Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: RAh7N0dwbbXzKpdcB9Wt+/7mR0uZjptbOhp9o7p2hG4=
Subject key identifier: 43:B1:9F:4E:DC:73:3C:D7:23:D0:FD:2D:96:F4:C5:6C:E4:97:80:CB
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019DDC8D288F773AC098FB95F484F91315D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 9A
Signing time: Thu 30 Apr 2026 04:02:11 +0000
Manifest this update: Thu 30 Apr 2026 04:02:11 +0000
Manifest next update: Fri 01 May 2026 04:02:11 +0000
Files and hashes: 1: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: 1DtftwhXClk5yy+fG6be+OuV0fuOjlUa/I3pqYeF9fA=)
2: UznnCCmWb2U_DwOypllLo7Xxwe8.asa (hash: bm5GW+O8Moz8CwmexqQ5gD2dh8tQCMzUBqUj6Yad+rU=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8d:28:8f:77:3a:c0:98:fb:95:f4:84:f9:13:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Apr 30 04:02:11 2026 GMT
Not After : May 1 04:02:11 2026 GMT
Subject: CN=43b19f4edc733cd723d0fd2d96f4c56ce49780cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:50:ca:0c:06:93:b0:b7:66:a5:44:fc:70:
f6:f0:9f:eb:3d:d1:23:a3:c0:8b:a7:f1:61:78:d8:
44:6d:a3:82:7c:cc:da:f4:44:1d:57:5b:da:8b:16:
d5:f3:18:f2:16:4f:39:76:74:9b:3a:bd:86:38:6d:
e6:31:11:96:3b:2d:45:7e:82:89:25:b4:ae:8b:38:
c7:f9:75:16:8b:2c:54:af:20:fa:d8:79:fe:8f:ef:
55:6f:2e:f5:a8:41:79:1e:99:b7:e9:20:bd:71:c3:
61:37:30:06:fd:55:7c:01:0c:f0:1a:b7:e0:d7:85:
4c:1e:2c:77:86:43:05:19:c3:2d:9d:3d:e2:70:c6:
91:3f:aa:b8:7a:7b:ec:df:01:08:aa:db:6a:eb:dd:
26:ee:47:a5:01:94:9d:80:e8:91:e9:02:fa:43:c0:
0e:34:25:30:ea:2b:fa:68:61:93:92:41:b1:7c:6c:
0a:7a:00:04:0c:94:30:b9:e8:24:aa:94:6e:2c:ba:
6c:6b:7c:54:bf:3e:3d:e1:d1:6a:ab:a3:d4:8a:8c:
bb:d1:1d:4b:c1:f5:d1:51:7b:1c:9a:d5:21:5a:a2:
89:80:a6:af:9d:87:65:dc:dc:83:07:56:be:6a:f4:
f5:65:ee:84:48:01:02:b0:22:c4:74:e8:69:5b:a8:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:9F:4E:DC:73:3C:D7:23:D0:FD:2D:96:F4:C5:6C:E4:97:80:CB
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:47:cd:ec:f2:12:86:f2:cf:31:73:6e:30:1b:cd:16:63:
dd:af:3e:b5:6d:84:ab:85:d8:11:43:51:9f:1b:8a:17:e2:a8:
02:21:76:4c:f8:a0:15:7e:b3:50:b7:88:ee:38:16:30:ff:cf:
03:aa:06:be:eb:b6:fb:12:e7:0a:7e:35:f5:df:9a:9b:9e:f3:
46:a5:85:c3:f7:0a:6b:7b:6c:54:e4:5d:b9:23:f1:6b:92:88:
8f:26:20:83:34:96:6e:5a:70:5b:21:89:b8:ab:a0:01:58:dd:
83:e4:ed:34:b0:49:7c:00:61:fc:75:93:7b:9b:68:ec:e3:c2:
45:2f:de:4f:f1:19:67:5e:78:61:8e:b9:36:a1:32:0e:f3:6b:
05:9a:e4:39:6f:e2:b5:4c:f5:64:4d:10:d0:75:56:70:ee:79:
61:9f:dc:6e:e6:88:b2:cf:8c:59:b2:74:5d:a7:d8:3e:f4:f2:
98:59:20:57:fd:bb:83:3d:6e:d1:f9:c9:35:c1:38:dd:85:77:
39:5d:39:90:e0:83:ee:05:6d:98:90:e1:fb:96:5e:5a:f9:63:
b6:83:6d:52:7d:df:d2:29:e4:35:99:bc:f7:34:1c:fe:70:be:
f7:47:5f:3e:99:d4:25:2d:52:3c:21:27:b5:88:2d:80:75:5c:
5d:9b:f2:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3cjSiPdzrAmPuV9IT5ExXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYjFhZjk2NDRjNjdiNTY4OWZjMGNhNDZhYWVkMTY5MmM0
OGU2Y2MwHhcNMjYwNDMwMDQwMjExWhcNMjYwNTAxMDQwMjExWjAzMTEwLwYDVQQD
Eyg0M2IxOWY0ZWRjNzMzY2Q3MjNkMGZkMmQ5NmY0YzU2Y2U0OTc4MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuJQygwGk7C3ZqVE/HD28J/rPdEj
o8CLp/FheNhEbaOCfMza9EQdV1vaixbV8xjyFk85dnSbOr2GOG3mMRGWOy1FfoKJ
JbSuizjH+XUWiyxUryD62Hn+j+9Vby71qEF5Hpm36SC9ccNhNzAG/VV8AQzwGrfg
14VMHix3hkMFGcMtnT3icMaRP6q4envs3wEIqttq690m7kelAZSdgOiR6QL6Q8AO
NCUw6iv6aGGTkkGxfGwKegAEDJQwuegkqpRuLLpsa3xUvz494dFqq6PUioy70R1L
wfXRUXscmtUhWqKJgKavnYdl3NyDB1a+avT1Ze6ESAECsCLEdOhpW6hvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOxn07cczzXI9D9LZb0xWzkl4DLMB8GA1UdIwQY
MBaAFEKxr5ZExntWifwMpGqu0WksSObMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXJHdmxrVEdlMWFKX0F5a2FxN1JhU3hJNXN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xMTVmNTktMzg2OS00ZTExLWEwZDQt
ZjJiNzFmNDNhMzE2LzEvUXJHdmxrVEdlMWFKX0F5a2FxN1JhU3hJNXN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xMTVmNTktMzg2OS00ZTExLWEwZDQtZjJiNzFmNDNhMzE2
LzEvUXJHdmxrVEdlMWFKX0F5a2FxN1JhU3hJNXN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKFHzezy
EobyzzFzbjAbzRZj3a8+tW2Eq4XYEUNRnxuKF+KoAiF2TPigFX6zULeI7jgWMP/P
A6oGvuu2+xLnCn419d+am57zRqWFw/cKa3tsVORduSPxa5KIjyYggzSWblpwWyGJ
uKugAVjdg+TtNLBJfABh/HWTe5to7OPCRS/eT/EZZ154YY65NqEyDvNrBZrkOW/i
tUz1ZE0Q0HVWcO55YZ/cbuaIss+MWbJ0XafYPvTymFkgV/27gz1u0fnJNcE43YV3
OV05kOCD7gVtmJDh+5ZeWvljtoNtUn3f0inkNZm89zQc/nC+90dfPpnUJS1SPCEn
tYgtgHVcXZvyZA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:57:13 2026 by rpki-client