Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: kbT5AOJYNO8LzKVR5fLrNu7AfXNGqqH3Y3+/KMhGgT4=
Subject key identifier: B3:D1:BC:7F:B2:88:0D:14:43:8B:40:34:19:04:B0:8D:5E:B0:D1:79
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 019D389C66DAB40C9E03DE0ADCFFC9D561FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 1168
Signing time: Sun 29 Mar 2026 08:01:07 +0000
Manifest this update: Sun 29 Mar 2026 08:01:07 +0000
Manifest next update: Mon 30 Mar 2026 08:01:07 +0000
Files and hashes: 1: LKLzayTx02NKt4IYLkBu7eAzfMQ.roa (hash: mj+HEmIxR6MSV3YLRBJoyixi3pfyWUn/3aiy0wIfWXE=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: IRUK5HuuVVxfNAvw3pN9RWPzAthjKN7bCWO0rXZZDt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:66:da:b4:0c:9e:03:de:0a:dc:ff:c9:d5:61:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Mar 29 08:01:07 2026 GMT
Not After : Mar 30 08:01:07 2026 GMT
Subject: CN=b3d1bc7fb2880d14438b40341904b08d5eb0d179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:2a:82:55:a3:4b:ec:e4:52:96:c8:34:04:
a3:66:2a:d9:91:90:60:d0:25:35:7e:aa:d3:a8:fd:
d0:47:0d:14:91:d1:97:e0:78:ab:e4:c2:25:1d:39:
67:2a:93:b5:3c:d3:5d:12:20:71:a6:42:86:a6:c7:
c0:d0:89:c9:f8:a0:46:6f:d3:39:09:54:93:41:46:
fe:36:70:39:9b:67:48:d1:9e:fa:4b:49:e9:86:70:
ee:37:c5:87:38:b7:97:5b:dc:6f:8a:df:5b:24:b1:
2d:9e:75:3b:09:51:62:27:e3:9e:a2:80:f9:2c:fb:
b6:41:f0:3a:75:a1:60:df:b2:52:43:da:cd:d3:6f:
95:49:3d:73:e4:32:4b:46:e7:f1:c9:de:54:0f:01:
4f:a3:f5:34:55:97:9d:3e:28:8f:d4:ad:bc:83:85:
67:ee:47:8e:98:31:4f:24:e1:12:d9:7e:fb:44:13:
2a:c9:33:c6:e7:17:af:2d:3d:fe:a9:65:9d:65:cd:
90:95:39:f4:85:b9:6c:0f:3e:b7:9f:b2:c9:9f:d2:
63:c0:e7:ee:b5:15:73:1b:f3:03:0e:6c:60:23:bf:
6c:11:ab:7a:80:53:92:77:c5:30:26:8c:4c:12:6c:
9f:87:dd:28:66:3c:59:fc:3c:53:38:23:a3:19:b7:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:BC:7F:B2:88:0D:14:43:8B:40:34:19:04:B0:8D:5E:B0:D1:79
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:30:63:13:13:b1:2a:85:7a:1e:80:46:ad:a2:3a:b5:b4:b9:
38:2d:f2:ed:18:78:b4:ea:ab:cc:37:84:5d:3e:ea:21:c6:bd:
6b:86:7e:d3:12:b7:ac:be:a1:aa:0f:fa:37:f1:e7:01:95:ef:
a3:3e:c4:47:25:cb:ff:07:8c:37:1e:f2:a7:5f:57:51:28:6d:
0e:8f:ec:d6:d2:34:a9:0a:42:d5:8c:24:28:fa:e7:de:18:c5:
ab:8a:43:84:88:7e:9c:90:18:68:1b:8d:2c:5b:99:7a:40:31:
f6:f0:6f:24:2d:2b:c1:83:5f:6e:bc:a4:57:f9:13:bc:60:f0:
81:fa:47:b0:f3:0e:3a:ec:79:74:4b:c5:26:d3:f6:f9:1d:f0:
77:57:2e:37:b7:18:bb:8b:d9:6b:18:73:e6:00:96:01:7f:40:
4d:90:69:4f:e0:bf:c1:93:3b:4f:3e:ef:71:13:ce:2b:0f:1e:
b8:6f:58:ae:a0:18:4b:d9:0a:b2:93:e7:c0:b0:60:72:97:1b:
3e:4c:49:52:88:64:4d:0f:8f:47:4c:eb:48:f5:15:6b:d0:1e:
2c:5e:4b:53:56:9e:05:fa:5d:a4:5c:58:f3:7e:98:a4:72:4f:
d9:c8:53:c2:3e:f4:c7:de:51:ad:2e:31:70:01:b6:d8:aa:50:
43:a5:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:02 2026 by rpki-client