Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: MpPeWC//uxxVi6j3lPEGrbId46SMtOoza9PQowKov34=
Subject key identifier: 97:9C:70:EE:51:56:C5:D6:69:8F:D1:B3:8E:DE:B5:82:86:4C:57:60
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 019D3A8AFC1BBC960D6B1B5C0F69CFD807AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 21
Signing time: Sun 29 Mar 2026 17:01:20 +0000
Manifest this update: Sun 29 Mar 2026 17:01:20 +0000
Manifest next update: Mon 30 Mar 2026 17:01:20 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: 40bzfEcHUFsdgZUZBNm+OBbyvREKgUkRi+v5/2aeEqc=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:fc:1b:bc:96:0d:6b:1b:5c:0f:69:cf:d8:07:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Mar 29 17:01:20 2026 GMT
Not After : Mar 30 17:01:20 2026 GMT
Subject: CN=979c70ee5156c5d6698fd1b38edeb582864c5760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:ae:24:9a:77:32:fd:22:04:04:81:79:02:
27:5f:a7:16:c6:97:69:72:91:c1:93:66:c5:53:78:
58:51:98:bb:32:c6:85:13:10:8e:09:5b:9c:33:25:
17:05:7f:3e:0c:4f:46:73:1d:d3:df:22:43:36:18:
67:c9:bd:7d:7f:0f:32:ca:ef:08:96:be:d5:77:46:
1c:cd:81:81:b0:98:9b:4b:03:5e:ea:ff:e7:15:29:
f3:67:c7:e1:dd:03:b4:75:48:55:c7:95:a0:e5:5e:
46:76:99:07:68:03:99:b8:8b:b2:00:5a:9b:df:6b:
ed:e9:de:b8:28:95:5f:69:bc:fc:fc:17:97:a0:6e:
f4:6c:ad:b8:f1:a2:c3:9f:0f:5f:4d:01:71:29:87:
bd:56:3e:8e:61:56:86:32:bf:e7:e6:8a:5b:54:ee:
22:f4:3a:b9:65:f4:a8:18:82:67:33:bf:c6:34:7a:
57:2e:8e:d2:52:86:41:01:7e:4d:3c:f6:b4:d6:bd:
07:38:95:5a:7a:18:0b:be:d6:61:be:cf:b1:bd:8c:
ef:7e:2d:e1:95:87:7c:ec:05:1a:d2:bd:56:c4:3f:
f6:a7:46:fb:b4:dc:bb:a7:93:7c:04:66:d3:15:31:
d0:ea:04:b4:92:87:97:a8:0b:fc:61:8b:71:58:4b:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9C:70:EE:51:56:C5:D6:69:8F:D1:B3:8E:DE:B5:82:86:4C:57:60
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e1:f4:43:c0:c8:06:34:26:4c:a9:11:76:6a:37:c7:89:68:
f6:fa:c1:fc:5e:23:e7:a1:ad:75:10:57:de:8c:09:0b:d3:64:
1f:1f:74:c4:10:49:66:32:24:0e:4b:4e:d8:be:a5:71:bb:ee:
2d:d8:de:c2:8e:55:a1:37:df:55:85:6f:0f:b5:e8:3e:05:db:
41:9e:02:70:be:14:44:17:bb:a7:34:4f:e4:f3:0d:b5:69:18:
9e:26:c4:d2:17:b1:5e:94:f6:9d:eb:6f:21:49:ab:6a:4e:b3:
39:2f:37:d4:f8:19:c9:2b:06:b6:e7:86:b4:88:92:33:1d:46:
2e:18:f0:0a:71:80:b3:0a:c2:0a:d5:c5:e1:28:80:72:53:40:
28:1c:e6:66:c0:60:fb:57:13:3e:f0:67:7c:30:6a:5f:1a:c2:
c5:85:71:6d:a3:4e:05:7c:7b:13:66:fd:32:25:79:72:e7:b6:
30:bd:49:47:b1:78:14:97:58:25:45:59:50:f9:f4:62:d6:d1:
84:f5:23:97:6c:0c:77:19:88:90:10:fe:f6:0c:40:22:8f:1b:
ee:3f:a5:1e:59:5b:2e:62:1e:ef:30:ac:2e:46:56:89:ff:31:
c4:f1:df:9f:73:e5:91:a7:9f:08:26:11:81:06:b1:db:26:bc:
37:52:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:31 2026 by rpki-client