Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: cyDyLO7q14yMZi7CZ1YKUNyuflLy8qktP0FMzhX+XyY=
Subject key identifier: D6:8C:55:FA:8A:50:AF:69:44:36:A0:EA:4E:B5:6E:22:22:DE:72:2E
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 019D38D3D1A0CC42971EE8B13A49849E14CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 1577
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: g2BEF5M9p1sIYQZ52w/Xmh30rWnzLsJPX6jZJWAobXw=)
2: l_ruKO78QHVQe-kxScIY78h3qwo.roa (hash: jzBDUnZ8ZQyI+7hv0yjsFFpgvL3Te9Vz0AqbFGjex/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d1:a0:cc:42:97:1e:e8:b1:3a:49:84:9e:14:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=d68c55fa8a50af694436a0ea4eb56e2222de722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:93:45:c6:4e:25:17:5f:2a:2c:5a:a0:55:
61:3c:d8:09:dd:eb:3e:ad:2c:c2:ce:f1:ed:91:73:
ce:1d:29:87:2c:06:8a:08:69:d0:a9:af:2c:2d:16:
5d:09:0f:dc:52:4e:66:ba:0c:86:94:32:75:90:fd:
03:12:6d:0b:28:31:ce:8c:e8:61:15:5b:b7:92:17:
57:ce:a7:53:c5:88:15:65:a3:99:6f:34:e6:a0:b6:
bc:b0:87:90:b0:0c:f2:de:39:30:dd:a9:21:2d:bd:
a2:fb:ce:8b:55:4e:84:d5:e1:4a:e7:72:2f:98:6d:
ff:fe:be:22:81:76:23:3a:4a:69:b1:04:78:41:88:
20:84:3c:cf:76:da:e2:b8:50:5c:44:3f:60:b8:22:
a3:87:91:fc:90:4b:36:54:a6:19:6d:e5:b5:5a:ff:
09:c1:6a:41:6b:e5:fe:f3:74:c4:65:4e:d8:78:84:
cd:24:b1:14:e5:89:3c:fe:08:d2:dc:96:20:6e:ad:
d2:9c:8e:7c:a7:e2:3b:4e:46:40:1d:14:7a:55:c4:
e7:fa:67:23:09:83:45:8c:fb:1f:20:25:31:d6:fe:
0d:be:d6:dc:63:4f:8f:8f:b7:1e:c7:3f:90:eb:ef:
c0:d3:23:94:6c:27:2a:97:1a:b9:59:bf:f6:9c:19:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8C:55:FA:8A:50:AF:69:44:36:A0:EA:4E:B5:6E:22:22:DE:72:2E
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:d8:b5:ee:fe:74:5f:a2:41:5a:60:59:54:59:81:cb:f2:
74:95:98:e1:cd:17:d2:b9:c2:f9:42:13:93:41:49:c8:4e:78:
99:8c:bd:07:23:71:c3:47:11:fe:c9:77:44:e4:b9:e8:a8:6e:
b8:60:ed:54:27:ef:c4:d6:ba:0e:82:fa:e1:58:e5:c1:fc:55:
88:40:0b:3b:64:84:27:47:04:04:a2:fc:db:18:0c:34:cc:86:
79:72:8c:25:00:a8:a3:ec:0f:4e:36:13:36:d3:0b:16:8d:98:
88:a7:da:62:f5:29:30:6b:23:a6:3d:82:7b:a3:18:8c:a9:4b:
29:6f:d6:01:c1:38:1f:dc:be:91:02:9e:2d:c4:75:06:b8:c6:
48:1f:51:7e:c2:6d:29:15:69:48:9c:17:93:1c:09:88:2b:92:
d1:32:49:94:13:7f:cc:a1:bb:ed:16:3f:af:ea:8e:c1:c9:80:
e6:6c:1c:cd:0d:be:33:0b:d9:4f:1d:24:f4:3a:bd:ea:5a:04:
a7:77:a7:90:43:78:e8:5e:7e:85:a4:4a:ff:21:30:fe:c4:d7:
30:9d:00:36:d1:4e:52:12:93:c3:58:c7:5f:2a:73:b7:ef:e6:
ec:21:cb:67:ce:35:d3:1f:76:0f:e7:e8:a1:a9:b6:c8:7e:92:
f0:cd:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:29 2026 by rpki-client