Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
File: QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft (raw, json)
Hash identifier: igju710jvUf5MeUVJ3vETaXrpct7rmZgGosoblulikI=
Subject key identifier: 3D:99:EC:B3:08:CD:7A:50:8E:7D:2D:68:49:1C:D2:CC:66:19:8B:E3
Authority key identifier: 41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
Certificate issuer: /CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Certificate serial: 01A12AD69766A2FB37845A28644D2B5C930A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
Manifest number: 023A
Signing time: Sun 11 Oct 2026 12:01:08 +0000
Manifest this update: Sun 11 Oct 2026 12:01:08 +0000
Manifest next update: Mon 12 Oct 2026 12:01:08 +0000
Files and hashes: 1: QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl (hash: m/BFEMn8T818GlIDEXSJO6fCLHKEtbhWtfIoVUdA7NI=)
2: qWIzmVr_aMvnz8_UVm4flIAA-A0.roa (hash: s3nWLOdDzZcWov+Frxv6A1ZD6t4lQ0e8G2c/DIWlHD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:97:66:a2:fb:37:84:5a:28:64:4d:2b:5c:93:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Validity
Not Before: Oct 11 12:01:08 2026 GMT
Not After : Oct 12 12:01:08 2026 GMT
Subject: CN=3d99ecb308cd7a508e7d2d68491cd2cc66198be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:e8:0a:57:ab:b8:85:87:a9:fa:f6:f6:9a:
db:72:28:94:62:84:0f:25:65:3a:f9:c4:9e:bf:4f:
79:7d:b5:ac:af:e6:e2:4e:db:51:b9:02:c2:57:da:
5d:4f:1c:53:34:77:a1:8c:b4:b0:57:86:69:80:88:
ef:f9:35:9d:cf:92:52:fa:c3:f8:03:63:1f:ed:29:
7f:8a:b0:88:d9:30:eb:8c:fa:f6:d6:44:31:74:c9:
bf:e3:c5:61:33:5a:4b:39:e2:88:ff:c6:4d:a3:a2:
ad:29:18:5b:b2:60:e3:89:e2:c1:e1:dd:2f:91:e9:
7e:0f:16:b6:8b:0d:fe:9f:d2:76:87:b8:55:5e:54:
36:4e:69:74:95:fc:18:91:3c:93:12:e5:18:ce:99:
56:2f:32:ec:2a:e4:72:1b:b2:8e:ef:3f:63:b0:22:
9b:9f:5a:ae:2b:b9:88:14:57:c5:62:35:de:d1:57:
ed:8d:de:25:9e:1d:31:cf:47:9a:84:49:f0:8a:14:
59:76:44:8d:d7:be:46:ce:76:aa:27:43:a3:bc:89:
59:e5:69:f9:04:ca:ca:09:13:88:0c:2c:f5:5c:a3:
a8:26:87:a2:ea:8d:a0:a2:e5:c5:7d:45:7b:88:aa:
2c:f0:a9:df:ad:d9:8e:8a:05:b4:d2:6a:3a:bf:d8:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:EC:B3:08:CD:7A:50:8E:7D:2D:68:49:1C:D2:CC:66:19:8B:E3
X509v3 Authority Key Identifier:
keyid:41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:df:8e:4c:a3:39:59:dd:24:9b:64:2f:bb:f8:61:8c:51:83:
b3:30:41:e4:10:1c:d1:b5:d9:da:30:c9:a5:4c:c4:8e:20:75:
51:e6:a6:3f:9a:92:5b:4f:4e:55:20:3b:1d:11:a7:b9:20:ed:
e5:98:a3:b3:b6:f3:30:48:d2:e2:b4:43:f2:b7:38:df:a7:7e:
d7:b9:43:67:24:7c:95:90:0a:6f:74:aa:09:2c:0f:7b:7f:39:
30:b1:2a:92:41:30:3c:62:70:f7:96:a7:05:e3:75:31:72:91:
99:a8:c9:6e:19:86:30:ab:3b:61:45:21:98:09:72:d9:c3:46:
00:1e:b5:1f:48:56:62:fd:48:e2:27:b0:e4:df:d5:ef:f9:4d:
22:13:2d:30:9c:9c:66:a1:e2:41:f1:71:9c:8f:50:3d:55:b9:
c8:24:29:17:cb:d6:35:17:c9:66:49:79:8d:62:a8:40:21:2a:
c5:b1:1c:92:db:62:c7:03:f7:87:eb:36:d4:10:e8:62:dc:e6:
6f:fc:a3:b9:e3:76:a3:d8:0b:9b:b9:97:30:1c:5f:29:35:85:
97:0d:2d:5c:fc:5b:b2:f5:a0:1b:b5:3f:9e:90:73:dd:c0:4d:
0c:13:97:a2:da:d4:19:92:04:14:32:e8:0b:3d:f3:20:ed:d4:
64:7a:78:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq1pdmovs3hFooZE0rXJMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWM1YjM1NDRiMThjMmNlNTc3ODQ3YmMxYjJhZGE1Mzkz
ODViMTkwHhcNMjYxMDExMTIwMTA4WhcNMjYxMDEyMTIwMTA4WjAzMTEwLwYDVQQD
EygzZDk5ZWNiMzA4Y2Q3YTUwOGU3ZDJkNjg0OTFjZDJjYzY2MTk4YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq43oCleruIWHqfr29prbciiUYoQP
JWU6+cSev095fbWsr+biTttRuQLCV9pdTxxTNHehjLSwV4ZpgIjv+TWdz5JS+sP4
A2Mf7Sl/irCI2TDrjPr21kQxdMm/48VhM1pLOeKI/8ZNo6KtKRhbsmDjieLB4d0v
kel+Dxa2iw3+n9J2h7hVXlQ2Tml0lfwYkTyTEuUYzplWLzLsKuRyG7KO7z9jsCKb
n1quK7mIFFfFYjXe0Vftjd4lnh0xz0eahEnwihRZdkSN175GznaqJ0OjvIlZ5Wn5
BMrKCROIDCz1XKOoJoei6o2gouXFfUV7iKos8KnfrdmOigW00mo6v9hh7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2Z7LMIzXpQjn0taEkc0sxmGYvjMB8GA1UdIwQY
MBaAFEFcWzVEsYws5XeEe8GyraU5OFsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hMWM1M2UtZGRiMi00ODU4LTgyNWMt
OGNhOGFjZWY1ZDVjLzEvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hMWM1M2UtZGRiMi00ODU4LTgyNWMtOGNhOGFjZWY1ZDVj
LzEvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsd+OTKM5
Wd0km2Qvu/hhjFGDszBB5BAc0bXZ2jDJpUzEjiB1UeamP5qSW09OVSA7HRGnuSDt
5Zijs7bzMEjS4rRD8rc436d+17lDZyR8lZAKb3SqCSwPe385MLEqkkEwPGJw95an
BeN1MXKRmajJbhmGMKs7YUUhmAly2cNGAB61H0hWYv1I4iew5N/V7/lNIhMtMJyc
ZqHiQfFxnI9QPVW5yCQpF8vWNRfJZkl5jWKoQCEqxbEckttixwP3h+s21BDoYtzm
b/yjueN2o9gLm7mXMBxfKTWFlw0tXPxbsvWgG7U/npBz3cBNDBOXotrUGZIEFDLo
Cz3zIO3UZHp4LQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:35:20 2026 by rpki-client