Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: U69ZcObGU612REyX0psG01jkT4doTNjGAhp54TTN2+o=
Subject key identifier: 9E:33:BD:3F:E1:AE:63:04:81:7F:C2:16:07:2C:08:67:EF:BA:B8:29
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019CF504CF2693603C0BA37F7BEEF81B86A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 01E3
Signing time: Mon 16 Mar 2026 05:00:58 +0000
Manifest this update: Mon 16 Mar 2026 05:00:58 +0000
Manifest next update: Tue 17 Mar 2026 05:00:58 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: JwgsOepIe2hi0FgDClz3lT5MP9IpxP1V6S/8IQMMFJY=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:04:cf:26:93:60:3c:0b:a3:7f:7b:ee:f8:1b:86:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Mar 16 05:00:58 2026 GMT
Not After : Mar 17 05:00:58 2026 GMT
Subject: CN=9e33bd3fe1ae6304817fc216072c0867efbab829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:73:23:d4:a7:33:d6:7f:38:93:68:3f:e9:
a2:80:88:bb:2f:e5:c2:13:2d:d7:b9:63:d5:64:7f:
00:e8:8e:18:02:b3:29:d4:84:bf:5a:5c:23:06:12:
03:ae:d7:91:81:a3:88:a0:78:2e:86:27:81:26:79:
d9:95:47:3b:48:8d:40:51:1d:23:a8:7e:f1:ab:ff:
90:14:cb:ad:55:ff:1c:c1:32:ac:03:34:41:48:b7:
bd:1e:be:95:23:6f:cf:8e:76:3e:65:5b:74:b4:d9:
2d:a8:e8:8f:e3:bb:73:18:61:c4:1c:73:6b:3e:c9:
45:7b:0c:65:e6:cc:69:18:56:77:a8:12:bf:32:98:
5c:74:ef:b7:9c:be:bf:f5:86:ab:c4:ae:b9:87:b3:
00:34:20:fc:cb:b6:24:de:4a:83:4c:c0:4b:4b:74:
90:05:ae:c2:ea:1b:f0:20:69:6c:26:8c:87:05:d4:
59:07:5b:80:d3:cb:5e:f1:44:d4:47:27:d1:30:f1:
4d:57:8e:7a:5e:b8:0c:8c:d1:35:cb:64:6e:f6:48:
77:0d:6d:f1:7c:a1:92:7d:d9:3f:d7:1f:02:a1:08:
3b:85:8f:a3:f3:b2:75:d9:95:4f:eb:39:dd:7a:da:
4b:e2:ef:fa:e9:45:1a:28:47:19:cf:28:d2:01:8b:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:BD:3F:E1:AE:63:04:81:7F:C2:16:07:2C:08:67:EF:BA:B8:29
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:63:fb:5a:e9:91:cd:8c:94:ca:a5:6e:1f:a6:47:34:63:
8b:85:14:39:3f:e5:d0:5a:2e:d8:db:66:4d:87:d2:f2:06:3c:
ff:20:32:07:f2:1c:33:b7:a6:3b:22:cb:6d:f4:85:0e:4d:85:
42:37:be:40:8c:9e:79:ba:01:9e:d8:3f:a6:95:37:a6:2a:53:
bd:c7:82:6a:7c:61:6c:4e:83:ec:ea:ca:19:8a:a0:e4:4d:dc:
41:ea:6b:fa:86:d8:14:bc:94:22:c8:63:78:ea:ac:02:d2:12:
33:1e:8a:3a:a1:54:cd:41:63:d5:8f:56:a5:1e:47:9b:80:39:
ca:b6:10:74:bf:50:ff:15:c9:96:47:36:4d:74:43:57:4e:91:
57:46:f8:b5:8e:cd:de:3f:52:fa:3f:eb:42:59:b8:a5:9b:67:
72:d3:8f:21:1e:04:00:b4:b4:cc:ad:be:4e:aa:7b:ba:ed:d0:
7e:3f:36:ef:dc:52:3d:6e:ef:8d:19:82:92:79:af:11:de:4e:
9c:67:a0:b5:68:93:fe:de:89:98:a0:7c:61:60:83:bd:3b:e0:
02:ea:1b:c1:62:85:f4:97:73:d2:d3:c7:9c:f5:c9:33:a5:58:
b2:03:19:87:ba:79:99:ba:bb:26:0e:23:8e:15:e4:5a:01:11:
26:75:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:50:54 2026 by rpki-client