Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
File: Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft (raw, json)
Hash identifier: /zM+HB9PezEIKXkzC7kBmOvGB1HI1qLwfVAgOwPd6aQ=
Subject key identifier: C4:60:30:9D:D2:19:ED:88:2D:58:D3:65:5C:2E:54:56:3C:F1:6F:4A
Authority key identifier: 43:54:FB:F8:B0:23:38:CD:62:DF:CA:91:0F:7C:85:10:6D:2A:1E:FB
Certificate issuer: /CN=4354fbf8b02338cd62dfca910f7c85106d2a1efb
Certificate serial: 019D37894843FBDA345EA8EDABD642AFC6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1T7-LAjOM1i38qRD3yFEG0qHvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
Manifest number: 3D
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: Q1T7-LAjOM1i38qRD3yFEG0qHvs.crl (hash: Kr9Fq8S7NEilVJWXDzDwq2qMVZI/IppLdQHFV7FoVxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1T7-LAjOM1i38qRD3yFEG0qHvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:48:43:fb:da:34:5e:a8:ed:ab:d6:42:af:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354fbf8b02338cd62dfca910f7c85106d2a1efb
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=c460309dd219ed882d58d3655c2e54563cf16f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:e3:04:b9:e6:d2:f1:62:e2:6f:d0:f8:ab:
cb:21:27:87:7f:89:e4:4e:ab:c4:dd:4d:b5:f4:fd:
a9:5e:fb:eb:ad:1a:bf:83:c3:64:71:50:75:63:44:
87:b8:9b:c7:8f:91:65:ec:62:00:b3:37:ad:3d:ad:
ef:11:4d:d6:c1:83:61:c7:45:2c:df:02:bd:f3:01:
e0:36:fa:30:3d:d4:1d:58:34:4e:98:61:c2:e2:49:
f9:7a:69:31:ce:dd:5e:08:ea:09:02:f0:69:0d:89:
58:25:95:36:ef:13:b7:ef:bd:27:76:0b:8e:65:92:
45:71:fa:4e:b0:13:a0:7b:e4:79:f0:66:0a:a0:9e:
28:f3:75:02:56:ad:3a:11:d3:88:6a:0e:ad:28:47:
ed:d4:2e:e5:a5:ad:e8:d8:77:09:d0:36:70:07:79:
1a:f8:7c:e4:0d:df:f8:2f:7f:67:e4:c2:03:d6:d8:
d1:c8:2f:74:8d:8d:12:c7:c6:26:72:b8:3a:e6:8a:
5e:fe:7d:ad:cb:a5:7a:1b:92:44:fa:40:5f:73:b9:
bb:19:2d:79:21:98:cf:b0:8f:8b:ec:a3:1d:6f:22:
a0:db:06:0d:b1:2a:81:0c:96:c9:dd:1f:a6:f9:e9:
1d:06:0f:00:dc:b0:b5:a5:4a:fd:df:b7:2d:08:87:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:60:30:9D:D2:19:ED:88:2D:58:D3:65:5C:2E:54:56:3C:F1:6F:4A
X509v3 Authority Key Identifier:
keyid:43:54:FB:F8:B0:23:38:CD:62:DF:CA:91:0F:7C:85:10:6D:2A:1E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1T7-LAjOM1i38qRD3yFEG0qHvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a1:77:7e:b7:41:f0:26:a2:15:0d:83:56:f0:01:91:b4:4b:
71:e6:c2:b7:01:5a:57:2a:a2:bc:c7:6e:25:d4:77:26:ef:35:
76:d9:a1:3f:9f:45:04:8f:2d:60:cd:6a:2d:28:5a:b7:b9:09:
3a:65:92:63:8e:8f:a7:ad:88:63:11:31:6b:d2:a1:2e:db:9c:
b0:9e:81:91:91:8a:29:a5:3d:2d:4c:b9:89:eb:e7:85:1a:c5:
c5:f9:c9:30:b0:fd:e9:6f:fd:73:9e:bc:a9:90:14:7c:ef:4b:
10:50:91:74:7b:70:21:c8:e9:4f:ac:39:4b:b5:47:da:bf:cf:
ba:43:b5:b3:02:0e:8b:f2:47:bd:05:9e:28:24:7f:91:b1:6d:
06:68:e6:dc:26:6a:6e:3d:8a:54:b8:92:81:4c:7b:71:81:b9:
e8:08:6a:3f:bd:82:bd:23:17:b4:5b:e0:2d:60:17:af:b3:f6:
c9:4e:37:b5:e1:4c:fc:06:3a:eb:96:70:64:3d:d5:01:f7:72:
5b:ee:b8:dc:52:f5:96:fc:06:63:84:b1:5a:b4:76:8b:29:7a:
a2:18:a6:43:23:fd:43:23:92:11:41:0a:75:9e:7a:e6:7e:ef:
e3:cd:70:93:b4:0e:29:d0:9e:16:e0:e4:13:14:6e:77:04:41:
cd:5d:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:08 2026 by rpki-client