Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: 3p48SgEvsd++A8D/nqsg/1P8vScW0wpPuCI40mMIunI=
Subject key identifier: AB:64:96:E0:E3:FD:2D:0D:62:61:8E:EB:95:D2:ED:14:45:D2:0B:18
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019D38659124DC873CE03FCB93568489794D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: WRJ8KTF+GXPGJLkWweoV26Y3XJxHdKX2wEOyhS3KobI=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:91:24:dc:87:3c:e0:3f:cb:93:56:84:89:79:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=ab6496e0e3fd2d0d62618eeb95d2ed1445d20b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:50:16:7f:e4:c5:69:fb:a2:47:9b:07:92:
a9:54:23:35:c1:f1:12:96:18:23:d1:49:cf:18:08:
10:5e:a1:dc:e3:b8:4d:c9:84:07:d8:20:c5:57:0b:
a0:d1:21:96:50:b4:74:c1:6d:b9:02:84:d2:27:96:
ca:31:51:25:e1:05:9b:b6:b8:df:2c:87:36:b2:65:
fe:0f:1c:3b:22:ca:03:ed:c1:40:15:e0:cc:35:37:
8e:01:67:77:3e:27:85:79:cb:8e:82:ad:ee:cf:68:
93:d4:e9:67:c9:af:4f:a5:f4:20:5f:eb:df:21:0e:
0f:65:c2:aa:8f:10:34:9d:2a:f1:79:51:14:de:85:
05:50:fa:a9:a6:2a:8e:21:91:69:f4:4a:5d:88:58:
ce:b6:90:74:5f:66:ad:2e:52:ac:5c:b8:df:cd:e7:
2f:de:35:8f:b4:10:5c:c9:66:15:e8:5b:83:8a:f9:
19:67:4b:07:94:36:f3:41:9e:52:66:53:c2:e3:cb:
ee:b0:f1:84:9a:c2:7a:73:1f:64:25:b6:3f:67:b8:
eb:5d:46:8c:9c:13:aa:34:62:87:89:e4:9d:de:24:
18:75:2c:23:90:28:4e:ab:fe:aa:d2:2c:e7:8c:f8:
f0:12:36:f4:dd:16:95:09:08:b5:72:61:72:1c:47:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:96:E0:E3:FD:2D:0D:62:61:8E:EB:95:D2:ED:14:45:D2:0B:18
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:c0:eb:2a:4d:1c:ac:f0:fc:57:f8:e5:f8:bb:c1:cb:53:
30:e0:ba:f3:e8:ae:b8:af:34:ec:36:5f:24:23:4f:8b:c8:6e:
fc:57:a1:76:de:4a:bf:01:50:33:69:83:84:bd:07:27:82:21:
80:00:4f:0c:64:42:97:bf:da:77:c8:e2:10:43:62:6d:c3:b0:
40:5d:71:fd:47:e0:a0:e3:5a:f7:b9:fa:fd:7c:fc:2f:f8:bb:
61:03:1c:44:90:16:6a:bb:f0:bb:f0:35:a0:6a:9e:18:67:79:
0b:79:5c:ef:af:56:f1:ae:f7:09:4a:89:f2:5c:c9:ad:a6:7a:
d9:31:07:f0:60:c9:35:68:ab:10:a0:bd:9b:4b:22:ce:6b:67:
b4:97:ac:39:fa:f0:88:fe:98:71:d3:45:97:69:ce:d7:e7:99:
e6:c9:72:1f:c8:c0:af:6f:ec:3e:62:d6:4d:76:90:b0:1e:be:
73:a6:d5:70:45:66:56:7b:1e:dd:0f:4e:38:ab:92:76:96:63:
ba:23:13:67:be:db:e7:d5:1e:b1:a2:77:43:2a:cf:a5:31:43:
42:2a:5b:b2:93:bb:04:3a:58:63:f6:8c:ec:28:23:c4:1b:ac:
65:ba:53:47:62:fe:fd:ed:79:50:b7:bc:ef:b5:02:ed:b3:be:
69:62:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:52 2026 by rpki-client