Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: qvIIXyBVkAT2rx5M003ttyJVWdyuTwqAPbXZnogUbYo=
Subject key identifier: D0:C7:31:98:1B:E6:8F:24:18:3E:E7:D2:3A:D6:1F:46:C0:04:D2:FA
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019D34F60D36424CC4F6B487116258E2F2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1850
Signing time: Sat 28 Mar 2026 15:00:33 +0000
Manifest this update: Sat 28 Mar 2026 15:00:33 +0000
Manifest next update: Sun 29 Mar 2026 15:00:33 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: xyj3vDvu9IwKpnf7/mEHDhJZFazIgLkG9g88U5cWNwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:0d:36:42:4c:c4:f6:b4:87:11:62:58:e2:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Mar 28 15:00:33 2026 GMT
Not After : Mar 29 15:00:33 2026 GMT
Subject: CN=d0c731981be68f24183ee7d23ad61f46c004d2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:a5:47:51:ec:78:58:ba:d4:85:5d:c9:cc:
55:ac:56:d3:97:55:83:ec:dd:70:92:ba:d3:0f:06:
15:b4:bc:07:62:91:14:dc:4a:11:78:3f:c2:0b:ca:
6a:41:29:93:60:c9:18:08:d9:80:f0:c4:1b:57:53:
71:14:c4:63:02:ff:2a:fe:06:d7:6a:22:2b:15:85:
5a:b5:aa:74:55:6c:c6:6a:18:74:5b:9c:b8:de:bc:
98:71:6f:71:a3:c9:57:9b:d5:ee:f9:91:04:fe:ab:
40:dd:7b:94:17:64:a3:67:bd:be:c3:be:99:9a:fc:
09:a1:dd:ab:1c:94:23:70:30:0e:cb:e8:ac:e5:fd:
d5:91:e4:f4:40:b0:4a:22:2b:ac:16:57:12:f6:15:
a9:71:7d:09:43:48:e2:50:49:22:dd:49:84:14:6e:
76:b5:1b:00:b4:75:99:c8:94:f0:5c:6a:ed:02:44:
f9:91:16:7e:c6:aa:ef:6f:bd:9d:93:af:d9:89:0a:
9d:d3:d3:eb:b0:e3:96:6e:8f:83:24:a4:8c:67:2f:
0a:f6:68:c4:78:da:15:54:15:d9:2c:42:2d:6f:d2:
87:bf:0c:9c:e3:04:27:bb:a5:72:ec:25:c7:b5:06:
c4:b4:50:a0:b2:68:55:aa:16:3e:bc:fc:ca:4f:4c:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:31:98:1B:E6:8F:24:18:3E:E7:D2:3A:D6:1F:46:C0:04:D2:FA
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:78:10:e1:38:c9:af:a2:c0:31:cd:17:e3:44:0b:d6:87:4a:
f7:70:22:ad:cb:fa:2c:c2:1e:28:92:2a:57:11:b0:04:d7:be:
f7:62:d9:54:99:b6:1e:e7:d6:b3:0d:0c:2e:51:86:a0:e7:ba:
16:c2:06:a1:cf:ea:eb:f0:e0:d7:72:31:70:c6:32:e7:dc:37:
b5:3e:d1:86:bc:30:53:2e:bf:5c:c4:df:98:16:75:92:23:67:
a0:f7:00:ee:f5:38:04:2f:ed:a0:3c:0c:63:9d:f1:4b:0e:1c:
d9:a0:84:ff:53:61:de:1f:d7:cd:aa:98:53:99:14:38:85:48:
c5:50:60:b8:0a:35:e2:d6:06:22:8e:00:b4:9c:1f:01:d8:8e:
fe:09:87:ab:36:a9:b4:e1:75:d7:68:43:4c:3c:5a:7d:17:3f:
21:83:00:6b:62:ce:84:bd:07:34:2f:c1:24:0a:0b:c4:8c:ab:
4f:d0:84:8b:51:57:3d:1e:d1:b5:a9:df:b3:43:d4:30:40:b5:
c3:62:cd:0c:57:63:aa:f8:6a:04:49:9f:de:20:92:05:82:e9:
e3:e7:ee:16:e4:5d:a9:44:9f:38:32:cc:5e:bc:82:df:fe:ce:
83:44:49:04:18:95:a7:fa:82:4b:60:1d:5a:26:28:e2:69:f1:
77:f7:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:11:11 2026 by rpki-client