Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: naQGL4Yyh7gCZKHm6ljM3mSCrVKlFLxJN7U/NyjYQMY=
Subject key identifier: FF:8C:B9:75:31:DC:B4:99:74:79:9D:71:60:EF:31:3F:A0:0F:6A:E8
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019D300674FFCE674BE2D92C36941B772C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 177C
Signing time: Fri 27 Mar 2026 16:00:22 +0000
Manifest this update: Fri 27 Mar 2026 16:00:22 +0000
Manifest next update: Sat 28 Mar 2026 16:00:22 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: aa5/tHVYoAz+yPqHGW4Uc1coxpvoG2UqcfJ13B8aT70=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:06:74:ff:ce:67:4b:e2:d9:2c:36:94:1b:77:2c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Mar 27 16:00:22 2026 GMT
Not After : Mar 28 16:00:22 2026 GMT
Subject: CN=ff8cb97531dcb49974799d7160ef313fa00f6ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:80:75:88:48:2b:2e:87:23:3a:80:57:99:
32:05:fd:c8:4e:ce:07:91:c1:cf:b9:14:9d:43:fc:
65:ea:b3:e8:2f:18:2d:54:f7:85:94:86:bb:2c:5f:
9f:dc:f4:d4:08:de:80:b9:8b:39:63:dd:67:94:dc:
85:8b:9c:0b:54:96:bd:6a:ca:1b:e2:b1:d8:cb:1e:
34:0a:8c:22:9e:99:c7:1c:5c:df:5b:e0:9e:3a:62:
1d:52:66:ad:ac:46:83:bc:d4:7e:06:b5:2e:75:97:
d1:52:18:fe:f4:6f:cb:bd:f7:76:13:46:c7:5b:13:
64:c3:77:44:bc:38:30:7a:00:9b:ad:a9:56:c7:01:
a8:f4:34:4b:bb:5d:2e:7d:59:49:6e:d7:d2:d0:c8:
90:6c:ca:53:5f:25:57:11:33:81:64:59:69:ac:b0:
b8:04:e6:b1:5a:b3:97:be:19:5f:5b:85:56:73:11:
b5:da:d5:88:a6:ac:b8:3b:34:fd:d7:ff:1b:94:28:
7b:0d:46:8a:3d:62:a4:be:4e:47:72:2f:e9:b4:9f:
9c:18:ff:9d:53:59:c7:47:da:45:b8:ed:99:bd:05:
05:54:5f:72:b4:c3:60:6c:b5:a6:dd:d6:12:68:78:
c9:59:91:4e:df:00:f1:b5:2d:b7:b8:e4:bf:f8:97:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:B9:75:31:DC:B4:99:74:79:9D:71:60:EF:31:3F:A0:0F:6A:E8
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:66:6c:40:09:81:d9:b1:1d:77:ff:9e:2f:0c:00:9f:36:
98:e4:c4:ef:05:6a:fb:f4:e5:bc:29:a6:72:f5:1e:5c:2b:6d:
1d:9e:c0:9b:eb:fc:d7:d8:49:d3:3c:54:63:38:76:94:7e:a2:
79:24:24:b9:9b:50:fd:fa:5c:3a:2c:a0:0c:a3:99:fa:b8:60:
c2:4a:53:2d:41:80:ae:b8:4f:a9:0d:34:97:d7:cd:5b:ed:1f:
61:92:da:5a:ab:5f:b7:b9:7f:4d:49:cc:da:9e:6e:02:94:c4:
c5:ee:b6:68:af:b5:70:a8:21:b6:80:7c:24:20:c8:12:24:db:
9b:3e:62:7b:71:dd:17:77:1d:65:c4:3f:e3:1e:00:ac:34:73:
2f:bc:72:75:1f:32:05:62:31:58:d1:ad:49:91:b3:8f:4c:9e:
7d:5d:8f:fa:44:27:e4:77:a8:bc:d2:01:7e:a9:64:6c:b5:b5:
df:4c:78:cd:3e:94:5f:d4:74:20:3a:80:d5:79:6e:d4:e1:69:
03:fc:ed:31:60:79:d1:46:db:b2:80:2d:14:84:47:c8:be:1c:
a7:1f:d2:00:89:7b:57:c6:de:72:57:de:2d:84:f9:0a:21:be:
d3:27:e7:5c:c4:9d:29:59:93:80:8d:9a:2c:ee:2c:a7:fe:03:
97:0a:06:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0wBnT/zmdL4tksNpQbdyyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzMwMzcxOTg2ZGY1ZDU2NGVlNjcwNzQ3MTdiNjZhMDJm
ZjU3MTIwHhcNMjYwMzI3MTYwMDIyWhcNMjYwMzI4MTYwMDIyWjAzMTEwLwYDVQQD
EyhmZjhjYjk3NTMxZGNiNDk5NzQ3OTlkNzE2MGVmMzEzZmEwMGY2YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvKAdYhIKy6HIzqAV5kyBf3ITs4H
kcHPuRSdQ/xl6rPoLxgtVPeFlIa7LF+f3PTUCN6AuYs5Y91nlNyFi5wLVJa9asob
4rHYyx40CowinpnHHFzfW+CeOmIdUmatrEaDvNR+BrUudZfRUhj+9G/Lvfd2E0bH
WxNkw3dEvDgwegCbralWxwGo9DRLu10ufVlJbtfS0MiQbMpTXyVXETOBZFlprLC4
BOaxWrOXvhlfW4VWcxG12tWIpqy4OzT91/8blCh7DUaKPWKkvk5Hci/ptJ+cGP+d
U1nHR9pFuO2ZvQUFVF9ytMNgbLWm3dYSaHjJWZFO3wDxtS23uOS/+JfIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+MuXUx3LSZdHmdcWDvMT+gD2roMB8GA1UdIwQY
MBaAFELDA3GYbfXVZO5nB0cXtmoC/1cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzct
YzI0NTRjZTI4ZDQ4LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzctYzI0NTRjZTI4ZDQ4
LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSVmbEAJ
gdmxHXf/ni8MAJ82mOTE7wVq+/TlvCmmcvUeXCttHZ7Am+v819hJ0zxUYzh2lH6i
eSQkuZtQ/fpcOiygDKOZ+rhgwkpTLUGArrhPqQ00l9fNW+0fYZLaWqtft7l/TUnM
2p5uApTExe62aK+1cKghtoB8JCDIEiTbmz5ie3HdF3cdZcQ/4x4ArDRzL7xydR8y
BWIxWNGtSZGzj0yefV2P+kQn5HeovNIBfqlkbLW130x4zT6UX9R0IDqA1Xlu1OFp
A/ztMWB50UbbsoAtFIRHyL4cpx/SAIl7V8beclfeLYT5CiG+0yfnXMSdKVmTgI2a
LO4sp/4DlwoGDw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 22:24:02 2026 by rpki-client