Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: meZIN3CtTTq9vtC7TkifGkQe+43apaImur3xKLEElkU=
Subject key identifier: E4:98:28:97:DC:24:11:42:B4:22:A3:C7:FB:AA:1A:6E:B9:89:8B:AE
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019CAD5975F05D81FC07088B590D7DAF863F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 0612
Signing time: Mon 02 Mar 2026 07:00:47 +0000
Manifest this update: Mon 02 Mar 2026 07:00:47 +0000
Manifest next update: Tue 03 Mar 2026 07:00:47 +0000
Files and hashes: 1: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: U4iT3mBdSrrCutQioEfjjiz6uW1qRthBcf4nrSdzkQ0=)
2: arLL-dX7EezUxnhpPmYA6Z1bdh0.roa (hash: /QmgKDALaBJxjzH0fH/pX9bzBt4U5Cyo5O5w9+AYU6U=)
3: odNrW4lU42BAvPE84otnwCnAcjo.roa (hash: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:75:f0:5d:81:fc:07:08:8b:59:0d:7d:af:86:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Mar 2 07:00:47 2026 GMT
Not After : Mar 3 07:00:47 2026 GMT
Subject: CN=e4982897dc241142b422a3c7fbaa1a6eb9898bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:82:0a:bb:f6:02:e4:19:e5:17:78:24:83:
37:69:a3:89:ae:fb:9f:35:3a:37:a1:19:6f:a8:db:
82:65:14:a7:ea:71:5f:a1:a6:24:63:dd:1f:f5:f1:
de:01:dc:ec:f4:e1:44:bf:f6:2c:9e:51:35:4f:bc:
6d:1f:db:c2:3a:13:13:59:79:05:91:ac:68:4c:61:
be:7c:08:7a:3d:57:c1:ca:2a:67:52:f2:d6:e8:40:
78:ae:3e:fb:12:40:65:f2:0a:f0:49:d9:84:d9:27:
6f:79:4c:4e:63:2e:49:7a:d3:a8:17:ad:2c:11:81:
2c:77:0a:62:e1:b6:35:a9:45:d1:e6:db:56:3a:d6:
6c:6d:78:d1:a4:30:cb:51:45:33:34:ab:72:ae:22:
cc:ed:73:21:f1:cd:a7:57:ce:21:c3:ee:bd:10:c4:
11:d8:05:53:b0:8f:14:a6:67:81:1f:b0:aa:bc:7c:
d5:a8:09:ef:9f:3a:a3:41:06:6f:d3:f2:0b:c5:aa:
79:ed:db:20:7e:82:50:af:41:e4:a1:13:5e:a4:81:
92:be:ef:c6:a2:0e:2e:cd:2a:9b:1b:ab:e7:be:e6:
98:8e:ba:99:4f:75:2d:a8:58:16:b3:0a:13:d2:a2:
73:1f:b4:b9:d6:36:44:d8:84:bf:88:91:65:30:8a:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:28:97:DC:24:11:42:B4:22:A3:C7:FB:AA:1A:6E:B9:89:8B:AE
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:3b:52:58:47:9a:1e:3f:25:34:5a:7b:b1:e6:07:64:17:
3a:49:0f:ff:07:ac:d1:c3:a5:af:ab:08:ad:9f:b5:4a:fc:75:
0f:b7:58:99:6c:f7:c9:3e:d4:21:2f:a9:b1:2b:40:23:58:f0:
13:de:2b:4f:ef:8b:6c:b7:24:e5:13:96:7d:dc:5a:c5:61:f9:
a6:cb:90:50:1f:1e:22:e7:ce:b5:24:b1:4d:aa:84:11:d6:bc:
0c:0e:37:5f:b2:a2:77:95:0a:51:86:87:11:03:d6:1c:32:91:
0b:ba:33:10:c5:52:04:31:0a:ee:62:30:d8:37:cd:5a:e4:71:
09:ce:a9:43:f5:7c:80:33:1c:2f:87:73:5d:bf:15:3f:42:23:
78:66:0d:f0:b1:af:c0:84:78:12:55:44:f5:c2:98:15:e4:a6:
e2:d7:24:59:9a:b9:d5:f2:e7:67:5b:3c:e8:8b:29:a0:1e:0e:
ea:c9:69:38:13:a7:c2:20:1e:8a:2c:82:34:37:ec:96:29:4d:
d0:78:53:f1:3b:cb:9b:06:f0:9d:76:d9:88:02:9b:1e:29:2e:
3d:15:01:d4:be:49:fe:67:91:68:9e:bc:4f:a9:b9:c3:d8:33:
1e:35:d5:52:6d:93:f7:2c:3f:88:b7:0e:85:34:b7:1f:80:09:
e5:d9:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:27 2026 by rpki-client