Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: jR63vntFVnUltnRLRsUXQF0ZOEJZMe/VK8N4QbZyIn0=
Subject key identifier: B0:71:4F:E0:34:A7:F3:6C:3B:F5:6A:1E:CD:9C:0A:83:0C:0E:94:CA
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 01A080AD6FEB825D708245B19135DE3E0470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 19D5
Signing time: Tue 08 Sep 2026 11:00:45 +0000
Manifest this update: Tue 08 Sep 2026 11:00:45 +0000
Manifest next update: Wed 09 Sep 2026 11:00:45 +0000
Files and hashes: 1: VyKqzxZ8-5ygWJNcg4AE05d6_mE.roa (hash: eTq1Nu+al+6xzFG/LttgMYk2x81Ow2Yalg2eI2MZJbI=)
2: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: acnsIB5jblaMEpNu6Ov06fbN2IVlOTpBVbTlIfC7+OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:ad:6f:eb:82:5d:70:82:45:b1:91:35:de:3e:04:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Sep 8 11:00:45 2026 GMT
Not After : Sep 9 11:00:45 2026 GMT
Subject: CN=b0714fe034a7f36c3bf56a1ecd9c0a830c0e94ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:91:46:b2:3b:ed:bf:c6:de:e5:a3:0f:4c:
0b:94:45:b7:65:7a:36:e4:d0:62:ec:4b:eb:46:1f:
31:2a:bc:a5:41:d0:9e:ab:9c:10:80:0d:d0:63:5b:
de:99:52:fe:8a:ab:bd:66:c8:ec:9a:8c:25:31:0d:
b9:a3:ad:f2:64:f8:6f:1a:7c:19:4e:d1:e4:39:3e:
73:be:26:ce:d4:cc:cf:12:cd:16:87:a5:09:6d:c7:
4a:92:27:38:76:e4:85:ce:dc:d1:17:c7:0c:1c:4b:
26:1e:13:60:cf:da:ec:d6:0b:35:16:2d:c0:9c:b6:
06:53:6c:1d:46:a1:8f:f6:1f:fd:da:09:6a:27:88:
a4:2e:9a:01:4b:99:25:cf:ed:30:44:43:26:30:bd:
1d:01:b7:12:08:60:23:4a:99:6d:f3:82:69:74:5c:
4b:1b:89:31:e6:45:c3:c0:1b:f2:c9:5b:2a:f1:fc:
3f:e1:7f:6a:a1:b6:56:64:e6:89:c5:f5:9a:67:fb:
dd:4f:a7:2e:be:03:f0:01:23:42:97:8e:a5:05:cb:
7d:87:8d:f0:e0:93:36:ec:d9:3e:48:60:17:49:61:
cb:c4:99:6a:9e:dd:ec:49:eb:b9:fa:34:e4:20:66:
d0:4b:89:02:23:57:1f:d0:9a:e7:39:cf:68:5e:75:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:71:4F:E0:34:A7:F3:6C:3B:F5:6A:1E:CD:9C:0A:83:0C:0E:94:CA
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:db:1a:4a:df:c8:44:cb:02:bb:58:7e:65:5d:68:70:b6:
e2:2a:d2:68:0c:7a:29:9c:14:7e:33:93:67:45:8f:30:70:ff:
63:fb:24:3e:73:bd:05:93:04:89:7e:94:8f:2e:b7:b1:7d:c4:
d1:f6:92:8f:9f:6b:26:fa:c8:8c:d0:22:36:69:4b:f3:b3:ef:
1e:15:27:6c:a1:61:1c:5b:48:d0:c1:56:c8:47:1f:2e:a1:69:
48:25:c7:37:96:89:bd:48:db:2a:b1:d2:be:bc:97:42:0a:c5:
ab:d4:9a:ab:85:c7:5d:90:a6:da:2a:54:4f:6e:b2:11:76:f5:
07:e4:7d:d4:45:f6:f6:79:3b:31:b2:df:ed:3b:80:5b:76:cb:
39:23:14:39:cd:a3:fb:9a:64:ff:ff:9a:ac:1b:57:9a:99:9a:
ea:47:a6:86:f8:3c:31:a7:56:b7:2d:ad:48:8c:d4:e3:65:29:
f4:82:f1:92:ed:93:ce:71:a7:96:1e:53:cd:e3:d6:9e:01:68:
af:a2:14:fd:34:9f:21:07:5a:51:a8:da:d5:7e:6d:f3:1f:f8:
8b:27:37:53:97:fd:4b:28:22:80:22:ae:3f:06:d6:55:9e:e3:
4b:e8:08:b1:81:f2:f3:b1:e7:a1:ca:67:b6:34:59:fa:00:e0:
33:ce:b3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCArW/rgl1wgkWxkTXePgRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZGZjODk4MTIzNDA1MDdhMmEyZTFlNzRkMTE4MjRkZWY4
MTNmMzkwHhcNMjYwOTA4MTEwMDQ1WhcNMjYwOTA5MTEwMDQ1WjAzMTEwLwYDVQQD
EyhiMDcxNGZlMDM0YTdmMzZjM2JmNTZhMWVjZDljMGE4MzBjMGU5NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyiRRrI77b/G3uWjD0wLlEW3ZXo2
5NBi7EvrRh8xKrylQdCeq5wQgA3QY1vemVL+iqu9ZsjsmowlMQ25o63yZPhvGnwZ
TtHkOT5zvibO1MzPEs0Wh6UJbcdKkic4duSFztzRF8cMHEsmHhNgz9rs1gs1Fi3A
nLYGU2wdRqGP9h/92glqJ4ikLpoBS5klz+0wREMmML0dAbcSCGAjSplt84JpdFxL
G4kx5kXDwBvyyVsq8fw/4X9qobZWZOaJxfWaZ/vdT6cuvgPwASNCl46lBct9h43w
4JM27Nk+SGAXSWHLxJlqnt3sSeu5+jTkIGbQS4kCI1cf0JrnOc9oXnVTpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBxT+A0p/NsO/VqHs2cCoMMDpTKMB8GA1UdIwQY
MBaAFKnfyJgSNAUHoqLh500Rgk3vgT85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGIt
NzA0NDAzZmZmODJlLzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGItNzA0NDAzZmZmODJl
LzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH7bGkrf
yETLArtYfmVdaHC24irSaAx6KZwUfjOTZ0WPMHD/Y/skPnO9BZMEiX6Ujy63sX3E
0faSj59rJvrIjNAiNmlL87PvHhUnbKFhHFtI0MFWyEcfLqFpSCXHN5aJvUjbKrHS
vryXQgrFq9Saq4XHXZCm2ipUT26yEXb1B+R91EX29nk7MbLf7TuAW3bLOSMUOc2j
+5pk//+arBtXmpma6kemhvg8MadWty2tSIzU42Up9ILxku2TznGnlh5TzePWngFo
r6IU/TSfIQdaUaja1X5t8x/4iyc3U5f9SygigCKuPwbWVZ7jS+gIsYHy87Hnocpn
tjRZ+gDgM86zPg==
-----END CERTIFICATE-----
Generated at Tue Sep 8 20:41:00 2026 by rpki-client