Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: KVz4KM5wP4NKgqbrTKZFHenD7RECLTIleCfQ31/IwXg=
Subject key identifier: 3C:DD:A2:BF:A6:5D:C6:47:41:C3:98:B1:77:EB:DB:93:17:E3:F9:F9
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 01A12B0DAB752FF8B03077126685C9FA6F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0FF8
Signing time: Sun 11 Oct 2026 13:01:18 +0000
Manifest this update: Sun 11 Oct 2026 13:01:18 +0000
Manifest next update: Mon 12 Oct 2026 13:01:18 +0000
Files and hashes: 1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: QhXwPRBsbC/1WgKbH/T4fmM4QBCxdBNd8905Ovk9+GI=)
3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:ab:75:2f:f8:b0:30:77:12:66:85:c9:fa:6f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Oct 11 13:01:18 2026 GMT
Not After : Oct 12 13:01:18 2026 GMT
Subject: CN=3cdda2bfa65dc64741c398b177ebdb9317e3f9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:a3:ad:2c:75:fa:78:dd:76:3c:f3:a0:c6:
90:33:f0:70:07:5d:09:5f:d6:24:fb:66:21:16:82:
33:1a:02:b9:13:f7:f2:23:33:31:b4:ea:67:c9:de:
6e:9a:2d:37:91:04:17:80:50:dc:b5:f0:5e:7e:b0:
b2:11:cb:42:ec:2e:37:69:2f:c3:3a:57:ce:46:06:
10:ac:c9:f5:b7:2c:7d:ad:e4:70:81:ab:ec:c4:bf:
b1:f2:10:ae:32:a6:86:23:d6:22:eb:79:76:a4:88:
46:bc:5c:e6:02:d3:ab:62:12:15:e3:a5:4f:4e:ae:
b8:47:32:56:c7:91:e3:83:d6:71:4e:bd:7d:a8:db:
fd:6f:46:4e:fd:5a:8b:d3:e0:da:16:15:29:4c:56:
b5:c2:3c:e3:61:a2:67:74:30:f8:ff:3c:0b:ad:b0:
40:5c:7c:a9:ad:07:57:ae:06:3a:a1:97:1a:39:4c:
ef:8c:5e:e4:6d:c4:5d:8e:0d:f3:e1:39:ac:36:c9:
93:ab:50:e3:29:39:53:87:77:44:b6:69:eb:74:6d:
b1:63:be:f1:6a:27:cd:20:7f:9c:ec:0e:f7:d6:b5:
43:43:54:b0:78:a7:0c:2f:ec:f4:ed:19:b4:45:b1:
24:86:22:6a:95:7b:06:e0:b0:51:5e:e1:c9:26:24:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:A2:BF:A6:5D:C6:47:41:C3:98:B1:77:EB:DB:93:17:E3:F9:F9
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b1:1a:5b:1c:a7:84:0a:46:f7:dc:f9:fe:9a:d1:2c:10:eb:
b0:21:f2:50:12:1e:6e:c9:68:d7:05:39:73:31:78:59:d7:f5:
bd:51:7e:5a:e6:61:7f:5c:cb:a4:a2:eb:b3:32:72:77:13:0f:
15:fe:72:53:39:30:7a:fb:48:19:70:31:b8:6b:78:ed:10:32:
f9:fb:90:dd:64:00:b8:99:73:03:85:14:b0:6d:54:37:81:31:
bb:bb:00:74:54:a4:5f:74:e0:49:7f:d8:c8:9d:9f:51:f4:02:
92:fa:d5:a3:cc:f0:d4:e0:09:b0:24:86:57:44:60:b5:54:bc:
5c:e9:c1:f0:15:d0:93:c1:ba:bc:0f:c1:02:74:da:81:23:18:
ea:4f:52:a7:82:61:63:63:94:42:03:3b:d0:9d:22:ec:6e:aa:
2d:e0:d3:45:22:5d:61:16:5f:03:67:50:f1:15:32:da:90:a1:
2b:a4:39:7e:c9:0b:60:76:97:aa:b2:23:29:54:cc:49:e6:4a:
c6:07:07:a6:1c:a9:24:f2:0a:4a:29:9d:62:29:00:39:b9:30:
d4:19:5d:be:b8:66:57:e7:37:b7:70:d6:70:04:99:70:f2:12:
92:42:5c:c1:43:19:0f:10:3d:a5:02:68:fa:4d:3d:98:43:77:
60:cc:fe:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErDat1L/iwMHcSZoXJ+m8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjUxMzQyZTA1ZDU4YjNiN2ZjOTNhMTVjYmExZWI3MWU1
NDIzODUwHhcNMjYxMDExMTMwMTE4WhcNMjYxMDEyMTMwMTE4WjAzMTEwLwYDVQQD
EygzY2RkYTJiZmE2NWRjNjQ3NDFjMzk4YjE3N2ViZGI5MzE3ZTNmOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHijrSx1+njddjzzoMaQM/BwB10J
X9Yk+2YhFoIzGgK5E/fyIzMxtOpnyd5umi03kQQXgFDctfBefrCyEctC7C43aS/D
OlfORgYQrMn1tyx9reRwgavsxL+x8hCuMqaGI9Yi63l2pIhGvFzmAtOrYhIV46VP
Tq64RzJWx5Hjg9ZxTr19qNv9b0ZO/VqL0+DaFhUpTFa1wjzjYaJndDD4/zwLrbBA
XHyprQdXrgY6oZcaOUzvjF7kbcRdjg3z4TmsNsmTq1DjKTlTh3dEtmnrdG2xY77x
aifNIH+c7A731rVDQ1SweKcML+z07Rm0RbEkhiJqlXsG4LBRXuHJJiRnfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzdor+mXcZHQcOYsXfr25MX4/n5MB8GA1UdIwQY
MBaAFEElE0LgXVizt/yToVy6HrceVCOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGIt
YzM2NjhiNTAzYTFjLzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGItYzM2NjhiNTAzYTFj
LzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLEaWxyn
hApG99z5/prRLBDrsCHyUBIebslo1wU5czF4Wdf1vVF+WuZhf1zLpKLrszJydxMP
Ff5yUzkwevtIGXAxuGt47RAy+fuQ3WQAuJlzA4UUsG1UN4Exu7sAdFSkX3TgSX/Y
yJ2fUfQCkvrVo8zw1OAJsCSGV0RgtVS8XOnB8BXQk8G6vA/BAnTagSMY6k9Sp4Jh
Y2OUQgM70J0i7G6qLeDTRSJdYRZfA2dQ8RUy2pChK6Q5fskLYHaXqrIjKVTMSeZK
xgcHphypJPIKSimdYikAObkw1BldvrhmV+c3t3DWcASZcPISkkJcwUMZDxA9pQJo
+k09mEN3YMz+1A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:15:44 2026 by rpki-client