Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: 7+jF2gvkvrqbRTrVKSZGbslT+gjw1dYQ46DHE/jUASg=
Subject key identifier: 63:2A:0E:E2:88:69:99:CD:F6:0E:84:E5:AA:23:62:4C:F1:F4:21:6F
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019D38D37BF9B71E487E908F4BDB8F0AC2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 0979
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: Zq0MFv-zigl29QjEhRxZZ3ciMl8.roa (hash: hYDRJ/YZvWpX6EoU2ePQIZV0D6A8L2Y7jJBr+AftG3w=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: eDMd0BsmDeOMoNvCkN54PPMUUBcul5UglpoBsK7F+oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7b:f9:b7:1e:48:7e:90:8f:4b:db:8f:0a:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=632a0ee2886999cdf60e84e5aa23624cf1f4216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:bf:8c:47:3e:df:5c:59:92:3a:96:78:5b:
76:eb:3f:56:15:24:84:cb:02:d2:a0:4b:d9:aa:4f:
85:4d:1b:a6:69:02:0f:ae:8f:4c:82:ea:9d:61:25:
e5:8b:02:95:25:71:0c:bb:47:2a:b9:2c:a3:6a:40:
56:6c:eb:8d:d9:b0:07:26:92:15:39:2b:1f:87:aa:
40:aa:fb:5c:65:2d:7d:b1:9b:01:55:8a:85:72:ad:
f9:45:ab:ed:10:a3:82:1a:d5:bc:dd:0f:07:e0:1c:
a7:10:f9:3c:c4:59:b8:61:11:36:b2:0d:cc:8a:98:
ab:91:3a:6e:b8:0e:07:99:d0:e5:93:4a:c9:06:17:
b8:1b:d9:36:b7:56:76:47:e5:e2:a8:18:78:28:de:
66:4d:9f:6c:68:21:20:bf:eb:6d:2d:d7:a7:33:27:
22:dd:f5:67:a6:96:ce:87:e5:62:80:f4:0b:ef:20:
d5:c8:69:d5:f4:d1:ef:53:fb:b4:bd:9e:71:a0:86:
4d:4d:fe:d6:eb:ec:6f:18:04:09:bf:8c:8b:e6:6c:
43:1e:e6:1d:2f:0b:91:ac:e4:3e:f7:d3:3e:07:90:
60:42:5c:f7:1d:27:a1:f5:a2:ef:c7:8f:7a:f7:82:
3b:83:d8:77:8a:fe:8e:ff:1e:80:fb:71:06:22:a2:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:0E:E2:88:69:99:CD:F6:0E:84:E5:AA:23:62:4C:F1:F4:21:6F
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ac:92:b7:0e:41:85:b8:0b:d7:67:82:bc:e2:2c:c3:10:cc:
7e:17:fc:7f:b0:ad:88:19:12:60:64:1f:64:0d:2d:d5:91:cd:
1f:56:22:59:6f:85:04:d0:33:52:a9:c7:8e:e8:6b:6d:19:68:
af:2a:ee:ad:cd:73:c7:71:bb:37:16:0c:90:f6:8f:e8:44:fd:
6e:ee:d3:30:80:16:7c:70:80:64:ff:d3:28:70:94:21:b1:c2:
54:0b:ca:bb:ba:b4:01:33:fc:ac:20:46:2c:79:77:49:69:49:
c1:37:f2:39:39:3a:e6:a3:72:e8:7e:61:fe:ac:ce:9b:68:46:
ff:2f:4d:07:0f:cb:37:05:ea:c5:d5:18:f4:1d:21:8e:a5:99:
49:52:78:25:f9:be:7c:e2:3d:cc:98:23:57:b7:d9:04:79:a8:
b4:e8:98:62:28:53:3a:df:8a:45:c8:1c:75:95:57:9b:bc:9e:
40:ec:4c:ca:e9:8c:11:c6:20:7f:74:6c:cc:ce:2f:a0:76:fd:
b9:c8:87:03:cf:87:64:aa:6a:6c:c0:fa:16:9b:d1:1b:d4:87:
26:e0:1c:7f:e5:9b:9b:92:e6:9d:ce:68:89:bb:bb:37:ef:2a:
c0:33:10:3a:62:6a:2a:c7:3a:1a:ee:ab:26:5c:8e:f4:83:59:
b8:3c:7e:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403v5tx5IfpCPS9uPCsLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2FkOWE5NzdiZjhiNmI0MGYwYjhlOTk4ZTU3ODdjNmFl
NjQxYzAwHhcNMjYwMzI5MDkwMTE2WhcNMjYwMzMwMDkwMTE2WjAzMTEwLwYDVQQD
Eyg2MzJhMGVlMjg4Njk5OWNkZjYwZTg0ZTVhYTIzNjI0Y2YxZjQyMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkW/jEc+31xZkjqWeFt26z9WFSSE
ywLSoEvZqk+FTRumaQIPro9MguqdYSXliwKVJXEMu0cquSyjakBWbOuN2bAHJpIV
OSsfh6pAqvtcZS19sZsBVYqFcq35RavtEKOCGtW83Q8H4BynEPk8xFm4YRE2sg3M
ipirkTpuuA4HmdDlk0rJBhe4G9k2t1Z2R+XiqBh4KN5mTZ9saCEgv+ttLdenMyci
3fVnppbOh+VigPQL7yDVyGnV9NHvU/u0vZ5xoIZNTf7W6+xvGAQJv4yL5mxDHuYd
LwuRrOQ+99M+B5BgQlz3HSeh9aLvx49694I7g9h3iv6O/x6A+3EGIqL+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMqDuKIaZnN9g6E5aojYkzx9CFvMB8GA1UdIwQY
MBaAFKnK2al3v4trQPC46ZjleHxq5kHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjIwMDMtOTIxMC00NGJiLThhMjct
ZGIzZWM3NWZhMjBjLzEvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zZjIwMDMtOTIxMC00NGJiLThhMjctZGIzZWM3NWZhMjBj
LzEvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIayStw5B
hbgL12eCvOIswxDMfhf8f7CtiBkSYGQfZA0t1ZHNH1YiWW+FBNAzUqnHjuhrbRlo
ryrurc1zx3G7NxYMkPaP6ET9bu7TMIAWfHCAZP/TKHCUIbHCVAvKu7q0ATP8rCBG
LHl3SWlJwTfyOTk65qNy6H5h/qzOm2hG/y9NBw/LNwXqxdUY9B0hjqWZSVJ4Jfm+
fOI9zJgjV7fZBHmotOiYYihTOt+KRcgcdZVXm7yeQOxMyumMEcYgf3RszM4voHb9
uciHA8+HZKpqbMD6FpvRG9SHJuAcf+Wbm5Lmnc5oibu7N+8qwDMQOmJqKsc6Gu6r
JlyO9INZuDx+Ww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:55 2026 by rpki-client