Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: S8H2XkhT6SS2j53x/XQPmzevKVbv+7Z+fkimWeFcqww=
Subject key identifier: EA:09:C5:3D:E7:BD:35:6E:88:DA:53:92:CF:C2:34:19:DA:29:35:DA
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019D382E03E645B42DCE1AA213931D53653A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 080E
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: rUDmVPBOhViuizNu0nV36EnHErJE5kdqZ0otsHDbz5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:03:e6:45:b4:2d:ce:1a:a2:13:93:1d:53:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=ea09c53de7bd356e88da5392cfc23419da2935da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:a9:4c:da:1f:ba:72:b2:73:6c:10:66:c7:
de:75:6b:2e:4d:28:b3:72:83:35:6b:e5:d8:49:8a:
28:4e:cb:83:a4:e6:43:e9:26:f4:d6:2b:a8:32:e9:
5a:03:99:bc:0f:6d:43:8a:7b:5e:bc:96:40:47:58:
8f:b5:a4:ad:29:e2:95:cb:b7:dc:36:84:c0:ed:39:
09:90:fd:54:3a:ed:d6:6a:2c:c2:fc:18:07:14:e5:
93:ec:84:e9:c8:83:6a:83:e8:75:ab:25:60:2e:f7:
30:cc:96:8e:62:15:5c:39:e9:15:35:32:fb:1b:23:
4c:df:34:04:50:a5:38:1d:ce:8c:6f:76:95:3f:25:
dd:ae:c3:05:14:8f:24:0c:cc:41:f4:d3:51:0e:07:
d8:08:a3:b9:26:4d:ff:88:2e:b6:20:e4:11:4d:0e:
cb:18:ca:01:a4:59:9a:6a:2c:04:d3:3e:ad:cb:64:
3f:26:d9:1c:26:09:a1:8a:28:07:01:88:e1:05:41:
6b:2a:b4:55:ea:b4:c0:cc:ae:53:b6:99:c5:4a:d8:
7c:9f:02:92:63:15:75:1c:a6:4a:00:2d:e8:f9:23:
8d:40:2c:30:3b:00:80:b5:03:7c:54:de:56:a7:5c:
ff:6d:1b:df:2f:cf:3f:61:ac:43:8d:08:f9:f4:ff:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:C5:3D:E7:BD:35:6E:88:DA:53:92:CF:C2:34:19:DA:29:35:DA
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e0:fc:4e:45:44:fc:51:36:81:04:1a:75:d3:1f:c7:1f:ae:
db:f8:f7:86:15:86:f9:5f:b4:42:1b:a6:9f:29:81:62:ba:ea:
8a:86:bd:93:44:5b:97:67:29:d5:5b:66:80:ec:41:7f:d3:ff:
fe:2e:6e:a0:ed:dd:31:3e:75:2d:8f:05:40:e1:44:f5:b4:0c:
3c:46:8e:fd:39:1e:23:2c:fd:21:41:59:b2:64:38:91:41:62:
09:d6:91:a9:0b:b2:77:63:01:e9:63:48:ab:ae:60:99:65:3f:
86:28:a3:71:3b:00:f8:0b:b4:58:dc:9e:a0:1d:82:b9:69:af:
63:a5:d8:73:4f:7c:58:08:d7:c2:5d:83:dc:58:9e:a4:61:81:
77:52:13:33:fd:68:22:2f:e9:eb:4f:bd:ad:80:b8:15:ba:d6:
8e:08:7b:60:c8:4b:55:8b:37:a0:01:1b:1f:9b:91:09:c3:c2:
a0:cb:4e:48:16:45:39:ea:77:00:9f:6a:74:f5:87:bd:dd:63:
36:a3:1a:8e:bd:e2:dc:79:b0:ec:c7:e2:93:ec:9c:e5:9e:52:
85:8e:ae:36:a5:7f:59:9c:95:f7:a2:81:dd:c0:e6:e8:3b:e4:
1b:4a:fd:bd:14:f0:50:40:b8:1f:d2:10:32:4f:04:78:ec:31:
c2:00:ba:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LgPmRbQtzhqiE5MdU2U6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1
MWQ3OTEwHhcNMjYwMzI5MDYwMDMyWhcNMjYwMzMwMDYwMDMyWjAzMTEwLwYDVQQD
EyhlYTA5YzUzZGU3YmQzNTZlODhkYTUzOTJjZmMyMzQxOWRhMjkzNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzGpTNofunKyc2wQZsfedWsuTSiz
coM1a+XYSYooTsuDpOZD6Sb01iuoMulaA5m8D21DintevJZAR1iPtaStKeKVy7fc
NoTA7TkJkP1UOu3WaizC/BgHFOWT7ITpyINqg+h1qyVgLvcwzJaOYhVcOekVNTL7
GyNM3zQEUKU4Hc6Mb3aVPyXdrsMFFI8kDMxB9NNRDgfYCKO5Jk3/iC62IOQRTQ7L
GMoBpFmaaiwE0z6ty2Q/JtkcJgmhiigHAYjhBUFrKrRV6rTAzK5TtpnFSth8nwKS
YxV1HKZKAC3o+SONQCwwOwCAtQN8VN5Wp1z/bRvfL88/YaxDjQj59P+RYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoJxT3nvTVuiNpTks/CNBnaKTXaMB8GA1UdIwQY
MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt
MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4
LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeD8TkVE
/FE2gQQaddMfxx+u2/j3hhWG+V+0QhumnymBYrrqioa9k0Rbl2cp1VtmgOxBf9P/
/i5uoO3dMT51LY8FQOFE9bQMPEaO/TkeIyz9IUFZsmQ4kUFiCdaRqQuyd2MB6WNI
q65gmWU/hiijcTsA+Au0WNyeoB2CuWmvY6XYc098WAjXwl2D3FiepGGBd1ITM/1o
Ii/p60+9rYC4FbrWjgh7YMhLVYs3oAEbH5uRCcPCoMtOSBZFOep3AJ9qdPWHvd1j
NqMajr3i3Hmw7Mfik+yc5Z5ShY6uNqV/WZyV96KB3cDm6DvkG0r9vRTwUEC4H9IQ
Mk8EeOwxwgC6rg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:16 2026 by rpki-client