Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: 1l15O4BnAosBhaX0RUo8QQ6KFFrat0xK7SKn4ParlRU=
Subject key identifier: 5B:25:8B:47:5D:56:10:1D:A9:5C:6A:63:DC:37:B1:CF:EA:B3:4E:09
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 019D38D38F321C2408A3DCD8B3CB0AD2C454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 0BE4
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: s0tme+IS7hYGLnYrNDbIe+G5xVtEhfmS5MLoMW436Tk=)
2: U492z7CM5jVf-t4QvcE9_urW2ow.roa (hash: /jlkTTrD37FHNPsTnKi/FAkBYiZarctFzNrBmLp88kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8f:32:1c:24:08:a3:dc:d8:b3:cb:0a:d2:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=5b258b475d56101da95c6a63dc37b1cfeab34e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:07:9c:20:71:f1:be:25:69:38:71:7a:39:
80:3a:f9:16:a3:17:69:a2:b2:e9:94:a4:81:6a:69:
93:94:ac:0b:bb:93:e7:8c:b8:59:17:6a:ca:6d:fc:
a8:30:0c:0b:b7:ae:f7:2c:cb:f7:66:77:22:1a:00:
00:83:bd:a4:72:c9:2c:de:97:d6:e4:01:0d:49:15:
70:b0:43:a2:ca:93:d9:8e:7f:36:74:d6:91:dd:27:
b9:c4:94:d5:be:39:51:62:42:0c:80:ad:8d:e6:d7:
17:64:36:7e:c6:62:1b:a8:f3:39:0c:ec:19:51:5b:
36:c8:32:e4:82:c2:36:ac:e2:78:5d:5b:63:08:55:
12:be:3c:e0:8f:30:ed:01:b3:a8:53:eb:2c:8b:79:
5f:00:fa:aa:51:df:b4:ba:f4:37:b0:fb:8b:a4:b2:
a4:99:9a:6a:c8:8f:9d:ee:a8:89:13:bd:29:6b:15:
2c:50:f5:b6:ca:4b:d7:fe:b1:b9:51:b5:6d:52:c0:
7c:19:b2:ea:79:85:82:9a:d7:6d:fe:6c:c6:72:de:
d1:25:ab:23:72:ba:89:fd:1a:66:51:ce:2b:ab:d2:
43:46:5a:ce:96:16:eb:6f:db:f2:fa:10:ce:9c:60:
81:04:ac:98:60:4c:76:3b:d4:19:9c:92:ac:f0:05:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:8B:47:5D:56:10:1D:A9:5C:6A:63:DC:37:B1:CF:EA:B3:4E:09
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f6:ef:6d:d5:86:07:58:8d:0d:27:a7:49:72:e9:68:ed:55:
10:ba:50:90:b2:0d:d0:86:46:7f:48:af:67:e9:c0:66:8f:35:
47:0f:40:ac:9e:69:ac:7c:1e:e8:3a:10:a7:e4:7b:03:1e:77:
ba:63:2b:41:67:95:c0:78:8d:eb:5f:3a:83:8a:72:1b:d2:50:
56:06:29:60:2e:74:ac:ee:1c:b0:6c:8e:97:32:2b:e1:3f:11:
f0:39:b2:91:db:bd:3a:c6:53:e9:ec:56:71:87:f5:db:aa:00:
5e:7e:de:0c:2d:f2:04:3d:9f:49:33:31:f4:02:e8:f5:a7:87:
67:6d:00:90:a3:4d:6a:b1:16:72:2f:41:55:d1:14:5c:ed:2f:
39:72:3f:62:27:92:3f:e1:7e:97:8e:b1:f2:58:0a:49:bf:89:
43:60:28:48:6d:fc:ac:81:fd:60:dc:c4:f3:eb:30:0f:5d:35:
64:db:c4:cc:a0:ac:0f:9a:ed:b1:95:9f:2a:06:78:df:26:10:
75:06:bd:bb:c2:c0:2a:9d:cc:93:0c:d0:21:26:c7:c0:f8:34:
d8:e3:fe:f8:51:90:aa:b7:14:f0:59:37:8a:eb:d5:34:c6:13:
dc:80:0d:e8:94:65:85:b0:aa:88:a3:7e:03:7f:a5:a2:fa:62:
19:e3:05:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:12 2026 by rpki-client