Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier: 3umA+jC0YQKEGfeWJinYIHyPSMcr5b4a+oU5d9pOxAk=
Subject key identifier: 34:62:CF:A6:D8:5A:2D:4E:EC:CF:E5:28:AD:38:8E:F2:3F:28:A7:6A
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial: 019CACB530568C4A4C3D33DDB8E4C8748610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number: 07A3
Signing time: Mon 02 Mar 2026 04:01:21 +0000
Manifest this update: Mon 02 Mar 2026 04:01:21 +0000
Manifest next update: Tue 03 Mar 2026 04:01:21 +0000
Files and hashes: 1: 1-Xi8qsCjZ_PQpe6NJ6-T2dzR4GM.roa (hash: zBTP7ZR26XJl8LaBef5EoQw5nxBQyUiQLy+rkLHHEk0=)
2: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: HF8xt4cf5ityByor2Vrr5hYUW8nICfiD6adK9NZf6yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:30:56:8c:4a:4c:3d:33:dd:b8:e4:c8:74:86:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Validity
Not Before: Mar 2 04:01:21 2026 GMT
Not After : Mar 3 04:01:21 2026 GMT
Subject: CN=3462cfa6d85a2d4eeccfe528ad388ef23f28a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:38:3f:42:d9:74:79:3c:b2:97:fa:33:26:
7f:04:cb:bf:8d:26:9d:73:bc:19:47:8f:94:c8:95:
6f:b1:6e:72:06:28:59:9f:84:2e:97:96:ef:6c:b1:
10:dd:fd:bc:10:ff:6e:49:e8:85:31:d5:f4:43:f6:
48:a1:c4:fc:94:e2:6a:29:2e:1a:92:56:61:06:56:
2e:d4:3a:af:2b:34:f0:d6:96:66:a6:da:21:33:7c:
a7:32:b6:25:fc:50:54:0f:cf:67:f3:5c:14:07:69:
2a:3a:0f:d5:8e:f6:21:76:b7:52:6b:bd:6c:0d:c4:
51:2d:3c:c9:5a:1f:44:f9:14:93:34:23:df:4d:bc:
8b:dd:0d:9e:76:2b:9a:16:e6:2d:ac:5f:39:15:7a:
b4:02:e6:33:34:81:98:ad:18:d5:22:7b:ae:f6:3f:
ca:fd:1e:3e:da:be:06:e8:82:39:5e:c9:66:0d:86:
5c:92:a7:ba:dc:01:15:36:8d:a8:de:d7:cc:e1:0a:
d5:26:fd:09:f8:c2:f4:fa:e9:d7:1a:c2:91:7f:cd:
96:45:5a:ad:29:d4:aa:c5:e9:c6:a6:46:7c:c7:9b:
ba:9e:e3:fa:60:b3:5c:fe:2a:25:42:b5:56:66:fa:
c2:73:45:4c:26:08:07:0b:45:80:76:22:54:12:1e:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:CF:A6:D8:5A:2D:4E:EC:CF:E5:28:AD:38:8E:F2:3F:28:A7:6A
X509v3 Authority Key Identifier:
keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:04:bb:8f:82:2a:31:2b:db:4b:af:75:8e:b2:b5:e9:b8:ce:
26:a8:e8:fa:67:3d:82:16:a0:7f:0f:24:d7:c2:29:8a:47:bf:
d1:0e:f8:c9:25:0a:01:10:b3:00:5e:0b:7d:eb:2a:23:ee:b1:
f4:8d:5f:aa:77:6e:70:90:ff:dd:a7:d6:3f:72:0a:ac:8b:4d:
d5:f7:e1:49:81:fd:e7:e9:7a:9d:f0:3a:a7:f5:f4:28:de:68:
ff:a8:cb:c5:02:5a:d0:cf:72:d2:9c:9d:1a:5e:61:a4:83:49:
3f:8b:51:62:1f:dd:ae:55:3b:3c:5e:8b:48:fb:1f:3e:15:78:
0d:27:ed:2d:fb:83:dc:7b:60:9c:ad:cb:b6:72:c7:49:cc:2e:
1e:19:9f:6e:5a:7d:ed:e2:ca:ec:86:56:27:d5:cc:3e:00:b1:
90:ee:9d:7e:b7:99:c7:5b:3b:4f:a4:85:17:bd:e8:dc:b3:1e:
b5:1e:cb:d3:e6:38:aa:71:29:7b:c7:24:81:dc:d3:10:74:ae:
f3:a0:63:2c:0c:bb:76:e5:51:3a:c6:88:e3:60:96:63:52:a6:
39:95:42:19:35:d8:71:f8:3e:b9:d3:12:77:5b:35:73:20:a1:
da:72:6b:47:2b:59:c7:97:9f:83:35:a5:49:50:bc:75:11:48:
04:55:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:48 2026 by rpki-client