Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: fGYOBzS5nbF+Ufrtewa2r/n2GP9QSQWGg9SNBtWkm8g=
Subject key identifier: B3:2D:91:0E:EC:AE:2A:7C:CC:F1:E3:44:D6:2C:13:E8:D8:F8:4E:4C
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019CC6E252EA6794C587C611030D7CC88280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1856
Signing time: Sat 07 Mar 2026 06:00:46 +0000
Manifest this update: Sat 07 Mar 2026 06:00:46 +0000
Manifest next update: Sun 08 Mar 2026 06:00:46 +0000
Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: HADGYcWV94mjH1InA+M6Lv6bl5xkNNVvZJOgY24TDuc=)
3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:e2:52:ea:67:94:c5:87:c6:11:03:0d:7c:c8:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Mar 7 06:00:46 2026 GMT
Not After : Mar 8 06:00:46 2026 GMT
Subject: CN=b32d910eecae2a7cccf1e344d62c13e8d8f84e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:62:37:f3:2c:06:d7:5f:38:ae:49:fc:54:
ec:d8:02:fb:7d:10:bc:39:2b:eb:44:7b:dd:c7:a4:
e2:b6:fd:f4:e0:b2:f7:cb:b4:d9:3a:ca:40:7f:c2:
4b:6a:a3:d4:ee:8c:6c:be:b4:81:fc:0e:a6:a5:61:
ba:33:04:91:76:f9:76:d6:69:0d:d6:4d:cb:dc:c3:
96:8e:07:38:85:77:9a:af:70:ee:44:52:71:ae:f5:
50:ff:8b:a7:89:c4:cc:c6:ee:4a:3e:da:cf:b6:92:
87:2d:b7:0d:6c:90:d9:76:5f:c2:6e:01:7f:89:ba:
a4:11:91:6b:51:77:8d:72:71:84:be:03:88:bc:3e:
c4:e1:92:cf:1c:05:30:0d:4e:14:fd:7c:fd:6a:1c:
6c:e6:93:55:35:b1:0c:a0:aa:51:c6:da:9b:f1:8a:
8d:10:88:59:d8:ce:8c:a4:23:ee:c1:a5:86:77:ea:
43:7b:c7:e1:f6:81:5e:c6:62:16:00:20:18:f2:08:
6a:5b:52:13:34:f9:bf:11:db:a5:35:88:f3:da:64:
c9:66:db:0d:91:73:0e:59:c4:23:7c:c8:c0:25:48:
91:09:d9:18:23:1b:fa:f4:e8:0b:34:67:5a:9c:f4:
f1:7a:d8:5a:4b:18:5c:dc:b4:7c:31:6a:14:d3:b1:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:91:0E:EC:AE:2A:7C:CC:F1:E3:44:D6:2C:13:E8:D8:F8:4E:4C
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:73:0d:0b:93:16:17:d7:60:bd:16:f3:34:9b:b3:e8:54:
ef:73:22:d6:de:a5:91:18:a2:1f:82:f7:4e:6f:b5:5a:83:ef:
db:08:3d:20:5f:e2:92:7a:5a:ed:12:dd:91:ff:f6:e3:d4:f5:
f0:0f:f8:20:e1:67:f0:7d:bf:92:3f:f0:e0:cb:9f:24:2c:83:
03:7c:d9:d9:f6:4e:0e:31:62:a5:3e:cb:c8:c9:97:e7:31:02:
73:46:9f:fe:28:44:7e:63:59:cd:49:a6:72:88:fc:03:6d:8e:
7f:80:f8:f3:81:60:0c:c4:69:42:e2:56:dc:f6:7a:be:b1:e9:
b8:33:de:e5:b6:a1:34:cf:6e:5c:f9:ec:dd:5a:ee:72:18:46:
63:6d:00:b6:ef:37:44:a7:41:e0:45:e0:da:b5:3f:36:dc:e4:
2b:a0:f1:65:b2:24:b6:0c:61:73:89:33:29:63:7f:c9:1e:9a:
74:4c:a5:e5:c0:57:2a:47:9c:be:8a:47:bf:fc:72:a1:d2:0d:
77:c7:aa:b0:74:63:40:87:be:05:10:13:c0:13:22:a0:99:56:
f7:dc:b9:d8:f2:aa:c2:29:34:7d:d4:76:9e:5f:fd:73:81:96:
b1:8c:c7:fc:d5:6a:93:53:7e:d2:b6:8c:09:08:14:82:f7:e7:
47:31:aa:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzG4lLqZ5TFh8YRAw18yIKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjYwMzA3MDYwMDQ2WhcNMjYwMzA4MDYwMDQ2WjAzMTEwLwYDVQQD
EyhiMzJkOTEwZWVjYWUyYTdjY2NmMWUzNDRkNjJjMTNlOGQ4Zjg0ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwntiN/MsBtdfOK5J/FTs2AL7fRC8
OSvrRHvdx6Titv304LL3y7TZOspAf8JLaqPU7oxsvrSB/A6mpWG6MwSRdvl21mkN
1k3L3MOWjgc4hXear3DuRFJxrvVQ/4unicTMxu5KPtrPtpKHLbcNbJDZdl/CbgF/
ibqkEZFrUXeNcnGEvgOIvD7E4ZLPHAUwDU4U/Xz9ahxs5pNVNbEMoKpRxtqb8YqN
EIhZ2M6MpCPuwaWGd+pDe8fh9oFexmIWACAY8ghqW1ITNPm/EdulNYjz2mTJZtsN
kXMOWcQjfMjAJUiRCdkYIxv69OgLNGdanPTxethaSxhc3LR8MWoU07HE1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMtkQ7srip8zPHjRNYsE+jY+E5MMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiRzDQuT
FhfXYL0W8zSbs+hU73Mi1t6lkRiiH4L3Tm+1WoPv2wg9IF/iknpa7RLdkf/249T1
8A/4IOFn8H2/kj/w4MufJCyDA3zZ2fZODjFipT7LyMmX5zECc0af/ihEfmNZzUmm
coj8A22Of4D484FgDMRpQuJW3PZ6vrHpuDPe5bahNM9uXPns3VruchhGY20Atu83
RKdB4EXg2rU/NtzkK6DxZbIktgxhc4kzKWN/yR6adEyl5cBXKkecvopHv/xyodIN
d8eqsHRjQIe+BRATwBMioJlW99y52PKqwik0fdR2nl/9c4GWsYzH/NVqk1N+0raM
CQgUgvfnRzGq+A==
-----END CERTIFICATE-----
Generated at Sat Mar 7 15:55:55 2026 by rpki-client