Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: JsuhuxG/nw8lUBRfcq9RJ7lrYi9In8g3Sj5kY2tRyQs=
Subject key identifier: 9D:68:2E:23:87:40:BC:F5:AD:84:23:51:2F:BE:8C:75:47:11:4D:F0
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 019CAC102A5B23D8491BF980870C781CCB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0B67
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: jaAywCn1Q3EmA3mCeX189pz+oN/UuTLHgFmgUB17Zlc=)
2: Tky4vnXZioTC1TXQq96JWTokgHg.roa (hash: aDRCWx0v8/LaP/gIfUVdK0QiOW0vds7flVFVgoIFu/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2a:5b:23:d8:49:1b:f9:80:87:0c:78:1c:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=9d682e238740bcf5ad8423512fbe8c7547114df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:8d:4f:e5:84:45:0c:30:6b:b6:a9:36:05:
0f:ba:e5:dd:43:00:fd:c5:0e:1c:ee:d7:0c:38:da:
e3:d8:a4:9a:52:11:12:49:cc:0d:55:f4:75:9b:08:
63:61:74:d0:9e:e2:e1:a4:e0:c6:01:b2:39:8c:ff:
87:0c:79:58:33:8d:d6:9a:f7:97:3e:8f:16:0b:5f:
b7:fc:e3:5a:9b:7d:6a:7b:68:c2:b9:4a:86:49:c0:
cb:86:93:83:02:a0:f2:db:22:3c:bc:03:8f:78:9c:
66:d2:fa:f0:f5:2f:8c:d1:b8:4d:ce:aa:32:a4:4b:
89:7f:48:cd:fb:90:81:2f:29:22:be:1b:2f:ec:99:
de:eb:1b:96:6a:ac:18:40:bb:e2:5c:3e:ac:08:bb:
ea:7a:b6:df:1d:08:e7:55:af:2d:f1:0b:4b:a1:96:
16:d3:fa:d5:f7:87:45:08:35:43:4f:44:de:22:04:
59:b9:d5:db:a4:10:59:0f:da:22:81:4b:fa:b0:bb:
81:05:d6:bb:5c:23:cc:cb:d8:7c:92:56:e8:da:eb:
0e:09:6f:fd:cd:b3:79:ca:45:c8:9c:18:14:5f:92:
46:3e:a9:b7:11:00:7d:02:66:3f:1c:71:c9:35:37:
2b:10:58:51:ce:ed:b9:df:d5:cf:53:f6:96:57:21:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:2E:23:87:40:BC:F5:AD:84:23:51:2F:BE:8C:75:47:11:4D:F0
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cb:70:07:cb:33:17:65:7c:05:47:c0:eb:03:be:fa:eb:62:
58:7e:f5:15:ec:a4:41:0c:72:eb:93:4b:3d:51:ff:9d:f1:c6:
aa:a9:ce:3f:f0:97:a2:c4:d1:2b:b3:7c:53:4f:dc:01:10:6d:
c9:fb:ef:a9:cd:83:ce:82:6a:cb:fa:42:73:cc:65:0c:a8:bc:
ad:01:70:11:5d:ec:1c:52:a4:5f:d9:72:7c:64:db:cd:ca:fa:
70:ec:1e:a1:b6:44:f2:b1:ae:c8:a5:4c:98:0e:4b:1e:43:c7:
b7:23:fd:2d:80:84:b6:6c:a5:60:e5:32:5b:31:12:6b:55:f6:
9d:b5:3b:6c:c8:83:a2:e3:89:da:fa:73:fa:cf:51:4c:15:1f:
9d:b0:1f:a0:32:38:1a:cb:09:74:c8:d1:25:0b:16:00:7e:e3:
1e:b3:da:b4:76:41:bd:dd:3c:d5:85:b7:03:9e:39:3d:ef:c9:
0f:78:63:97:57:0c:c4:9b:f8:ca:dc:d4:7e:87:0b:1e:8e:e9:
70:7a:70:e7:1d:80:57:8a:4f:a4:8e:b1:1d:86:5c:b5:18:85:
de:ac:70:ff:7f:57:ff:8b:5a:76:ae:78:5b:00:d9:ef:83:72:
a6:cc:0d:f4:0d:cc:59:bf:0a:26:af:06:30:46:89:03:43:e3:
e1:9a:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:30 2026 by rpki-client