Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: QT9rmpPgM7SLiP9h/K9RiXAiUCZcZuyhB1g/H5zBkWk=
Subject key identifier: E7:81:D3:F0:11:4F:6B:61:5A:1A:04:29:50:A5:FD:C6:36:F2:3D:DD
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 019D38D3A0437C2FB3AFB13EE00BA590D625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 046A
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: RAZK0vX1khIMTO0z1dFlFTB3aff0WFCTbcPLuOFj6i4=)
2: onU8z40HzXbnWY9IaUiQLwKDFGU.roa (hash: JmAau5mAfXMJlxpYOlZN7re/iLo9qI2ZxQ8BfJtKX+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a0:43:7c:2f:b3:af:b1:3e:e0:0b:a5:90:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=e781d3f0114f6b615a1a042950a5fdc636f23ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:ee:a1:41:ac:77:45:9c:72:18:67:87:1c:
53:c3:a4:d5:cb:d0:5e:90:0b:7e:22:54:95:7b:6a:
d0:e1:fb:cf:65:81:83:46:b4:dc:44:ec:82:23:44:
38:a7:90:34:a2:b4:42:1d:7b:d8:46:b7:9b:d4:ff:
6e:82:71:49:fa:09:8b:41:8e:c1:23:10:30:69:25:
85:e5:d0:76:70:79:95:7c:5e:d5:3c:25:1b:7c:19:
10:d0:40:5b:42:e1:52:b2:64:70:15:7a:b9:d9:2d:
1c:11:40:a5:63:72:d4:0f:c5:9e:8f:6f:eb:82:a8:
3e:c3:26:03:d4:22:b2:6f:cd:32:24:24:ba:99:08:
48:5d:03:0c:97:05:10:ef:34:f1:f5:12:51:da:2a:
b4:b3:7a:18:b7:cb:ab:f2:81:24:cf:c0:9f:a3:2b:
b5:2f:2f:e0:0e:ef:1a:48:fd:1c:a9:e0:dd:db:d7:
d0:54:e4:b4:c9:27:15:fd:5f:05:4f:7b:8e:d5:49:
75:ab:6f:8f:11:51:03:b6:ab:4d:25:3d:cb:1b:a9:
d0:71:3d:31:c5:98:00:d9:b7:7a:9e:c6:ef:22:3c:
e2:e7:05:4d:d3:42:7e:3a:07:dc:a9:13:e9:36:4c:
e2:06:1d:5f:7c:96:b7:e8:c6:de:c0:9e:c2:a0:62:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:D3:F0:11:4F:6B:61:5A:1A:04:29:50:A5:FD:C6:36:F2:3D:DD
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:be:59:14:47:e9:9d:bb:fa:67:00:d7:cc:9b:2f:01:3b:37:
d9:27:33:8f:c1:0c:aa:38:12:32:91:48:c6:70:77:b6:46:9c:
f2:68:7c:38:b5:31:8a:fe:63:f3:74:8c:01:19:5e:3c:67:34:
0a:65:3d:91:b1:61:a7:87:30:2e:fb:45:74:f2:b4:a0:3d:50:
bc:7a:41:3d:c6:0d:81:94:76:9e:d5:b0:08:23:87:37:b5:e6:
1a:9b:c8:2c:99:fb:a1:02:69:47:c0:e6:12:51:91:44:9a:aa:
8c:1d:3f:08:db:db:b7:67:37:b2:20:80:b0:ff:1c:b8:77:0c:
1a:e6:32:7b:e3:18:03:f7:7c:16:97:0f:13:2b:c9:20:1e:53:
d8:33:11:77:f5:ed:aa:46:d2:4a:a2:66:8f:86:47:fc:96:88:
68:92:96:75:c3:d9:e2:6a:52:c6:ba:0d:92:1e:5e:2c:b0:b2:
94:e7:10:ae:18:c1:6b:28:ab:16:fd:0e:ad:54:99:1f:08:4b:
b3:6e:fc:c1:a0:89:b8:e1:e1:ea:a7:f8:f7:36:38:13:82:99:
26:52:1e:c4:d9:6d:cb:11:61:eb:86:0f:0a:b8:e9:dc:f1:e5:
c4:7a:c9:f1:d8:4e:40:d4:09:30:2e:3c:b5:3e:88:12:2b:f2:
07:6c:57:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0406BDfC+zr7E+4AulkNYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl
ZDEzOWIwHhcNMjYwMzI5MDkwMTI2WhcNMjYwMzMwMDkwMTI2WjAzMTEwLwYDVQQD
EyhlNzgxZDNmMDExNGY2YjYxNWExYTA0Mjk1MGE1ZmRjNjM2ZjIzZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraTuoUGsd0WcchhnhxxTw6TVy9Be
kAt+IlSVe2rQ4fvPZYGDRrTcROyCI0Q4p5A0orRCHXvYRreb1P9ugnFJ+gmLQY7B
IxAwaSWF5dB2cHmVfF7VPCUbfBkQ0EBbQuFSsmRwFXq52S0cEUClY3LUD8Wej2/r
gqg+wyYD1CKyb80yJCS6mQhIXQMMlwUQ7zTx9RJR2iq0s3oYt8ur8oEkz8Cfoyu1
Ly/gDu8aSP0cqeDd29fQVOS0yScV/V8FT3uO1Ul1q2+PEVEDtqtNJT3LG6nQcT0x
xZgA2bd6nsbvIjzi5wVN00J+OgfcqRPpNkziBh1ffJa36MbewJ7CoGIxYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeB0/ART2thWhoEKVCl/cY28j3dMB8GA1UdIwQY
MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct
MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj
LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApL5ZFEfp
nbv6ZwDXzJsvATs32Sczj8EMqjgSMpFIxnB3tkac8mh8OLUxiv5j83SMARlePGc0
CmU9kbFhp4cwLvtFdPK0oD1QvHpBPcYNgZR2ntWwCCOHN7XmGpvILJn7oQJpR8Dm
ElGRRJqqjB0/CNvbt2c3siCAsP8cuHcMGuYye+MYA/d8FpcPEyvJIB5T2DMRd/Xt
qkbSSqJmj4ZH/JaIaJKWdcPZ4mpSxroNkh5eLLCylOcQrhjBayirFv0OrVSZHwhL
s278waCJuOHh6qf49zY4E4KZJlIexNltyxFh64YPCrjp3PHlxHrJ8dhOQNQJMC48
tT6IEivyB2xX5g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:38 2026 by rpki-client