Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: 3FTyTi5KDzDb39ob5kkmDF5pnYPNljZK5uXqFFr0Jl0=
Subject key identifier: 08:FB:C3:AA:EC:C9:AC:69:69:1B:A2:D4:08:51:07:EB:59:73:90:D5
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019CE591492C8B6E5771BA2AEBB546C83B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 070E
Signing time: Fri 13 Mar 2026 05:00:29 +0000
Manifest this update: Fri 13 Mar 2026 05:00:29 +0000
Manifest next update: Sat 14 Mar 2026 05:00:29 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: GVpjMxvXq9rbLBLxABQwtIQ/HKisqDXdPOYnCXwtZDs=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:49:2c:8b:6e:57:71:ba:2a:eb:b5:46:c8:3b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Mar 13 05:00:29 2026 GMT
Not After : Mar 14 05:00:29 2026 GMT
Subject: CN=08fbc3aaecc9ac69691ba2d4085107eb597390d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:9a:db:ff:cd:06:6b:76:30:16:99:03:53:
38:75:fc:5f:62:54:b0:61:42:dc:24:ea:0a:7d:0b:
a3:e7:93:a8:2c:2d:03:30:90:9e:d0:dc:60:2d:dd:
35:9b:2e:9c:4f:33:72:29:ca:a1:82:b1:9c:a4:dc:
79:62:be:f5:51:33:d3:be:30:3c:c0:f7:72:4b:cb:
3d:b0:b4:e8:a1:76:1b:1e:8d:3f:05:86:30:9a:b3:
9f:c7:c1:d9:32:33:4a:72:fa:66:13:6a:e8:01:15:
56:df:3d:f9:4f:1b:6f:94:8a:8b:b4:52:ac:a6:18:
ef:af:f9:19:6b:90:7e:f4:85:97:89:26:fe:04:44:
46:c5:0b:e3:a5:0f:f4:57:41:8a:23:a7:6a:29:fa:
ba:c0:3a:57:ff:89:6a:38:45:a6:9b:12:71:31:8b:
a1:33:dc:a4:37:53:84:de:d1:d3:c8:25:ee:88:4d:
1f:cc:9a:d3:f6:85:86:c1:41:28:61:c7:8c:c5:bb:
78:2b:b4:ca:01:57:91:02:57:43:82:8b:3d:3b:6a:
bb:b2:cc:f4:d4:ce:3d:ad:a8:43:fc:ec:49:4f:2a:
68:22:3f:68:7f:1f:b8:17:2c:16:0c:66:db:82:ab:
49:cb:e7:e0:82:25:f8:86:8b:14:be:d9:d3:86:99:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:C3:AA:EC:C9:AC:69:69:1B:A2:D4:08:51:07:EB:59:73:90:D5
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:98:e4:78:39:1a:e8:66:3d:6d:4c:de:12:06:b5:94:bb:2d:
d8:33:eb:f4:f4:5f:64:a6:17:dc:73:c8:7b:89:56:76:fb:4d:
a0:b3:8b:a7:8d:d9:54:e6:87:69:c5:a9:f6:e8:23:08:d6:9e:
67:20:93:aa:95:dd:b2:84:a7:a7:69:7d:9c:a1:8c:e5:00:b5:
3e:e7:4e:a5:31:15:e8:d7:91:02:e2:fc:14:ca:06:56:d1:41:
1c:cf:58:83:1c:8e:bf:0b:fd:e0:07:d6:d3:8c:ec:91:af:08:
c9:f0:45:d1:33:98:d3:bd:fa:07:39:55:eb:54:40:c9:7b:2b:
09:fc:b4:38:8d:ce:13:55:8d:24:66:32:8c:ac:d3:3e:13:06:
23:dc:99:d3:46:21:ac:31:00:cf:03:8f:63:0d:cc:aa:80:f8:
34:21:1f:09:55:ad:42:20:c8:96:9c:b6:6d:fe:3e:4f:86:72:
63:77:b6:39:d9:d9:9d:d8:a2:c0:03:54:cd:0f:a9:fd:e9:65:
9a:98:8c:25:4c:5f:09:b5:3e:d9:05:df:f9:fe:e0:09:fd:68:
e4:d4:2d:1f:11:e8:ca:65:72:21:5c:79:5c:f2:17:5a:2a:f5:
f6:4c:68:3c:b9:b9:d0:a6:37:9e:0c:b3:e5:d1:e9:17:f9:8c:
ff:d8:8f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkUksi25Xcboq67VGyDs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmZlNzBmNGNlZjEwMzc2ODM2MTUyZjM4ZTRlMDg1MzJj
YzdiOWYwHhcNMjYwMzEzMDUwMDI5WhcNMjYwMzE0MDUwMDI5WjAzMTEwLwYDVQQD
EygwOGZiYzNhYWVjYzlhYzY5NjkxYmEyZDQwODUxMDdlYjU5NzM5MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyma2//NBmt2MBaZA1M4dfxfYlSw
YULcJOoKfQuj55OoLC0DMJCe0NxgLd01my6cTzNyKcqhgrGcpNx5Yr71UTPTvjA8
wPdyS8s9sLTooXYbHo0/BYYwmrOfx8HZMjNKcvpmE2roARVW3z35TxtvlIqLtFKs
phjvr/kZa5B+9IWXiSb+BERGxQvjpQ/0V0GKI6dqKfq6wDpX/4lqOEWmmxJxMYuh
M9ykN1OE3tHTyCXuiE0fzJrT9oWGwUEoYceMxbt4K7TKAVeRAldDgos9O2q7ssz0
1M49rahD/OxJTypoIj9ofx+4FywWDGbbgqtJy+fggiX4hosUvtnThpmdKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj7w6rsyaxpaRui1AhRB+tZc5DVMB8GA1UdIwQY
MBaAFEMv5w9M7xA3aDYVLzjk4IUyzHufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUt
MTg5ZDAwYTMzM2VlLzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUtMTg5ZDAwYTMzM2Vl
LzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZjkeDka
6GY9bUzeEga1lLst2DPr9PRfZKYX3HPIe4lWdvtNoLOLp43ZVOaHacWp9ugjCNae
ZyCTqpXdsoSnp2l9nKGM5QC1PudOpTEV6NeRAuL8FMoGVtFBHM9YgxyOvwv94AfW
04zska8IyfBF0TOY0736BzlV61RAyXsrCfy0OI3OE1WNJGYyjKzTPhMGI9yZ00Yh
rDEAzwOPYw3MqoD4NCEfCVWtQiDIlpy2bf4+T4ZyY3e2OdnZndiiwANUzQ+p/ell
mpiMJUxfCbU+2QXf+f7gCf1o5NQtHxHoymVyIVx5XPIXWir19kxoPLm50KY3ngyz
5dHpF/mM/9iPEw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:31 2026 by rpki-client