Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: edWSM3To7dZg7tfPkPx9IkRvHFQ2AZzV+5VUJxcDv6U=
Subject key identifier: A2:19:B1:29:1D:0F:5C:41:A0:0A:70:68:92:07:99:FC:F4:00:21:7D
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 019D3909C759EA4476EA0D798C00FCF8237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 15DD
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: rcPZEDs6v5uUdgvdc8ZWd2QieSyz/aos4THC0j1lf+s=)
3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c7:59:ea:44:76:ea:0d:79:8c:00:fc:f8:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=a219b1291d0f5c41a00a7068920799fcf400217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:34:0b:f5:2f:65:80:31:a6:02:37:1b:07:
15:6f:9d:23:fb:22:8d:c5:00:87:0d:c8:bf:ac:c5:
83:c8:d7:99:f8:21:56:8b:68:4f:de:3c:cf:ce:3a:
9d:39:72:10:f7:9d:2a:e2:36:90:79:21:69:97:2c:
f0:a7:9f:b4:8d:56:83:9f:58:08:37:48:56:0e:42:
f9:2f:3f:8c:05:84:5c:93:07:0d:b2:53:51:84:91:
ea:2f:51:ec:a9:fe:d1:35:04:ed:f8:3c:7a:0f:71:
92:f5:28:ca:f1:c6:d1:5b:ef:65:2a:ac:96:42:6e:
c9:09:18:bb:ed:15:4e:40:41:8d:73:5f:3a:cf:3e:
70:24:02:a2:b9:53:6f:55:f1:85:7d:e8:fc:ce:7f:
06:9d:49:0b:0f:38:88:68:2b:a4:21:11:8d:25:5b:
eb:a1:a6:74:85:0e:3d:a5:e8:74:58:31:df:b4:47:
3d:a1:01:3e:ff:c0:fa:ad:d2:9f:7a:0e:29:62:5d:
5d:80:41:0c:ab:20:96:bc:a6:a8:8d:41:74:2d:de:
29:f3:b8:9f:5f:87:81:f4:d2:c4:e7:81:d7:38:41:
96:45:5d:68:3d:b4:1c:7b:11:fc:8c:53:cb:a6:4b:
24:e1:ca:3c:aa:36:9d:6c:b5:66:d8:42:ed:48:8d:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:B1:29:1D:0F:5C:41:A0:0A:70:68:92:07:99:FC:F4:00:21:7D
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:92:b0:f5:69:a5:a6:6a:d3:f6:3e:03:3d:66:d4:27:2e:bf:
a9:cb:64:dd:02:d3:85:95:8e:6a:38:f7:ff:04:40:53:07:61:
cf:23:65:04:79:23:8c:8b:a2:47:0c:0d:3c:e2:c7:f8:cc:65:
97:d0:e5:9f:49:4b:24:44:63:2b:b5:2a:2c:53:6e:96:fb:e2:
a5:06:28:d3:5f:38:be:30:68:4f:70:fb:b6:41:8e:3f:9c:61:
02:45:4d:87:89:f6:29:54:97:69:98:5b:44:ad:3e:55:1d:83:
38:bc:8d:fa:31:40:3a:66:66:41:52:5f:f4:ac:ad:78:5a:5f:
56:17:5e:9c:c8:a2:4c:47:2e:c0:76:77:70:f7:04:2f:26:c7:
ec:80:c0:03:32:6f:c5:c2:07:45:82:1f:b2:98:fd:fe:8b:ca:
81:69:55:52:1d:b5:22:c4:66:27:5f:2f:91:2f:eb:ed:21:0d:
c3:d7:22:44:cb:e3:d5:71:24:b8:89:88:fb:d8:21:5d:fd:8b:
97:22:40:f8:70:d5:f8:60:b9:60:39:e7:64:91:dc:ab:99:9e:
a3:92:15:0f:73:93:a8:9d:5f:69:4b:16:f2:f4:7c:24:b9:b2:
db:cd:12:99:e2:3c:84:b2:85:52:43:54:b0:71:d1:ce:7d:e5:
03:74:3d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcdZ6kR26g15jAD8+CN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjNmZTZkYWQ4YWQ0ZmRhZWU2ZGQ2OTgzYzFlNTVjZGU4
NDgyYTIwHhcNMjYwMzI5MTAwMDM1WhcNMjYwMzMwMTAwMDM1WjAzMTEwLwYDVQQD
EyhhMjE5YjEyOTFkMGY1YzQxYTAwYTcwNjg5MjA3OTlmY2Y0MDAyMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O80C/UvZYAxpgI3GwcVb50j+yKN
xQCHDci/rMWDyNeZ+CFWi2hP3jzPzjqdOXIQ950q4jaQeSFplyzwp5+0jVaDn1gI
N0hWDkL5Lz+MBYRckwcNslNRhJHqL1Hsqf7RNQTt+Dx6D3GS9SjK8cbRW+9lKqyW
Qm7JCRi77RVOQEGNc186zz5wJAKiuVNvVfGFfej8zn8GnUkLDziIaCukIRGNJVvr
oaZ0hQ49peh0WDHftEc9oQE+/8D6rdKfeg4pYl1dgEEMqyCWvKaojUF0Ld4p87if
X4eB9NLE54HXOEGWRV1oPbQcexH8jFPLpksk4co8qjadbLVm2ELtSI0SSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIZsSkdD1xBoApwaJIHmfz0ACF9MB8GA1UdIwQY
MBaAFKgj/m2titT9rubdaYPB5VzehIKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQt
OWJmZGYyMjUxMjY3LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQtOWJmZGYyMjUxMjY3
LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJKw9Wml
pmrT9j4DPWbUJy6/qctk3QLThZWOajj3/wRAUwdhzyNlBHkjjIuiRwwNPOLH+Mxl
l9Dln0lLJERjK7UqLFNulvvipQYo0184vjBoT3D7tkGOP5xhAkVNh4n2KVSXaZhb
RK0+VR2DOLyN+jFAOmZmQVJf9KyteFpfVhdenMiiTEcuwHZ3cPcELybH7IDAAzJv
xcIHRYIfspj9/ovKgWlVUh21IsRmJ18vkS/r7SENw9ciRMvj1XEkuImI+9ghXf2L
lyJA+HDV+GC5YDnnZJHcq5meo5IVD3OTqJ1faUsW8vR8JLmy280SmeI8hLKFUkNU
sHHRzn3lA3Q9qg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:42 2026 by rpki-client