Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: jc8LEbHSDP1lxXUec9nlthdYdxTL3WmfXUVvRWqhKb4=
Subject key identifier: 40:59:BC:21:70:72:F7:7E:BB:AE:BE:1C:DD:B6:A7:60:F4:AC:35:C6
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019D3909DD4C4CE53AF2D941A628FAA36122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 02C0
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: dzvtVeC+Lwgr7Asdt6pjhWqVYdgQQoa/HE4+P+k/LJI=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:dd:4c:4c:e5:3a:f2:d9:41:a6:28:fa:a3:61:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=4059bc217072f77ebbaebe1cddb6a760f4ac35c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:eb:26:db:ff:29:d0:44:19:4d:87:95:61:
a2:d3:b3:d1:c7:a2:07:c0:dc:bc:df:88:3f:67:e6:
98:d0:b3:57:f3:7f:0b:5b:14:ce:e7:32:61:80:7b:
1b:30:c2:5d:ea:ca:f0:bf:55:ee:3d:30:0c:d5:0f:
22:04:9f:8a:a2:4a:72:68:b2:44:b7:89:2d:3e:aa:
a6:c0:6d:ee:af:f6:57:3a:47:1c:cc:ab:6c:9f:d0:
58:cc:30:a3:54:06:4a:8a:03:09:b1:2b:d5:84:a7:
b4:01:e6:1d:ae:88:fa:de:42:43:2f:ff:67:2f:dc:
a6:96:f1:50:b4:fe:8c:54:87:48:c9:f1:ae:19:c2:
62:3d:ad:3f:c5:31:05:19:bc:8b:cb:bd:f9:75:14:
af:e8:73:8f:60:70:1a:db:82:b6:42:33:32:36:c7:
b6:e3:4d:57:80:56:bc:62:60:76:d4:3f:d3:b5:26:
42:4b:51:48:c7:5c:93:ef:4e:3b:4a:cb:2e:e8:aa:
bb:89:2a:b1:5e:2a:5b:75:68:82:3e:aa:41:2a:e9:
c0:dd:94:79:60:d7:d9:8a:d9:00:1a:fd:15:bf:59:
4a:65:3b:14:02:2f:73:ee:cf:ef:14:c3:58:7c:e1:
5d:fd:d2:ac:6d:03:97:91:4b:55:82:1b:7a:a2:ab:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:59:BC:21:70:72:F7:7E:BB:AE:BE:1C:DD:B6:A7:60:F4:AC:35:C6
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c7:18:89:58:20:84:71:2f:04:86:1c:c3:af:c4:f9:ff:25:
15:f9:df:1b:2b:3e:35:f8:9f:57:da:67:a1:81:27:f3:c8:3b:
0f:1a:40:5a:85:46:30:36:b1:97:ef:b7:94:b4:db:73:b5:67:
1e:e9:bc:12:fa:5d:7c:8c:5c:af:ea:d9:af:f9:95:92:98:08:
bd:c2:53:0e:fe:d2:00:15:19:9b:bd:34:8a:d8:6b:8f:b1:fe:
3e:a1:47:3f:87:5a:a7:cc:f0:e7:e8:6b:52:f8:07:39:68:ac:
d7:57:e4:da:51:68:e9:06:ea:46:d9:fd:aa:2c:f7:d5:02:3a:
ff:d6:cb:bc:d8:ce:99:bb:4e:5b:87:4b:e6:2e:1d:12:29:3f:
a7:89:28:7c:1c:04:c4:e1:92:4b:73:cb:24:08:86:26:7a:82:
b9:80:e3:22:fb:e1:28:fe:c7:b8:0e:6a:d6:1a:6f:72:68:43:
80:2c:6d:15:9f:93:42:f6:95:d7:af:e8:a1:64:7c:e2:47:6e:
df:42:27:81:00:57:bd:c1:3e:cf:26:17:15:19:22:5b:51:cb:
d9:ad:89:3f:73:6d:c3:85:16:6b:3c:af:2e:31:be:33:12:8f:
8e:dc:61:56:26:fe:cc:33:5c:0a:d3:d8:2a:2e:34:29:b6:7b:
1b:be:ea:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:33 2026 by rpki-client