Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: Z5Xp8tlX+qnqu7bkXjjERRIPsMwO1wAgzOslUM6I7ts=
Subject key identifier: 49:8C:D4:B1:79:D4:03:A8:91:C1:B0:D9:83:40:C4:D8:C3:3D:C6:B1
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 019CBEBB46E0F8962928402AAEED0E735CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 08DC
Signing time: Thu 05 Mar 2026 16:01:10 +0000
Manifest this update: Thu 05 Mar 2026 16:01:10 +0000
Manifest next update: Fri 06 Mar 2026 16:01:10 +0000
Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: aJ3ketKpSuV3StibRK1TV6G/qg18OxkxurY8pYTsgEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:bb:46:e0:f8:96:29:28:40:2a:ae:ed:0e:73:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Mar 5 16:01:10 2026 GMT
Not After : Mar 6 16:01:10 2026 GMT
Subject: CN=498cd4b179d403a891c1b0d98340c4d8c33dc6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:88:11:9d:af:4d:49:4b:c5:37:ac:84:5e:
43:c1:39:1f:01:b2:3f:95:61:1d:3b:5d:50:92:45:
3b:de:a9:65:a4:d6:45:e5:9a:cc:cd:dd:3e:20:25:
79:6f:d5:ab:98:9f:4a:af:80:04:36:8c:af:78:9c:
96:eb:a8:e3:ca:01:15:50:84:5e:8d:1b:cc:59:e5:
26:d7:25:b2:34:26:b3:f1:f4:bb:f3:2a:11:ee:a5:
b1:d4:ba:f8:fd:6f:1e:97:ee:b9:c6:85:b9:d3:db:
ff:24:a5:19:e6:c7:24:a6:19:18:ea:8a:07:76:56:
0a:b4:61:a8:e4:53:f4:5e:f2:79:ae:ec:8f:01:96:
4a:2d:ed:cb:b0:03:3a:c6:f3:1b:35:b2:d4:56:9e:
1e:8e:6b:76:c5:0d:93:11:12:5d:21:55:79:71:84:
9c:39:ef:81:1c:f7:4f:36:1b:77:16:3d:85:f1:8b:
b9:ae:4c:ad:0b:5d:0f:f5:99:4b:09:43:98:bc:f0:
b3:7a:e2:99:01:fa:85:06:54:d9:08:af:e6:98:d1:
51:de:9f:ba:02:9a:d8:f0:e0:e5:35:cc:0a:eb:88:
89:58:98:e4:a7:a0:f4:9e:ab:e7:b0:2e:9a:9e:43:
ef:af:29:b0:5e:e8:5a:a0:ca:07:8e:4c:6f:ca:76:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:D4:B1:79:D4:03:A8:91:C1:B0:D9:83:40:C4:D8:C3:3D:C6:B1
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:42:52:a4:1b:e7:72:d9:82:c3:da:e5:bf:5e:6b:38:c6:97:
3a:73:b9:c8:93:7b:41:84:ce:e0:18:71:64:83:c6:1f:40:0c:
88:0b:ef:3e:0b:d0:38:52:19:46:61:ee:38:4f:5d:73:3f:e8:
60:02:19:b9:c9:47:d3:36:9e:80:b7:d5:e5:94:49:b0:1b:b2:
c8:94:1e:cf:a0:c9:69:ce:ec:61:4b:23:3d:1d:fb:18:2b:e9:
68:e1:6c:8f:6a:9e:8f:b6:b1:b5:5c:b1:f8:b6:63:6d:43:5b:
84:2a:a3:f2:93:7c:c1:a9:52:86:aa:d3:50:2a:4c:66:94:d3:
84:e6:7d:42:e9:54:f7:2f:58:c7:44:d3:16:10:9b:79:b8:33:
d8:56:69:ed:d2:8d:7b:44:20:30:cd:6d:fc:c0:7b:93:5d:36:
cd:ed:29:4a:e0:40:c3:ff:de:c9:66:bf:72:b7:e1:bd:85:5d:
50:2d:36:64:0f:02:ce:b2:7a:66:0c:c1:83:6e:70:90:0c:a7:
24:56:be:69:e9:ca:ee:75:82:ed:22:0e:3c:6e:e0:54:69:40:
af:b2:81:93:8a:3e:cc:80:20:ae:76:24:6c:24:69:cc:76:62:
b5:0a:44:ee:7f:1a:43:50:73:59:c8:4e:22:e9:0b:72:0c:bf:
84:79:98:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy+u0bg+JYpKEAqru0Oc1z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjYwMzA1MTYwMTEwWhcNMjYwMzA2MTYwMTEwWjAzMTEwLwYDVQQD
Eyg0OThjZDRiMTc5ZDQwM2E4OTFjMWIwZDk4MzQwYzRkOGMzM2RjNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCGIEZ2vTUlLxTeshF5DwTkfAbI/
lWEdO11QkkU73qllpNZF5ZrMzd0+ICV5b9WrmJ9Kr4AENoyveJyW66jjygEVUIRe
jRvMWeUm1yWyNCaz8fS78yoR7qWx1Lr4/W8el+65xoW509v/JKUZ5sckphkY6ooH
dlYKtGGo5FP0XvJ5ruyPAZZKLe3LsAM6xvMbNbLUVp4ejmt2xQ2TERJdIVV5cYSc
Oe+BHPdPNht3Fj2F8Yu5rkytC10P9ZlLCUOYvPCzeuKZAfqFBlTZCK/mmNFR3p+6
AprY8ODlNcwK64iJWJjkp6D0nqvnsC6ankPvrymwXuhaoMoHjkxvynYl4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmM1LF51AOokcGw2YNAxNjDPcaxMB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0JSpBvn
ctmCw9rlv15rOMaXOnO5yJN7QYTO4BhxZIPGH0AMiAvvPgvQOFIZRmHuOE9dcz/o
YAIZuclH0zaegLfV5ZRJsBuyyJQez6DJac7sYUsjPR37GCvpaOFsj2qej7axtVyx
+LZjbUNbhCqj8pN8walShqrTUCpMZpTThOZ9QulU9y9Yx0TTFhCbebgz2FZp7dKN
e0QgMM1t/MB7k102ze0pSuBAw//eyWa/crfhvYVdUC02ZA8CzrJ6ZgzBg25wkAyn
JFa+aenK7nWC7SIOPG7gVGlAr7KBk4o+zIAgrnYkbCRpzHZitQpE7n8aQ1BzWchO
IukLcgy/hHmYJw==
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:20:29 2026 by rpki-client