Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
File: QZTZ3em51VD_NJfkNoP2iA1AMyM.mft (raw, json)
Hash identifier: fR/VtdpDQtjTiHr0nVHfu8Vq+zIkfPOsmIzQu6P6WL4=
Subject key identifier: FC:D7:D8:90:B6:17:90:C7:A9:64:1A:B9:CF:B4:7D:2E:51:52:EE:DD
Authority key identifier: 41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
Certificate issuer: /CN=4194d9dde9b9d550ff3497e43683f6880d403323
Certificate serial: 019D382E432D7D82CA4BBF2A7C285DC14390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
Manifest number: 013C
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: Mh7Uh2yrZuE879DdxuGlIe2mllQ.roa (hash: gtl/gNOgRhihO/g/958+G5u3E+/R03DdhrHrLkoU1QA=)
2: QZTZ3em51VD_NJfkNoP2iA1AMyM.crl (hash: qizZphUfHr3IlcpVzVn0Ar5Qt6QJSOdHlHGUBXGpT8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:43:2d:7d:82:ca:4b:bf:2a:7c:28:5d:c1:43:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4194d9dde9b9d550ff3497e43683f6880d403323
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=fcd7d890b61790c7a9641ab9cfb47d2e5152eedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:ab:e8:3d:cf:36:81:13:3f:14:ee:b6:b2:
5c:be:4f:0b:7e:e9:d5:ac:f8:1e:a4:d9:35:3c:a5:
06:bc:e1:97:36:da:88:f5:ad:e2:8b:1e:21:e7:fe:
6a:a4:49:71:f7:57:0d:97:42:3a:56:57:24:95:79:
1d:6a:07:dc:e4:9c:93:29:13:65:69:35:19:0a:a9:
1c:7b:5b:28:b5:fd:33:9f:ac:9d:ee:c9:d1:31:c8:
b9:b5:a4:b9:db:d8:d2:39:60:22:aa:03:20:4a:65:
eb:a9:02:4e:a2:4d:78:a2:8a:7e:42:86:03:c8:c3:
4d:e3:9e:86:d6:41:7a:86:11:a0:a4:ee:dc:d8:20:
8b:73:ef:03:1b:e8:e4:99:1f:9a:09:f1:68:b2:bf:
be:cd:b0:57:f0:55:9b:8d:73:f3:1c:a3:57:4e:ed:
ed:be:16:88:4e:e8:21:17:85:f6:7f:32:d1:8a:32:
79:14:6a:e2:9a:1c:a8:09:ac:b9:96:f3:f9:94:ab:
bf:f2:a4:7b:c1:a4:8d:4a:22:68:3d:80:c5:dd:ac:
35:eb:20:49:80:17:73:c7:f4:b4:e8:c5:b2:72:0f:
db:c3:b3:e4:71:9c:1e:00:ab:53:56:57:1a:bc:43:
8a:43:69:24:93:f4:6c:71:80:63:9d:32:ab:16:ef:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:D8:90:B6:17:90:C7:A9:64:1A:B9:CF:B4:7D:2E:51:52:EE:DD
X509v3 Authority Key Identifier:
keyid:41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d9:5e:27:dc:78:23:f8:88:a4:bd:31:5f:e0:8f:42:d8:08:
da:b0:31:b9:14:a7:a4:0c:19:dc:d6:be:c9:40:c6:c6:0e:30:
1c:4d:5b:d6:1b:0b:ae:6d:75:02:5e:39:d2:2b:c9:eb:6b:97:
1d:a4:1b:14:e8:2d:c6:dc:6c:c3:65:f7:d8:24:b3:87:03:f7:
a0:24:19:59:e4:8e:91:f6:a2:74:11:5c:69:28:39:03:88:e2:
ad:0e:9b:db:53:96:37:32:07:24:b6:e2:44:29:91:a2:a5:b7:
2b:fa:c0:ac:0f:c9:59:93:3d:2d:07:f7:5e:e5:e1:4b:f6:17:
40:a8:6f:ac:c8:2d:ab:c4:bd:9a:49:97:26:5a:99:82:6b:09:
a5:54:e0:58:bb:1d:88:19:58:3c:fe:d1:50:f6:bf:ee:07:a1:
67:6c:5e:0e:f9:6e:7c:5a:9e:64:4d:db:40:4f:e4:a0:6a:77:
3e:2c:41:e9:34:e4:1c:20:6a:c3:5e:56:db:de:ef:ac:4a:cf:
f3:d9:5e:7d:cd:e7:68:16:79:76:65:da:a7:39:12:36:dd:a1:
1c:59:69:65:84:93:99:96:a3:63:71:1c:14:fc:e8:cb:4b:ec:
6a:40:be:30:19:dc:1f:74:90:45:a3:4e:0e:5e:f3:cb:cb:65:
e8:b2:93:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkMtfYLKS78qfChdwUOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTRkOWRkZTliOWQ1NTBmZjM0OTdlNDM2ODNmNjg4MGQ0
MDMzMjMwHhcNMjYwMzI5MDYwMDQ5WhcNMjYwMzMwMDYwMDQ5WjAzMTEwLwYDVQQD
EyhmY2Q3ZDg5MGI2MTc5MGM3YTk2NDFhYjljZmI0N2QyZTUxNTJlZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qer6D3PNoETPxTutrJcvk8LfunV
rPgepNk1PKUGvOGXNtqI9a3iix4h5/5qpElx91cNl0I6VlcklXkdagfc5JyTKRNl
aTUZCqkce1sotf0zn6yd7snRMci5taS529jSOWAiqgMgSmXrqQJOok14oop+QoYD
yMNN456G1kF6hhGgpO7c2CCLc+8DG+jkmR+aCfFosr++zbBX8FWbjXPzHKNXTu3t
vhaITughF4X2fzLRijJ5FGrimhyoCay5lvP5lKu/8qR7waSNSiJoPYDF3aw16yBJ
gBdzx/S06MWycg/bw7PkcZweAKtTVlcavEOKQ2kkk/RscYBjnTKrFu8WHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzX2JC2F5DHqWQauc+0fS5RUu7dMB8GA1UdIwQY
MBaAFEGU2d3pudVQ/zSX5DaD9ogNQDMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpUWjNlbTUxVkRfTkpma05vUDJpQTFBTXlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80YTZhMDktMzg1My00NTRiLWFlMDkt
ZmZhNzUxNGZhZDJlLzEvUVpUWjNlbTUxVkRfTkpma05vUDJpQTFBTXlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80YTZhMDktMzg1My00NTRiLWFlMDktZmZhNzUxNGZhZDJl
LzEvUVpUWjNlbTUxVkRfTkpma05vUDJpQTFBTXlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNleJ9x4
I/iIpL0xX+CPQtgI2rAxuRSnpAwZ3Na+yUDGxg4wHE1b1hsLrm11Al450ivJ62uX
HaQbFOgtxtxsw2X32CSzhwP3oCQZWeSOkfaidBFcaSg5A4jirQ6b21OWNzIHJLbi
RCmRoqW3K/rArA/JWZM9LQf3XuXhS/YXQKhvrMgtq8S9mkmXJlqZgmsJpVTgWLsd
iBlYPP7RUPa/7gehZ2xeDvlufFqeZE3bQE/koGp3PixB6TTkHCBqw15W297vrErP
89lefc3naBZ5dmXapzkSNt2hHFlpZYSTmZajY3EcFPzoy0vsakC+MBncH3SQRaNO
Dl7zy8tl6LKTYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:29 2026 by rpki-client