Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: 6PrHXawas2D+Zg3zlfUNkcwdnQnJ0S0i2Ga4AFEQkYI=
Subject key identifier: 21:D0:D2:E1:62:CB:69:6E:03:53:FE:98:36:78:AF:80:2B:6E:0F:D9
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 019D37521ABE8EA4D204431D0E08A1D5B93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 0C18
Signing time: Sun 29 Mar 2026 02:00:20 +0000
Manifest this update: Sun 29 Mar 2026 02:00:20 +0000
Manifest next update: Mon 30 Mar 2026 02:00:20 +0000
Files and hashes: 1: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: jLakYnnYL7YHL+ACcdDIbtP4ICw0lqGCqXltDpn/9q8=)
2: pDsTCJPX6I7CTPbbV1F-Yk_RqdI.roa (hash: k6qre4EFHCNOu0yYjc+l0cPyKi7Hs3Gqi9mcxhitEa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1a:be:8e:a4:d2:04:43:1d:0e:08:a1:d5:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Mar 29 02:00:20 2026 GMT
Not After : Mar 30 02:00:20 2026 GMT
Subject: CN=21d0d2e162cb696e0353fe983678af802b6e0fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1b:47:0a:f3:2f:30:cc:74:8d:81:73:3e:75:
5d:e8:59:71:67:1b:66:b9:5d:24:1a:07:f1:20:72:
2e:5f:b3:92:c0:1f:9f:95:3d:a4:bb:c6:50:e0:62:
39:38:9e:50:c2:11:1e:34:3f:01:51:30:0e:85:7f:
d7:32:f9:42:d5:37:cf:d3:f9:55:c4:7d:14:78:98:
62:15:79:2d:9d:05:0b:1a:20:34:ff:1c:cb:20:2f:
1a:61:28:e5:de:f4:9b:58:27:b2:8b:4d:be:9b:93:
26:db:e9:a5:ce:c6:e0:28:e8:c6:5a:ad:2b:f0:30:
0b:43:a4:9e:4e:d3:e1:41:b6:f8:b5:86:eb:46:cd:
89:58:64:0f:14:1b:cd:49:21:36:6a:af:4c:95:ce:
6f:a4:db:42:c5:38:33:52:d4:67:f3:90:ba:63:46:
ab:fd:1c:87:af:b4:f6:d4:9e:a6:57:24:af:28:dc:
97:73:02:4c:1b:a0:9e:bd:7e:be:7c:f3:48:ac:a5:
d0:5b:2d:74:22:7b:c5:e6:2c:89:b0:a0:98:be:11:
63:70:50:47:fa:d9:d9:b1:9e:ee:c9:40:fc:3a:9d:
ea:7a:5b:90:5a:81:48:70:da:90:60:9e:67:ce:fa:
ac:66:27:98:4b:a3:96:1d:4c:bd:0d:77:b2:b9:4e:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:D2:E1:62:CB:69:6E:03:53:FE:98:36:78:AF:80:2B:6E:0F:D9
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:31:ed:fb:8e:17:90:79:8c:5c:10:5b:7e:c7:1d:70:a3:96:
a8:f2:4b:b2:26:06:fc:b3:95:4c:fe:e5:6e:3c:c7:f1:09:5d:
64:11:89:81:10:80:78:60:2e:0b:b5:80:aa:0b:dc:db:a8:38:
3e:12:cd:2c:94:c9:ad:94:5d:68:16:6f:3e:19:4d:ac:12:be:
0a:02:05:8d:ca:50:22:4c:d1:cf:03:e4:c4:09:74:10:bf:81:
83:e0:74:ca:b8:b9:b5:b4:5c:24:bf:8a:21:85:47:47:f5:0b:
a6:d9:64:b8:6e:df:35:cc:90:08:25:56:85:00:48:c1:40:e6:
04:f8:81:94:de:35:d4:db:e7:d2:93:72:6d:90:aa:ac:2e:b8:
45:25:c1:06:a3:fc:5a:05:21:e6:ec:f9:89:81:a6:29:85:f1:
72:ab:ab:c9:23:33:51:a6:d5:9f:c6:9b:7c:c2:d4:74:fc:04:
bd:8b:83:22:27:92:ad:17:98:f3:8c:d1:f7:76:3a:51:2f:17:
4a:ba:37:b0:0b:54:e9:a0:61:c7:a3:8d:8e:80:e4:92:ab:99:
40:12:da:20:d1:1d:53:46:79:7d:7f:ff:22:bd:26:11:22:a4:
df:5f:eb:85:d3:63:31:c5:c4:7f:16:bf:a7:c6:69:81:65:5f:
f0:2e:bd:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uhq+jqTSBEMdDgih1bk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjE3YTJkNTEzYTlmYjBmY2UxYTFjZmMyYjNjMDVjMDE4
YmQ4YzEwHhcNMjYwMzI5MDIwMDIwWhcNMjYwMzMwMDIwMDIwWjAzMTEwLwYDVQQD
EygyMWQwZDJlMTYyY2I2OTZlMDM1M2ZlOTgzNjc4YWY4MDJiNmUwZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xtHCvMvMMx0jYFzPnVd6FlxZxtm
uV0kGgfxIHIuX7OSwB+flT2ku8ZQ4GI5OJ5QwhEeND8BUTAOhX/XMvlC1TfP0/lV
xH0UeJhiFXktnQULGiA0/xzLIC8aYSjl3vSbWCeyi02+m5Mm2+mlzsbgKOjGWq0r
8DALQ6SeTtPhQbb4tYbrRs2JWGQPFBvNSSE2aq9Mlc5vpNtCxTgzUtRn85C6Y0ar
/RyHr7T21J6mVySvKNyXcwJMG6CevX6+fPNIrKXQWy10InvF5iyJsKCYvhFjcFBH
+tnZsZ7uyUD8Op3qeluQWoFIcNqQYJ5nzvqsZieYS6OWHUy9DXeyuU67/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHQ0uFiy2luA1P+mDZ4r4Arbg/ZMB8GA1UdIwQY
MBaAFEIhei1ROp+w/OGhz8KzwFwBi9jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYt
ZjQxZDZjMGM4NGI2LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYtZjQxZDZjMGM4NGI2
LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDHt+44X
kHmMXBBbfscdcKOWqPJLsiYG/LOVTP7lbjzH8QldZBGJgRCAeGAuC7WAqgvc26g4
PhLNLJTJrZRdaBZvPhlNrBK+CgIFjcpQIkzRzwPkxAl0EL+Bg+B0yri5tbRcJL+K
IYVHR/ULptlkuG7fNcyQCCVWhQBIwUDmBPiBlN411Nvn0pNybZCqrC64RSXBBqP8
WgUh5uz5iYGmKYXxcqurySMzUabVn8abfMLUdPwEvYuDIieSrReY84zR93Y6US8X
Sro3sAtU6aBhx6ONjoDkkquZQBLaINEdU0Z5fX//Ir0mESKk31/rhdNjMcXEfxa/
p8ZpgWVf8C691w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:12 2026 by rpki-client