Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: KrxtWfKGPW3QV0rPw7IEsCcy0wuQ0eMKdcAYFslceYk=
Subject key identifier: CF:1E:FB:24:F2:7C:5F:F3:B4:34:C3:19:35:B2:A6:E5:A6:1B:EC:41
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 019D38663F465808FD5F4FB277B584A7B7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 17C8
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: 7Rto5q9hOA8QMI6GRtOXl+HX3zWhXdse0kdG/ThZ3ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3f:46:58:08:fd:5f:4f:b2:77:b5:84:a7:b7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=cf1efb24f27c5ff3b434c31935b2a6e5a61bec41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:75:c1:c9:9f:de:81:c1:46:9f:f0:2b:2c:
57:a7:25:d7:ae:a7:b1:fd:65:e1:8d:ec:b7:70:59:
f7:4a:3e:51:68:00:8e:dc:73:5f:78:fb:20:43:aa:
0a:f0:b8:73:e6:2f:42:96:70:3f:1b:b0:f9:77:9d:
00:19:f9:0f:2c:67:f0:73:74:71:e1:b1:5b:ec:3f:
9b:71:f8:2c:76:56:7b:db:ac:f8:b4:08:c1:13:fa:
23:c6:53:2c:bf:c3:14:11:b2:84:1d:d7:3e:f9:e4:
40:a5:6b:e3:32:55:d5:5c:d9:d2:9a:51:c5:3f:12:
2c:ce:58:7d:c7:b4:f7:d1:56:f3:f1:83:07:81:c5:
79:5b:27:b7:94:c0:00:eb:c0:21:4b:10:a8:bb:82:
ca:98:8c:7d:59:3d:a6:1c:11:59:56:4e:cb:25:44:
e4:09:b3:40:cf:b4:6d:27:3b:69:bb:52:ff:0a:8f:
a1:91:22:df:e1:52:89:4d:59:14:a9:a0:e9:e6:06:
fc:e3:ad:2b:a3:be:57:3f:96:ce:07:3a:e9:21:95:
03:ea:c8:23:77:64:d5:2b:14:db:d4:cc:b6:d7:5b:
a2:d8:e4:ab:5f:8e:ba:f0:f2:34:c9:41:ab:8a:cc:
ee:fb:3c:a5:1b:35:74:4b:29:59:61:7d:3f:c6:4e:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:FB:24:F2:7C:5F:F3:B4:34:C3:19:35:B2:A6:E5:A6:1B:EC:41
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:12:45:ce:26:67:28:10:a6:64:22:61:de:f7:29:f7:69:5a:
e0:69:8d:61:17:48:16:93:c2:f1:a9:9f:46:07:e9:cf:e8:f7:
c6:64:0c:ec:8f:a2:bf:31:f8:76:57:37:af:d2:42:3a:75:34:
f4:62:40:04:1f:8c:05:bd:53:59:6a:6d:98:54:73:57:97:44:
39:35:c7:b0:9b:57:70:3c:0d:c9:d3:39:34:8c:a6:2f:3c:54:
6f:15:f7:9c:d7:99:ca:8d:57:a7:03:a6:1f:6b:ff:8c:60:93:
23:9c:27:0a:5f:9e:23:9a:a3:82:78:f1:44:e6:0f:0d:b2:84:
df:43:23:4b:f1:70:d4:1f:b3:76:b9:95:1e:2f:4b:8a:05:10:
32:32:2a:98:f9:08:a8:10:a9:01:40:6d:5a:26:bd:34:ac:60:
2b:77:81:ad:12:83:d8:d9:b6:a0:91:87:eb:d9:b7:50:8e:7a:
12:6e:1d:57:1a:46:c3:10:61:0e:14:86:b7:8b:29:f5:51:cb:
b7:bb:7c:0b:59:b2:6f:19:12:fd:59:2d:2a:af:47:70:4b:72:
1a:8b:87:33:0b:db:de:9d:a9:93:b6:45:89:a9:d0:8f:6b:f6:
6c:9a:f1:a2:67:56:bb:25:f5:41:57:53:fa:5c:29:6f:b6:96:
e1:9b:b1:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zj9GWAj9X0+yd7WEp7fNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi
Y2QyMTIwHhcNMjYwMzI5MDcwMTU4WhcNMjYwMzMwMDcwMTU4WjAzMTEwLwYDVQQD
EyhjZjFlZmIyNGYyN2M1ZmYzYjQzNGMzMTkzNWIyYTZlNWE2MWJlYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Np1wcmf3oHBRp/wKyxXpyXXrqex
/WXhjey3cFn3Sj5RaACO3HNfePsgQ6oK8Lhz5i9ClnA/G7D5d50AGfkPLGfwc3Rx
4bFb7D+bcfgsdlZ726z4tAjBE/ojxlMsv8MUEbKEHdc++eRApWvjMlXVXNnSmlHF
PxIszlh9x7T30Vbz8YMHgcV5Wye3lMAA68AhSxCou4LKmIx9WT2mHBFZVk7LJUTk
CbNAz7RtJztpu1L/Co+hkSLf4VKJTVkUqaDp5gb8460ro75XP5bOBzrpIZUD6sgj
d2TVKxTb1My211ui2OSrX4668PI0yUGriszu+zylGzV0SylZYX0/xk7XBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8e+yTyfF/ztDTDGTWypuWmG+xBMB8GA1UdIwQY
MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It
Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi
LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhJFziZn
KBCmZCJh3vcp92la4GmNYRdIFpPC8amfRgfpz+j3xmQM7I+ivzH4dlc3r9JCOnU0
9GJABB+MBb1TWWptmFRzV5dEOTXHsJtXcDwNydM5NIymLzxUbxX3nNeZyo1XpwOm
H2v/jGCTI5wnCl+eI5qjgnjxROYPDbKE30MjS/Fw1B+zdrmVHi9LigUQMjIqmPkI
qBCpAUBtWia9NKxgK3eBrRKD2Nm2oJGH69m3UI56Em4dVxpGwxBhDhSGt4sp9VHL
t7t8C1mybxkS/VktKq9HcEtyGouHMwvb3p2pk7ZFianQj2v2bJrxomdWuyX1QVdT
+lwpb7aW4Zux/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:30 2026 by rpki-client