Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: siS3dTufrBKlGJdE+KLOqyP++sL2dyxIqattCBL12rw=
Subject key identifier: C3:FE:88:32:96:E4:B4:77:7A:C5:BA:AA:37:44:18:8E:A2:F2:A0:5C
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 019D359B0C5521C084C99957EA2FC57D5277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 032E
Signing time: Sat 28 Mar 2026 18:00:46 +0000
Manifest this update: Sat 28 Mar 2026 18:00:46 +0000
Manifest next update: Sun 29 Mar 2026 18:00:46 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: GMkMAJ+EUZ1cE2RQkxbE8tJkE1gkLsCYatrSewn0IdQ=)
2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:9b:0c:55:21:c0:84:c9:99:57:ea:2f:c5:7d:52:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Mar 28 18:00:46 2026 GMT
Not After : Mar 29 18:00:46 2026 GMT
Subject: CN=c3fe883296e4b4777ac5baaa3744188ea2f2a05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:cf:4e:e3:34:65:3f:af:4d:3f:90:79:2e:
30:4f:21:7b:6e:ef:6b:a3:3d:93:6a:2d:d4:12:92:
f1:37:b1:43:39:af:d2:c3:ff:69:8d:b6:bf:87:ae:
c4:55:2e:c3:9c:65:23:9d:a2:81:b0:ee:c7:66:4f:
07:3b:29:a6:2d:c4:95:64:3d:af:56:2b:38:9c:17:
3a:81:8a:d8:5d:2a:2a:88:dc:98:25:f1:87:50:4c:
34:4d:e1:ac:83:32:ac:50:85:be:88:64:6b:f1:7e:
55:2c:91:9f:46:d9:cb:26:85:89:31:f9:24:90:f9:
92:3a:64:7e:bb:89:d5:cb:c2:aa:2f:28:35:d2:8f:
6b:2a:fe:a9:74:4a:33:02:33:04:cb:91:c8:d5:34:
ca:c9:40:63:fa:79:dd:44:3f:11:64:bc:ac:47:fc:
18:ac:bc:3b:2d:36:8b:4f:da:d3:5b:57:c3:6b:61:
1b:4c:d4:a8:79:ab:05:ed:d5:5a:d0:b5:e2:73:b4:
57:09:86:c5:38:57:b4:98:8d:5e:d0:88:e7:d5:f7:
99:c1:fe:b0:16:23:d9:be:c5:23:4f:7e:7f:87:71:
f4:88:fc:38:47:35:d7:d4:7d:4d:96:c9:ce:6d:e2:
8d:af:8d:d7:7c:2c:b6:93:4b:b7:55:2a:89:84:c3:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FE:88:32:96:E4:B4:77:7A:C5:BA:AA:37:44:18:8E:A2:F2:A0:5C
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:0e:09:4c:0f:fc:f8:cc:11:48:41:a5:d3:c0:e8:eb:df:
37:02:96:ca:ed:e0:57:2c:c1:c7:93:2d:3b:1b:61:bf:41:8d:
3d:dc:9f:33:c8:64:ae:94:95:85:66:b6:ce:ce:1c:6c:c1:38:
f0:d7:52:8a:b8:3f:cb:85:bd:84:ff:9a:e5:e3:4c:b5:04:1c:
22:16:6d:9f:bc:a5:03:49:8f:a9:c9:df:99:35:95:5a:fa:64:
40:52:71:2c:f2:cd:7f:96:33:7b:29:a3:1b:cb:55:f6:53:4b:
a3:e6:a8:48:8c:96:2f:1d:f5:97:ae:37:da:12:4c:d8:a9:2d:
f5:4d:4f:64:fe:7e:ec:7c:04:aa:80:ce:24:ec:17:90:87:e6:
d8:2c:b3:61:41:a7:e1:d3:96:77:f7:61:3e:2b:bf:d6:f2:72:
ba:9b:cb:a7:b6:dd:e0:c3:10:47:f4:ac:60:e4:ac:70:3d:6b:
f7:83:e4:2d:77:0e:81:95:2d:32:0d:98:a1:33:f0:30:f2:79:
cc:e6:95:8f:1e:b4:54:3f:36:b0:13:fa:6a:4e:25:c0:67:b6:
fa:e1:7b:22:85:a5:f1:e9:d4:b8:0a:1b:8c:9c:79:7c:81:4e:
70:25:6b:10:cd:d7:8b:d9:4f:72:f5:fd:89:ac:92:82:f9:6b:
0d:d0:60:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01mwxVIcCEyZlX6i/FfVJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi
MDljMDcwHhcNMjYwMzI4MTgwMDQ2WhcNMjYwMzI5MTgwMDQ2WjAzMTEwLwYDVQQD
EyhjM2ZlODgzMjk2ZTRiNDc3N2FjNWJhYWEzNzQ0MTg4ZWEyZjJhMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a3PTuM0ZT+vTT+QeS4wTyF7bu9r
oz2Tai3UEpLxN7FDOa/Sw/9pjba/h67EVS7DnGUjnaKBsO7HZk8HOymmLcSVZD2v
Vis4nBc6gYrYXSoqiNyYJfGHUEw0TeGsgzKsUIW+iGRr8X5VLJGfRtnLJoWJMfkk
kPmSOmR+u4nVy8KqLyg10o9rKv6pdEozAjMEy5HI1TTKyUBj+nndRD8RZLysR/wY
rLw7LTaLT9rTW1fDa2EbTNSoeasF7dVa0LXic7RXCYbFOFe0mI1e0Ijn1feZwf6w
FiPZvsUjT35/h3H0iPw4RzXX1H1NlsnObeKNr43XfCy2k0u3VSqJhMOh3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP+iDKW5LR3esW6qjdEGI6i8qBcMB8GA1UdIwQY
MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt
NzliNDA5YzFiZDM4LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4
LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABEOCUwP
/PjMEUhBpdPA6OvfNwKWyu3gVyzBx5MtOxthv0GNPdyfM8hkrpSVhWa2zs4cbME4
8NdSirg/y4W9hP+a5eNMtQQcIhZtn7ylA0mPqcnfmTWVWvpkQFJxLPLNf5Yzeymj
G8tV9lNLo+aoSIyWLx31l6432hJM2Kkt9U1PZP5+7HwEqoDOJOwXkIfm2CyzYUGn
4dOWd/dhPiu/1vJyupvLp7bd4MMQR/SsYOSscD1r94PkLXcOgZUtMg2YoTPwMPJ5
zOaVjx60VD82sBP6ak4lwGe2+uF7IoWl8enUuAobjJx5fIFOcCVrEM3Xi9lPcvX9
iaySgvlrDdBgWw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 21:44:23 2026 by rpki-client