Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: YCzJpIMvhg4z+6yVaoKJvOBa05YIOqwnvaOySLSpYKc=
Subject key identifier: 32:B7:B6:55:5E:40:A1:CA:7F:13:8D:32:82:17:16:26:4E:E1:CE:27
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 019CAAC6D3B3F886D9F52C4D0285F79ED765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0E11
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: vnjyTdTXZYkfDXta0Lceb0RRnK/OOpUFWk3fQyMjeSA=)
2: ftokh3mUyVZGh6yXd6ouZ8YIGkQ.roa (hash: 4Ym0wTobeB1H+GWUNtcZZO3RjaiOd4ZAgsLU5dSiWcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d3:b3:f8:86:d9:f5:2c:4d:02:85:f7:9e:d7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=32b7b6555e40a1ca7f138d32821716264ee1ce27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:0b:59:96:78:0b:3f:7a:ca:07:ee:ce:ef:
e1:34:27:75:81:56:f4:d7:57:b9:16:d9:ac:e6:fe:
1b:66:c6:ef:01:8d:d0:08:c4:78:a7:39:e0:e2:af:
2c:06:83:d7:f6:b4:90:12:22:ed:05:56:4b:2b:61:
0c:dc:e9:4c:48:c9:bc:0a:f9:f5:5f:74:c7:ba:87:
c7:6a:fc:56:38:ed:ae:55:9c:b0:fa:48:aa:86:3e:
f2:59:77:1f:95:49:12:0b:a4:ea:d3:8c:d2:db:7f:
8f:d0:a5:07:97:00:ed:a6:61:f8:b9:e0:98:e1:80:
ec:db:0f:7a:4c:81:c7:03:f9:74:17:41:6a:79:dd:
09:da:11:a4:eb:60:6e:f5:64:78:3b:dd:6c:56:fc:
4f:61:95:74:b6:2f:5e:a0:4b:b5:2b:b3:d0:e6:ea:
fa:7b:8a:4c:80:d4:bd:8d:fa:db:ad:51:49:3a:50:
b8:72:35:8e:46:fb:f3:dc:cc:0d:3e:32:11:fd:d5:
54:ef:6d:b2:a9:42:e2:a5:1a:e2:80:a7:fc:c5:ba:
a8:c2:1a:45:a6:50:43:c7:f7:95:33:54:a1:19:cb:
9f:da:56:3a:73:72:a1:bf:e4:8e:9f:c7:d2:4c:2e:
d9:1c:c8:64:33:83:a0:66:84:56:f7:f0:44:be:ff:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:B6:55:5E:40:A1:CA:7F:13:8D:32:82:17:16:26:4E:E1:CE:27
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c4:3a:77:17:19:49:ae:8f:69:e2:11:d7:aa:fa:c9:3e:3a:
89:44:ec:ea:70:0c:b0:f8:d3:e4:35:9f:61:11:41:a2:eb:81:
b9:13:0b:41:a5:36:2f:30:c5:e5:fa:c0:65:19:99:9a:00:64:
0b:1a:b2:8d:01:db:1b:11:cf:9f:e8:51:36:f5:f0:be:20:6b:
3c:56:73:cd:58:c0:51:ca:eb:02:30:aa:66:e0:7c:7d:ae:83:
80:28:e5:13:ad:7d:64:81:a5:cd:99:ab:e5:9a:9b:e1:3a:6f:
b9:38:55:0f:7f:51:8f:fe:d8:6f:81:f1:20:0c:88:40:c0:2d:
cf:80:cd:2c:1e:b6:1c:f3:07:c0:12:c4:0e:e9:89:93:a8:83:
00:94:4c:c0:69:b3:68:50:8e:c0:2f:ca:c0:15:48:f0:50:6f:
12:72:5c:52:90:49:ea:d0:73:71:26:67:99:d4:1c:47:ce:1a:
d3:5b:48:73:a4:92:11:bd:34:4d:30:93:eb:e8:de:15:7b:8e:
f6:80:70:f2:87:6d:69:06:a6:93:6c:e3:ce:fb:86:79:03:82:
eb:81:28:1a:a7:22:ac:0e:1d:a5:e8:b2:24:6b:a5:21:8b:a0:
3d:af:44:e5:43:f0:7f:52:b8:ce:76:b3:3b:f9:08:b5:32:12:
4c:d4:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:41 2026 by rpki-client