Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: Gq82Jd0Fx56TgajGhoyrpjOI7/YVVDUmDrtKlIfY0yE=
Subject key identifier: 7F:BA:10:87:A8:AE:13:55:89:54:14:12:A5:5A:1D:23:B6:7C:CC:5B
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 019D3865FCE3F72087306C35D418E10DB01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: xkqMAMOCcUH1QD0OI8yf3o2VH3QQW4ZVeeA1Kdz2uhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fc:e3:f7:20:87:30:6c:35:d4:18:e1:0d:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=7fba1087a8ae135589541412a55a1d23b67ccc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:71:2a:db:6d:1e:0e:63:33:2e:02:02:ab:
a8:69:0f:97:8f:50:e7:75:69:25:ef:4d:aa:17:a7:
95:bd:ab:98:69:06:65:3b:d1:7d:10:07:0d:57:91:
83:1b:da:c1:f3:2b:4c:cc:f8:15:95:5b:0f:51:53:
81:7e:8b:76:f7:a5:59:37:a9:c6:1f:53:73:d5:de:
3c:d2:d6:6c:ab:76:1d:c3:51:0c:b9:a3:48:80:1a:
33:37:71:a0:90:3b:b6:6a:8a:cc:4b:e2:bc:d9:dc:
80:53:95:70:3d:ae:dd:2a:38:71:63:71:9d:4e:43:
02:b1:49:3c:37:19:64:7f:61:2a:77:ad:1e:7c:c0:
8c:45:bf:f8:ee:53:a0:96:d5:ae:f0:6e:85:83:22:
5d:10:a2:ae:9c:b3:22:e0:53:97:6d:fe:ad:52:92:
72:a5:29:d6:f7:fc:fd:08:3c:3e:61:bb:14:a8:1c:
fd:6d:77:22:17:3c:50:87:cb:a6:c9:4c:76:2d:e4:
8e:e9:ee:3b:5c:52:4e:20:9f:e9:62:0d:cc:f1:e3:
12:00:59:52:3d:5a:bd:20:9c:f7:0a:f6:ee:ba:9b:
5c:ce:19:1d:c0:01:81:ec:be:5c:93:ca:e6:4b:2f:
f0:ce:4b:90:35:a8:32:30:20:51:b9:06:02:fa:3d:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:10:87:A8:AE:13:55:89:54:14:12:A5:5A:1D:23:B6:7C:CC:5B
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:0f:21:4f:10:ea:a9:dd:1a:61:54:95:ac:f9:b2:f8:d0:
ea:d9:17:59:8a:f2:ed:3a:4d:36:d4:b0:2c:3a:7a:39:c6:e9:
90:c8:63:ec:ce:87:44:97:22:8d:c5:8d:27:21:24:d3:dc:cc:
66:00:72:6b:b3:f1:41:06:f5:38:6a:2f:0b:8a:ef:ce:8f:68:
dd:f5:93:81:dc:3e:a4:de:7a:4a:1a:72:ec:26:05:17:77:f7:
47:7c:80:05:d0:20:f9:21:09:f8:18:dc:f4:24:84:dd:a7:cb:
e2:29:37:4b:22:61:a0:24:ce:b8:b9:a0:80:52:d2:c8:5b:52:
da:8d:9c:33:08:41:a8:08:e8:9c:60:3c:c2:ec:d3:10:a3:7e:
86:26:61:5d:e8:d7:81:f4:aa:d1:bf:30:b3:c2:31:01:8e:aa:
52:99:f4:b1:9a:81:ec:21:ed:b7:76:af:34:91:c8:1c:a9:50:
bf:51:09:02:ac:dc:5c:73:72:8f:9f:0a:2b:f1:44:fc:82:db:
3e:0c:20:98:f8:72:57:19:ac:b6:29:b7:62:72:21:c3:59:f2:
98:13:32:96:0c:b5:06:7a:1b:7a:1b:9a:74:ac:e8:22:0e:7e:
4e:1a:e4:53:d4:37:25:f2:72:67:56:5f:75:30:d6:07:b9:cb:
b6:2a:9c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zfzj9yCHMGw11BjhDbAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNGFhYmJmYWI5ZGU3MTI2YjdkMTE5ZGI1MjRkYTQxMTFm
MDRhZmUwHhcNMjYwMzI5MDcwMTQxWhcNMjYwMzMwMDcwMTQxWjAzMTEwLwYDVQQD
Eyg3ZmJhMTA4N2E4YWUxMzU1ODk1NDE0MTJhNTVhMWQyM2I2N2NjYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtotxKtttHg5jMy4CAquoaQ+Xj1Dn
dWkl702qF6eVvauYaQZlO9F9EAcNV5GDG9rB8ytMzPgVlVsPUVOBfot296VZN6nG
H1Nz1d480tZsq3Ydw1EMuaNIgBozN3GgkDu2aorMS+K82dyAU5VwPa7dKjhxY3Gd
TkMCsUk8Nxlkf2Eqd60efMCMRb/47lOgltWu8G6FgyJdEKKunLMi4FOXbf6tUpJy
pSnW9/z9CDw+YbsUqBz9bXciFzxQh8umyUx2LeSO6e47XFJOIJ/pYg3M8eMSAFlS
PVq9IJz3CvbuuptczhkdwAGB7L5ck8rmSy/wzkuQNagyMCBRuQYC+j1zeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+6EIeorhNViVQUEqVaHSO2fMxbMB8GA1UdIwQY
MBaAFEBKq7+rnecSa30RnbUk2kER8Er+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYt
NzFhMjdlZjgxNzg2LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYtNzFhMjdlZjgxNzg2
LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOsPIU8Q
6qndGmFUlaz5svjQ6tkXWYry7TpNNtSwLDp6OcbpkMhj7M6HRJcijcWNJyEk09zM
ZgBya7PxQQb1OGovC4rvzo9o3fWTgdw+pN56Shpy7CYFF3f3R3yABdAg+SEJ+Bjc
9CSE3afL4ik3SyJhoCTOuLmggFLSyFtS2o2cMwhBqAjonGA8wuzTEKN+hiZhXejX
gfSq0b8ws8IxAY6qUpn0sZqB7CHtt3avNJHIHKlQv1EJAqzcXHNyj58KK/FE/ILb
PgwgmPhyVxmstim3YnIhw1nymBMylgy1BnobehuadKzoIg5+ThrkU9Q3JfJyZ1Zf
dTDWB7nLtiqcNA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:50 2026 by rpki-client