Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: QimF/hgVb42pb0FtComovsAm2wvFFne9+U+LIDCr8Hg=
Subject key identifier: 30:F6:A8:D1:AD:0D:28:24:5F:2D:80:46:78:78:CC:B3:C4:9E:24:2A
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 019D389C5D4D184ED92181389A62F454074B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0CEA
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa (hash: seOih4wjhJ6V5ThAImMQ9eV74z3GC26duBl8NYe046I=)
2: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: 5AwDm6aPIyKSlwf0Ct2+jSoR5a2fn8d+sCb+pkP+a/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5d:4d:18:4e:d9:21:81:38:9a:62:f4:54:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=30f6a8d1ad0d28245f2d80467878ccb3c49e242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:70:81:31:df:97:50:cb:cc:e3:07:a7:40:
12:50:8e:d1:21:4f:df:59:c2:40:06:c0:87:61:8b:
06:30:8d:42:7a:5d:83:a9:71:3b:9a:cd:7e:14:b1:
56:20:54:63:ae:a0:94:7b:db:18:4f:cf:d7:b5:80:
10:1b:1b:68:84:55:40:e7:3c:90:3c:ea:dd:22:a0:
f7:fc:f7:83:6e:79:b4:f0:0a:ef:59:de:dc:15:58:
fb:11:f7:58:c9:de:04:f4:ba:cb:14:56:e0:f4:5c:
d1:df:2c:4f:dd:ce:6f:30:71:2e:9b:54:40:d8:0f:
2c:91:dc:50:5c:6c:2f:72:b7:36:62:88:be:ee:db:
14:63:3e:e3:a7:69:35:29:77:b5:b1:9a:7a:45:60:
8f:93:a1:58:6d:71:c7:ab:98:68:0e:02:d4:47:cc:
c9:e6:1c:26:a7:c5:eb:91:28:f7:41:6f:8b:d9:1e:
ef:77:d9:53:43:33:ee:ce:04:96:39:ab:2f:b1:c6:
1b:ca:4d:49:fc:4f:25:56:9a:af:0f:dd:c1:45:a9:
ae:18:bb:d8:50:c0:26:26:ed:2a:34:02:fc:28:e6:
a7:f6:72:b5:f3:54:53:5b:9c:83:98:d3:79:66:98:
cd:f6:27:b5:10:91:4b:27:18:87:fc:5d:54:67:76:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:A8:D1:AD:0D:28:24:5F:2D:80:46:78:78:CC:B3:C4:9E:24:2A
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:1f:e2:c6:a5:64:84:50:34:f5:05:13:2d:1e:d0:f2:bc:
d6:1b:74:d8:cd:1c:90:00:f6:00:3f:5f:64:5e:9d:50:4a:7d:
c4:4b:e6:42:6c:28:92:be:1a:a1:ee:af:c7:a3:61:0d:a4:9b:
ee:df:aa:46:83:32:be:c0:66:c7:2d:fa:f3:94:dd:3b:82:5e:
1b:79:66:13:a9:6e:05:95:68:83:50:df:9d:cc:c8:9d:4b:48:
7c:cc:52:19:e0:46:d9:66:68:6f:07:a5:19:ee:1b:9a:92:67:
12:0d:98:9b:d5:90:52:1a:af:f3:d7:57:34:1d:40:2b:57:a0:
d8:28:dc:9e:9d:2c:0d:57:40:c3:e3:53:f3:07:a4:6b:1b:3f:
74:67:58:c0:21:46:a7:1b:d7:66:f4:47:ab:24:11:54:9b:68:
45:f2:55:db:88:30:0a:32:48:97:8b:53:be:f2:30:d2:8d:24:
b4:19:2d:e1:e1:d1:c8:22:32:14:28:7a:b1:9b:88:a0:15:57:
6a:c0:31:f9:3f:3f:5f:6c:b2:e6:58:60:54:e1:74:ac:0a:65:
8f:35:8b:d2:27:1a:0e:69:34:ef:2d:ef:4e:e8:a0:31:72:97:
99:32:f6:5e:44:96:b4:33:f8:2d:ca:ca:40:5d:51:91:20:fd:
7f:ed:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:53 2026 by rpki-client