:6f:0e:40:9c:19:59:0a:ff:35:6b:c5:47:b7:ef:
90:d9:c2:b5:58:70:72:32:04:38:f1:ee:b7:c4:7f:
e4:53:54:2a:29:18:16:f3:81:62:94:46:94:0d:7f:
ce:83:bc:21:6f:36:a5:be:cc:05:aa:1a:d6:d5:ff:
a1:62:95:e2:d6:7a:97:6d:ce:43:d1:3d:32:44:45:
d9:7b:03:53:9a:01:f1:eb:1a:30:12:10:30:ee:02:
62:2b:ee:95:4c:65:b7:37:a3:95:41:66:54:4b:b5:
28:6e:18:2c:19:9b:35:ed:f9:53:4e:44:c1:97:e9:
36:be:0b:d7:29:e9:98:92:68:8c:99:d7:26:6e:0c:
28:2c:79:f8:dd:5b:7e:c4:2e:56:8f:d7:54:3f:a5:
b1:33:4e:b0:df:44:2b:d5:e6:29:11:95:27:d4:4b:
4a:1c:cc:32:12:7d:b2:12:23:97:cb:9d:d5:a1:1a:
d9:4a:8e:86:63:05:12:63:88:02:24:cf:bb:60:a4:
15:e2:b0:73:0a:6b:13:0f:3d:6c:21:69:d5:a5:d5:
d9:f5:55:2a:64:78:33:f8:ca:16:38:0f:ba:69:2b:
97:8a:6a:20:5f:66:d4:ea:1f:73:42:3c:19:1b:41:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C2:35:D9:30:6D:29:67:3E:97:DF:9D:BC:09:78:25:69:C7:24:3F
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:30:3b:e3:c3:d2:68:b5:c4:85:79:e8:9d:dc:15:01:f9:60:
15:54:fa:89:79:b3:8f:ee:79:50:ee:66:bb:f3:4a:38:f9:12:
43:05:06:b4:76:7e:d3:e9:6d:54:a3:c4:bd:b2:54:1c:98:80:
c4:58:cd:37:2f:0d:4f:8e:9d:bb:3d:93:63:91:61:7f:fb:39:
f2:2e:1b:4d:31:1f:a5:d0:45:ce:25:b6:8c:dc:f2:0b:3a:13:
93:ae:c0:31:e6:ca:0c:70:5a:12:42:51:fe:f9:ff:cf:f7:92:
f9:a9:58:f4:ce:4a:13:2c:18:d5:d1:c0:3e:16:55:4d:8e:e2:
0a:4f:b4:96:93:c2:88:4c:23:04:12:a6:f8:15:86:d5:de:1c:
62:bd:4d:10:74:69:03:cd:13:e4:18:13:86:cd:d5:9d:99:45:
b8:b3:35:ba:36:6b:01:4c:68:5e:7c:3b:eb:04:4e:b5:1e:df:
67:fb:11:1b:67:c6:76:82:bc:b7:5c:90:12:91:8f:00:03:7d:
03:d2:23:c2:b0:e8:2e:49:79:7c:f1:5b:ca:ce:28:e3:bc:5e:
67:08:3c:89:24:c7:a0:09:5c:d0:88:f8:f2:8a:ab:53:23:3f:
a5:76:ea:c4:20:d4:da:54:56:2d:ff:10:34:f8:3e:67:b5:e1:
bd:d4:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:23 2026 by rpki-client