Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: Sk5C0UoSAA3cf9IAX4PcP4L2A4foW4gR6iRNwMRXjNE=
Subject key identifier: F3:49:E2:55:C9:BD:6F:7C:B3:F2:97:4F:A9:E2:B1:03:A0:00:D7:F5
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019E322A2E75446BC90BE7E189F745433CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 0341
Signing time: Sat 16 May 2026 19:01:25 +0000
Manifest this update: Sat 16 May 2026 19:01:25 +0000
Manifest next update: Sun 17 May 2026 19:01:25 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: FwXJG6eoydGqpDNjDLZRD5znVwQyWZaQywJqtQYDkF8=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:2e:75:44:6b:c9:0b:e7:e1:89:f7:45:43:3c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: May 16 19:01:25 2026 GMT
Not After : May 17 19:01:25 2026 GMT
Subject: CN=f349e255c9bd6f7cb3f2974fa9e2b103a000d7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:20:0e:74:cb:cc:91:98:6f:16:82:2b:4d:
3b:17:24:b3:f5:f9:7f:27:ba:c9:ec:3e:84:8d:38:
be:6b:f1:95:c6:78:45:5c:99:9d:6c:50:ce:0b:45:
27:ab:cb:ab:21:5d:41:9c:e4:7e:4b:fa:46:21:22:
7e:2b:74:4b:83:b8:1d:8b:99:a5:68:95:e5:26:99:
9a:14:05:93:c9:c0:eb:1b:29:de:c1:4f:8c:15:a1:
76:c1:86:8b:08:e7:cf:3c:3e:09:57:76:e5:a8:5f:
f1:b7:ed:91:04:3c:bd:68:23:a7:33:c3:c2:56:b9:
33:17:86:c8:5e:78:97:85:e6:93:d1:7d:ac:fa:7d:
48:b6:d2:e8:48:2d:58:0a:50:03:02:a9:a3:5b:41:
78:72:58:e1:2b:f4:ce:8f:42:11:e3:66:47:09:46:
b9:2d:a3:9c:23:20:67:38:24:e9:47:55:c4:cf:1e:
c9:fb:61:9f:f2:d1:9e:84:1e:d3:70:e8:3a:8c:96:
5e:9c:2d:1c:e1:3c:ba:89:a1:77:3a:25:08:b7:e4:
b3:40:7b:9e:3d:22:bd:fb:e0:3c:82:fb:a9:29:e1:
9c:4e:0b:82:dc:96:fb:20:be:6c:90:01:66:2a:a8:
2a:9d:c6:ed:79:d8:b3:ff:1a:e4:b2:7d:fe:c3:05:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:E2:55:C9:BD:6F:7C:B3:F2:97:4F:A9:E2:B1:03:A0:00:D7:F5
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:4c:c9:bc:84:d7:1d:ea:64:72:ea:9d:96:4f:52:e9:61:
04:25:bc:d5:f9:e5:8b:fd:58:c3:40:e6:74:18:31:b2:99:57:
8d:18:a2:68:01:05:f2:6e:7b:8a:eb:52:67:e5:d6:df:0b:26:
07:ae:8d:90:10:ae:1c:d0:f1:88:0e:81:4a:38:0e:22:21:2a:
8c:a7:37:85:47:3f:52:64:af:3c:08:25:ba:e6:c9:13:cb:41:
62:f0:fa:5e:78:b5:bd:53:23:02:8d:78:73:3d:9b:7e:31:16:
99:ff:25:2c:c0:54:a0:81:7b:2f:59:fa:84:b4:47:33:75:02:
1f:30:0d:09:1a:db:41:b7:dd:0f:61:67:e6:79:a7:53:a7:43:
40:78:74:c2:59:36:bf:32:2d:f6:df:b0:fc:3e:90:ef:53:63:
65:4f:c6:58:6c:be:0e:17:12:3e:ab:72:8e:2e:85:87:d3:ef:
9b:51:8e:cb:36:ec:cb:0d:92:dd:37:55:c4:e6:b5:c6:9e:d5:
1a:f2:27:29:19:78:22:ce:39:3b:ca:57:7a:6c:ee:1b:ad:75:
d9:83:8d:cc:2d:08:a2:6f:f3:f2:d8:ab:ec:d8:e9:e1:5d:a7:
d3:62:17:f0:19:36:1f:f0:42:97:55:d9:93:64:f6:5b:55:2b:
93:42:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:47 2026 by rpki-client