Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: SMI9OnqZFBnhtnUrr2S1VfAjl6uL83tFBBdER9azAcE=
Subject key identifier: A0:6A:6C:4A:D5:AD:A8:A0:DD:F7:8E:CA:E3:39:28:C5:05:03:BC:ED
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 019D3AC1C1D8B59FE14FC6573A6735A39471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0E7F
Signing time: Sun 29 Mar 2026 18:01:09 +0000
Manifest this update: Sun 29 Mar 2026 18:01:09 +0000
Manifest next update: Mon 30 Mar 2026 18:01:09 +0000
Files and hashes: 1: 4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa (hash: /Aj0axBj9aVxd0CaoZ4TQJb5zpK/Z9ZsET+fz6PD9KQ=)
2: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: DmifXBeG+/4qPZB7OePuzTBH9W3+vKSx+djV83kWP8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:c1:d8:b5:9f:e1:4f:c6:57:3a:67:35:a3:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Mar 29 18:01:09 2026 GMT
Not After : Mar 30 18:01:09 2026 GMT
Subject: CN=a06a6c4ad5ada8a0ddf78ecae33928c50503bced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:c4:e3:73:89:73:8a:5e:00:a1:5e:b2:e8:
64:f0:5e:00:2f:72:9f:65:bc:b1:c3:de:bd:af:25:
e3:a4:db:76:c7:5d:79:68:ad:bf:d0:a9:bb:6c:69:
95:74:f2:e5:f0:e1:9f:33:60:f2:7f:58:2a:d5:d9:
a5:fd:83:6a:43:dc:ec:c6:e5:3c:8f:fa:51:da:3c:
4c:71:38:c9:31:c5:a8:92:0a:c1:ba:ad:7e:b1:8a:
ee:a7:5c:59:87:82:bc:83:44:54:65:f0:1e:a8:e7:
71:d7:ca:81:37:62:28:83:d7:17:81:b8:7e:ed:29:
ae:79:49:9c:62:5f:25:d4:78:34:a6:91:7d:bb:aa:
41:86:b3:3f:96:fd:2f:24:f5:0a:10:95:11:72:9f:
b6:e5:57:ad:df:94:af:a2:fd:b0:65:19:95:62:70:
4e:d4:9b:7a:18:e0:e3:90:f5:8a:99:ff:5e:7f:7a:
f6:e0:ce:c6:aa:df:4b:a7:96:7d:f9:e0:7e:e9:61:
2e:c4:b9:9f:f4:56:13:b8:50:dd:71:07:b2:31:ef:
c9:82:c9:35:fe:a2:8d:84:b4:c7:de:4b:fb:c4:20:
d4:95:62:80:bd:0a:14:31:70:fa:9d:11:8a:a7:16:
53:a8:a1:9a:a5:b3:22:a8:bc:8f:93:1b:f8:c8:d3:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:6C:4A:D5:AD:A8:A0:DD:F7:8E:CA:E3:39:28:C5:05:03:BC:ED
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:4f:61:04:68:f7:38:3e:ec:7d:f6:0a:7d:14:05:b5:97:
70:32:8d:c5:f4:bb:93:8b:1d:a0:ac:9b:33:8c:b5:71:10:d7:
70:e7:31:4e:1a:5f:2a:9e:80:e1:c5:c2:7f:5e:cc:a0:43:61:
d6:25:02:82:78:17:94:88:12:de:29:f3:64:9a:cd:ce:9a:37:
9f:40:11:be:16:39:ca:1e:2f:0d:3e:e5:a0:5b:1e:9e:03:8f:
b6:5b:6c:43:71:08:ee:58:a1:bf:55:c4:17:1e:c7:55:c9:fe:
2a:90:d9:5c:db:7f:fd:e8:1d:48:69:a9:bc:ee:7f:d8:ad:2f:
df:c3:bf:76:e8:28:98:19:70:36:1b:52:66:ad:b6:49:6a:38:
03:51:81:ac:eb:f4:14:e8:14:2e:1e:b3:4f:c1:4f:93:1a:a2:
2f:bb:24:03:11:d6:f4:66:53:0f:53:f7:77:9e:8d:4a:9e:b3:
82:82:cd:fc:76:1f:93:a2:ca:48:9c:e9:89:97:fd:69:f8:b8:
b3:cf:13:ad:10:e5:2f:5a:f1:ee:d1:f6:ab:8d:4c:54:06:fd:
78:84:9f:fa:cf:75:44:d8:8d:4d:56:4c:74:1b:48:db:56:f4:
2c:bc:2a:c4:1f:4d:ad:45:7f:79:70:f2:48:af:66:33:1c:3e:
f8:ac:56:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:58 2026 by rpki-client