Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: B93+7FkpRwpUw4/zMm2w1eCW2F+G7YAWxeyCHIzf3kw=
Subject key identifier: 37:21:3F:14:3E:25:12:45:C0:65:F4:F0:4F:49:FA:E1:84:F5:27:8E
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019CE3A2F1DFB61396E9913B20700429A430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0A28
Signing time: Thu 12 Mar 2026 20:00:32 +0000
Manifest this update: Thu 12 Mar 2026 20:00:32 +0000
Manifest next update: Fri 13 Mar 2026 20:00:32 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: kBnJebB46MsX1Ji9NqxQ5OwHzGqx2ykVk86RmxJwD8s=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:f1:df:b6:13:96:e9:91:3b:20:70:04:29:a4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Mar 12 20:00:32 2026 GMT
Not After : Mar 13 20:00:32 2026 GMT
Subject: CN=37213f143e251245c065f4f04f49fae184f5278e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:da:1b:fb:70:cf:bc:86:7d:93:63:b9:be:
c6:50:6e:22:c9:2d:93:37:ca:2c:0c:05:10:ac:86:
70:ec:e0:21:4f:fc:ac:34:18:3a:af:02:8c:da:d6:
0c:b6:bd:7d:64:09:3a:67:d0:38:82:ee:a7:ae:a9:
4a:08:24:4f:1e:44:28:a7:4f:66:e5:7e:c9:e7:c7:
36:e4:5b:17:1e:4f:7a:5c:10:cb:80:86:0b:3a:00:
f0:e4:c2:2e:a7:67:a6:f8:a7:ce:a2:12:d8:38:44:
ec:99:ed:39:44:82:c2:f0:ff:a0:88:82:c0:9c:21:
c1:0d:69:00:6c:af:3e:28:71:a9:f1:39:d1:84:25:
1f:ae:49:bb:54:24:f4:b3:49:fc:64:3e:a5:4c:2f:
1c:79:d0:f0:69:7a:2d:d4:4b:6a:d7:20:b9:35:6d:
ce:4f:08:4e:2c:95:b9:f3:fb:98:c5:2d:8d:db:8a:
70:00:0d:c4:e9:c1:e6:a9:48:a9:92:5d:4b:b9:a5:
bc:8c:8d:9e:f5:6b:6b:d8:d3:a4:cb:6c:74:26:c4:
15:0b:56:ec:c3:7f:23:93:c4:01:d2:21:b3:4c:de:
cb:7d:d4:29:b5:34:a3:76:9b:eb:94:e8:32:ae:ff:
9e:de:8c:6f:e2:22:23:ac:bf:80:72:d3:31:a5:3e:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:3F:14:3E:25:12:45:C0:65:F4:F0:4F:49:FA:E1:84:F5:27:8E
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:89:05:a0:77:c3:c4:2e:36:99:85:8c:e6:cd:0d:79:f6:ab:
ed:37:77:60:2c:d4:44:87:7c:ad:7c:0c:35:b5:50:36:28:8b:
3d:f8:d6:90:95:67:13:fe:6e:f5:48:96:c0:88:6f:fd:2c:a9:
88:46:69:6f:60:41:08:c6:22:fc:80:c8:d9:0f:8f:a0:61:a4:
49:6f:4f:a9:54:02:1c:fc:70:54:3d:90:82:27:72:73:4b:89:
cd:4c:ab:12:00:60:95:5f:72:90:69:fb:c7:c0:ab:d0:11:13:
c1:b0:d2:20:15:31:2b:58:3b:17:cb:61:42:f0:09:eb:a8:f8:
7a:75:53:6d:bb:8d:71:4b:15:64:be:8f:30:19:2b:67:b8:9f:
ab:83:54:9d:d7:30:a6:99:2a:69:a0:7d:e7:18:75:88:89:fe:
73:94:56:dc:37:17:3e:86:11:50:ea:d0:c1:8a:89:02:90:ce:
f7:e3:2a:0a:4a:78:d8:44:49:75:02:70:62:f8:65:dc:a7:bc:
df:e2:a4:91:31:95:da:58:c8:17:f4:42:ae:c0:0b:4a:48:81:
e7:5d:a6:2e:30:26:17:23:2b:9e:3f:84:f5:59:53:fc:b2:c6:
28:c0:a8:84:c7:31:79:c7:9b:4d:a2:42:0b:06:32:46:08:53:
66:ce:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:49:59 2026 by rpki-client