Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: VG4Vf1xNF0ZL10TFL+1mFw+74usC7MtmEQnv1E8Mx70=
Subject key identifier: 3E:0D:E6:02:F4:2D:26:59:2A:F8:44:15:E5:92:E5:42:50:0D:16:57
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 019CADFE5404598B13E0D3B96C344E4E0495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: D2
Signing time: Mon 02 Mar 2026 10:00:51 +0000
Manifest this update: Mon 02 Mar 2026 10:00:51 +0000
Manifest next update: Tue 03 Mar 2026 10:00:51 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: PXynFxt9C3FD0XNB1xSWphMeqpN//fmgfDhCeG5gw7Q=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:54:04:59:8b:13:e0:d3:b9:6c:34:4e:4e:04:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Mar 2 10:00:51 2026 GMT
Not After : Mar 3 10:00:51 2026 GMT
Subject: CN=3e0de602f42d26592af84415e592e542500d1657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:78:10:7a:55:56:6c:34:5a:9f:e2:66:ff:
98:73:c1:b7:67:8d:2c:ff:2a:16:28:03:f5:6f:6c:
19:01:ce:bd:03:d6:8c:49:5d:21:a0:64:a6:1a:17:
4c:39:3e:ff:d4:9c:f6:09:4f:30:b2:0e:bb:f7:c7:
fa:fa:f0:20:80:78:cd:66:59:a4:37:64:5d:4a:38:
b9:ae:99:f7:ab:ff:01:1c:c9:0a:b1:c5:ed:ee:60:
c6:cb:1c:97:8f:49:00:7c:16:dc:73:ba:a2:7d:fd:
70:62:4b:2a:7a:83:48:84:3a:65:ea:df:2d:a8:2c:
81:73:2b:96:c5:29:a5:20:73:ef:85:db:d7:93:d0:
16:af:de:f1:92:a4:5f:c5:99:f8:e2:7b:a8:ec:10:
15:d9:35:d7:29:9c:38:4e:80:3c:ee:ee:10:30:10:
e3:06:06:09:a8:94:d7:fe:13:08:8a:db:be:38:85:
b2:7b:10:35:4b:c6:4d:8d:15:8f:71:da:c1:32:6e:
f3:96:02:56:4d:e5:34:71:4e:78:e1:1f:d3:a3:e4:
e0:8a:62:45:5d:ed:cb:1b:f9:b7:d4:f4:34:e9:04:
48:cd:7a:3a:74:81:99:7f:9c:d5:8f:8e:df:34:81:
b5:b0:04:4c:55:49:79:28:ef:5e:53:1f:d7:d5:e8:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:E6:02:F4:2D:26:59:2A:F8:44:15:E5:92:E5:42:50:0D:16:57
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9c:11:6b:51:41:f2:30:68:cf:c3:d4:af:5b:e4:4e:cf:3c:
cd:63:18:f2:91:ee:75:a8:63:b4:ba:7e:19:ea:5a:d4:fb:2c:
7e:e7:0b:c3:51:20:c8:75:5b:40:98:d2:f7:0a:ec:a8:21:9e:
e9:95:95:3b:a9:c3:b2:0d:87:9a:4d:4a:aa:31:72:a8:3d:ad:
66:48:28:b9:ad:b8:44:a3:de:3a:c4:50:23:57:b1:b2:e6:3c:
20:9d:c7:4d:ef:2d:96:69:5f:10:e6:7a:fa:a7:62:52:ea:70:
0e:c6:08:90:4d:7f:4b:e2:c6:46:31:8c:d6:11:7b:4d:87:9a:
30:66:7f:6e:da:4e:7e:47:cd:05:03:de:9c:d3:a1:df:e0:f5:
5b:ab:a2:c2:65:7d:9d:87:1e:a5:19:55:52:eb:f7:db:4c:c7:
e3:0b:a8:b4:9c:7f:9c:05:ca:bb:f0:5b:2f:76:1c:79:99:92:
fb:40:03:9e:40:ed:27:5c:31:3a:41:05:c5:02:5e:2b:60:3c:
d4:0d:e8:21:be:0a:ab:8a:50:af:d9:89:66:3c:25:a1:b4:6f:
37:f5:05:5c:1e:7e:bb:4f:ef:1d:cc:00:9c:3f:71:1f:54:d4:
f4:74:b1:7a:8c:2b:8c:6b:f7:19:35:ec:4b:7a:0e:5d:2a:a5:
2c:3d:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:12 2026 by rpki-client