Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: AeBN9sJOr2j+fmH2eO6/IlwZxyyQewzo+JfuhrImlpE=
Subject key identifier: 2F:4F:08:94:34:3E:72:9F:D6:48:98:39:8B:CF:25:89:FA:C3:28:AA
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 019CABA213523FE697D09415B4E614ED9078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0CA1
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: 1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa (hash: seOih4wjhJ6V5ThAImMQ9eV74z3GC26duBl8NYe046I=)
2: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: +a5C0c8pYmbnv9S2GEfe78Kpbt/5eDSGYqPIMvUTJe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:13:52:3f:e6:97:d0:94:15:b4:e6:14:ed:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=2f4f0894343e729fd64898398bcf2589fac328aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:8c:61:d2:0d:1d:82:c6:0e:12:11:28:3f:
78:e4:75:f8:e3:81:cc:81:db:e4:ff:29:c5:4e:1e:
d9:6c:05:e7:71:0f:3f:e3:8f:4a:37:68:ee:e2:2d:
71:e2:5b:69:4c:9d:53:d4:02:56:e8:23:7d:91:dc:
15:2c:1e:73:c2:f5:07:d5:8d:51:05:97:9b:a6:2f:
c5:30:eb:e2:a2:48:3d:33:19:f9:31:f3:c9:b1:39:
1b:b9:31:d3:cb:21:5a:65:a9:b9:ca:76:4d:80:c2:
e0:66:18:f0:5e:18:ef:43:bf:c2:f0:af:73:af:6c:
33:e3:92:57:f4:7e:18:e0:5b:b0:6c:c4:6a:90:79:
75:ce:a3:6c:ad:b7:36:df:fe:9a:45:cd:7b:ab:5e:
0a:f3:77:4c:e0:9c:b6:93:81:52:6a:3a:5b:31:6c:
61:30:01:9b:01:c9:77:55:65:f4:76:ab:f5:1f:58:
9c:81:57:ca:a7:2f:e4:a4:23:be:bd:cf:a1:ca:26:
ae:7e:0c:18:31:0b:62:4a:7b:5e:b5:11:8a:a3:99:
84:10:6a:96:84:88:4d:99:94:6e:54:5a:b5:9c:8e:
6c:d8:a8:ca:b1:dd:64:76:75:9f:2b:d1:d1:a1:6a:
a8:3e:7d:87:49:81:d5:ec:32:b9:22:ad:8a:9d:af:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:08:94:34:3E:72:9F:D6:48:98:39:8B:CF:25:89:FA:C3:28:AA
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3b:50:5d:90:9b:76:75:51:f5:90:cc:68:cd:24:19:72:8d:
96:44:6f:90:47:79:30:35:92:6f:ab:06:40:16:05:83:48:9f:
e1:0e:c3:70:54:59:7c:d2:e3:29:b1:a9:a9:63:98:de:d2:56:
fa:27:27:5d:28:fd:cc:2f:b8:4a:d3:c1:8a:ee:b9:a7:d5:59:
56:90:ac:59:f1:60:0f:5b:05:76:ce:9a:49:ac:b3:6c:35:ed:
eb:35:82:10:9d:80:e4:fe:fc:96:31:bb:45:1d:33:76:14:7a:
58:ec:5f:08:a6:71:93:66:9e:35:3a:ec:5e:b7:55:ec:eb:7d:
43:03:6d:84:f6:e9:9b:13:67:3f:e0:44:74:cc:6b:0c:75:73:
55:cc:a8:e2:36:16:af:73:f4:29:00:28:9f:9f:7d:e0:33:ae:
5a:9d:75:49:80:a6:12:09:7a:c8:e5:42:fa:80:46:38:b3:cb:
c1:27:78:0c:b3:18:72:f2:36:b2:2f:1f:99:74:07:88:90:62:
0f:2c:0f:f6:04:00:84:2f:95:1c:ca:07:af:b1:b2:49:cd:dc:
2a:3f:a4:9f:bb:e5:e2:f8:95:66:ba:15:05:ac:44:e7:64:20:
10:ee:07:a8:14:48:45:90:01:d8:ba:22:76:3d:72:17:b2:ae:
6b:d0:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:06 2026 by rpki-client