Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: dcTNO9XCpsy/taItW6tddyZ7F70S0LK5TzypSXcqlT8=
Subject key identifier: 0F:33:06:7F:D3:CF:CD:E8:0A:33:92:CA:38:1F:2F:11:64:4C:D8:EC
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 019D3909873605B90A0ED1B1147A4907C45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0BB0
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: 4pyJdrKZyyaYWQA+Ptjh0N0Aue7P9lR5qJc1QnqadN8=)
2: Tky4vnXZioTC1TXQq96JWTokgHg.roa (hash: aDRCWx0v8/LaP/gIfUVdK0QiOW0vds7flVFVgoIFu/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:87:36:05:b9:0a:0e:d1:b1:14:7a:49:07:c4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=0f33067fd3cfcde80a3392ca381f2f11644cd8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:a5:95:73:3d:de:4c:c4:ff:b0:99:8e:db:
67:4b:8b:58:cb:3a:b6:7c:45:96:6c:7b:48:6c:29:
ca:0e:1f:4a:94:bd:66:ba:b0:42:bf:72:7d:79:60:
42:bb:96:3f:97:02:68:03:97:6f:b3:80:de:31:7a:
04:e9:04:ac:e0:13:65:a4:2f:b1:6a:08:82:76:79:
1e:59:45:2a:8b:17:e4:29:cd:4c:c0:73:c0:db:3f:
45:8e:0c:50:8c:b5:c3:20:e6:2e:82:bf:cd:79:ee:
25:65:e8:66:77:f0:d2:fa:ea:7b:51:b6:c5:53:34:
94:12:c3:6a:33:b3:2e:f9:ee:d1:a1:9d:94:7b:22:
73:a5:c7:ed:c6:01:77:4d:3d:be:4d:d7:39:a9:26:
e9:4c:41:03:82:f4:c2:61:0e:33:ec:8f:09:31:6c:
7e:19:17:f4:fc:df:9b:47:27:9f:7a:6d:8c:dd:13:
bb:2c:98:5b:b6:e8:79:00:01:38:c7:88:c1:a3:cf:
ef:a0:db:f5:ac:9d:a1:f5:98:30:a6:73:5e:51:d1:
f0:9c:ab:6f:af:06:eb:23:47:5a:ee:cf:9f:bf:54:
f6:23:de:79:8e:b4:84:79:db:13:7a:bb:b1:34:05:
12:df:5b:dd:f0:b2:e6:8d:7e:fd:c5:77:c8:69:49:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:33:06:7F:D3:CF:CD:E8:0A:33:92:CA:38:1F:2F:11:64:4C:D8:EC
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:1e:cd:7e:0f:59:7c:36:c2:ab:1e:6b:66:ac:8a:ac:51:
32:37:8d:05:89:cf:f9:73:39:58:bd:51:5e:42:31:a7:79:0e:
71:1a:e2:d6:4a:bd:27:99:9e:9d:09:a3:3b:78:71:64:6a:ae:
01:48:fc:a1:3b:1d:df:a5:9f:fa:94:c9:13:47:b2:b2:bc:33:
5c:24:92:e2:c7:30:5a:88:f7:98:04:66:ac:43:05:b2:ab:4e:
66:90:1d:8a:9e:48:8a:63:c8:67:50:0f:9e:bd:a3:ea:96:96:
82:ed:6f:be:37:7f:c0:d8:62:8d:fe:a2:1a:5d:98:f4:e9:cd:
03:d2:98:b7:b7:c4:a1:01:e6:32:0b:6d:7f:c8:42:2d:97:cd:
ef:80:17:dc:84:d9:e4:c4:8f:32:8a:f7:6b:86:6a:d8:36:0a:
31:15:38:17:0c:b9:a4:97:5c:0d:94:1c:cf:83:9f:e8:d0:09:
06:09:4a:70:e3:cd:8d:82:e4:20:3b:8a:f5:6e:5e:b4:4d:2b:
63:76:b7:87:81:c7:07:62:0d:eb:45:4f:f4:30:3f:17:ef:b3:
44:a3:03:6b:76:77:ee:c7:ba:74:45:ee:17:01:25:9c:ef:78:
00:41:63:8e:de:8c:81:dc:ac:e5:26:17:b2:ec:b2:b5:28:d7:
c0:52:75:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CYc2BbkKDtGxFHpJB8RfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzUzNWFhNmMzMTdiYTc2Y2NiODFiYmZlZTVkNDc0YjE5
M2U2ZTMwHhcNMjYwMzI5MTAwMDE4WhcNMjYwMzMwMTAwMDE4WjAzMTEwLwYDVQQD
EygwZjMzMDY3ZmQzY2ZjZGU4MGEzMzkyY2EzODFmMmYxMTY0NGNkOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXKllXM93kzE/7CZjttnS4tYyzq2
fEWWbHtIbCnKDh9KlL1murBCv3J9eWBCu5Y/lwJoA5dvs4DeMXoE6QSs4BNlpC+x
agiCdnkeWUUqixfkKc1MwHPA2z9FjgxQjLXDIOYugr/Nee4lZehmd/DS+up7UbbF
UzSUEsNqM7Mu+e7RoZ2UeyJzpcftxgF3TT2+Tdc5qSbpTEEDgvTCYQ4z7I8JMWx+
GRf0/N+bRyefem2M3RO7LJhbtuh5AAE4x4jBo8/voNv1rJ2h9ZgwpnNeUdHwnKtv
rwbrI0da7s+fv1T2I955jrSEedsTeruxNAUS31vd8LLmjX79xXfIaUk/RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8zBn/Tz83oCjOSyjgfLxFkTNjsMB8GA1UdIwQY
MBaAFEI1NapsMXunbMuBu/7l1HSxk+bjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEt
MDk5NTg3YzcxYmFiLzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEtMDk5NTg3YzcxYmFi
LzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHgezX4P
WXw2wqsea2asiqxRMjeNBYnP+XM5WL1RXkIxp3kOcRri1kq9J5menQmjO3hxZGqu
AUj8oTsd36Wf+pTJE0eysrwzXCSS4scwWoj3mARmrEMFsqtOZpAdip5IimPIZ1AP
nr2j6paWgu1vvjd/wNhijf6iGl2Y9OnNA9KYt7fEoQHmMgttf8hCLZfN74AX3ITZ
5MSPMor3a4Zq2DYKMRU4Fwy5pJdcDZQcz4Of6NAJBglKcOPNjYLkIDuK9W5etE0r
Y3a3h4HHB2IN60VP9DA/F++zRKMDa3Z37se6dEXuFwElnO94AEFjjt6Mgdys5SYX
suyytSjXwFJ1MQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:02 2026 by rpki-client