Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: lV19xQHDd2P1GnEepSg/siiEdNrxcOnjYa743YVk9uw=
Subject key identifier: A4:59:6D:0A:DF:8E:D6:4D:E8:EE:1C:D4:86:99:47:BA:F8:65:5A:B1
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019D39413A7B5AC3637AD9F7FECB168D2DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 051A
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: A06G0jKoVHkOoVsdJmlcMjUtuYg.roa (hash: /ucUBoWCtbDVXH8l3LkIjvANk7l2kl8IZAXTo8qEuVA=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: 0E2fODbYxzEEktL3xTouEAw7EI2Hgi8O32P9aQn+hhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3a:7b:5a:c3:63:7a:d9:f7:fe:cb:16:8d:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=a4596d0adf8ed64de8ee1cd4869947baf8655ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:12:ad:be:9e:8a:26:c1:55:fe:a0:06:5f:
f0:48:ae:20:52:98:1b:9c:00:ca:a7:10:9b:a0:f8:
03:a7:75:9a:17:6c:63:d9:7c:5e:5d:b1:16:68:e3:
66:0a:e1:a6:87:c6:19:a7:85:6d:6d:dc:80:4a:cd:
18:ba:02:13:8b:f5:76:72:ce:4c:35:c8:d8:93:18:
65:ee:64:63:28:54:fa:f2:6c:a7:a5:f9:6a:87:4c:
84:80:ff:5e:5b:2d:4a:d5:85:40:5d:51:41:bf:8d:
07:ad:93:7b:7d:70:2b:e0:c8:a7:b6:88:28:b1:98:
0e:ca:f4:c0:27:8f:76:87:a8:13:79:78:c2:58:9e:
a0:d2:71:bb:d9:4a:7a:13:86:69:4e:5a:0c:02:1c:
56:64:6d:e0:56:ab:0e:74:d5:45:ac:3d:12:69:dd:
68:90:0e:2c:73:6d:58:99:56:8b:50:f7:1f:0a:43:
fb:bd:ca:4b:ad:b5:0a:8f:7a:d5:0d:de:e7:1a:6e:
63:c6:d4:fd:70:fb:eb:8a:25:6e:32:47:7b:5f:75:
06:a4:ba:ae:94:bd:2e:2b:a4:b0:00:ac:4f:5e:5e:
30:50:31:4b:b8:f8:b7:35:ce:f2:5d:1e:de:ac:d6:
5e:3d:65:78:1e:fc:a1:80:58:80:f6:8f:cb:8a:eb:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:6D:0A:DF:8E:D6:4D:E8:EE:1C:D4:86:99:47:BA:F8:65:5A:B1
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d8:05:d7:26:51:c1:e2:fd:c4:c0:21:49:b5:f5:4e:57:2e:
4c:0f:65:f7:13:be:dc:a1:52:74:f9:e5:1e:6c:f7:f3:57:11:
93:56:0e:46:69:58:1d:fb:6e:4b:40:5c:31:0a:08:85:f7:64:
de:e1:6d:25:e7:16:86:5f:a8:3d:46:51:31:74:46:ec:f5:c7:
84:5d:9f:1e:91:52:5a:6d:cb:2d:33:73:f8:0a:7c:c7:91:81:
1d:d3:c9:c8:a0:59:4c:dd:68:ab:22:8b:61:49:66:41:74:80:
20:bd:23:85:ff:16:00:38:39:3f:b8:eb:cf:77:d3:8a:74:e6:
9f:9f:85:42:6b:f7:b7:ed:91:ac:91:42:6e:2b:46:1f:68:6e:
30:da:af:90:72:78:60:fc:e8:50:db:20:e2:23:b6:16:05:f3:
88:65:27:f5:6e:cf:9b:78:61:c9:37:bb:84:f4:6d:cf:f3:f8:
38:a1:f7:3c:24:d1:c6:ae:dc:ee:dd:5f:62:b3:6a:28:23:bd:
cd:c3:ed:f3:97:71:f4:82:09:eb:6f:c8:04:b2:33:63:4f:cd:
0e:14:ae:aa:05:18:2b:ec:e3:09:2f:5f:34:e8:db:4e:6e:75:
fc:0f:81:97:f2:57:d5:96:c6:dc:6f:ec:b8:da:8c:ba:df:5c:
43:a1:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:44 2026 by rpki-client