Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: X+lxVpFu68oUiQJGMI1jW2F80oBZ3TqSDVoTQAB/gdo=
Subject key identifier: 23:D0:0B:2B:53:EB:D4:8C:AE:D8:35:01:6F:3D:13:22:C4:80:7C:AE
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 019D390989CA1B4F14D8F5ED5FF3C1D6F044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 1446
Signing time: Sun 29 Mar 2026 10:00:19 +0000
Manifest this update: Sun 29 Mar 2026 10:00:19 +0000
Manifest next update: Mon 30 Mar 2026 10:00:19 +0000
Files and hashes: 1: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: XIoeRLpl7ohQc/89oDqZuBpKtbihVBNYu9Ajwr1j6Uo=)
2: S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa (hash: KcKMRfjEJimpg3wHDTAgPJLLtBV5jQ0bUr2ldkt0t+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:89:ca:1b:4f:14:d8:f5:ed:5f:f3:c1:d6:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Mar 29 10:00:19 2026 GMT
Not After : Mar 30 10:00:19 2026 GMT
Subject: CN=23d00b2b53ebd48caed835016f3d1322c4807cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:88:90:c6:b8:fd:4a:6d:37:7f:b8:8a:39:
c0:77:6d:84:7d:23:4e:70:39:ce:63:3a:77:ed:bf:
9e:55:2b:3d:ed:3a:53:cd:de:8b:44:37:69:5e:76:
e2:2d:02:76:f6:5d:8a:e9:7f:44:e4:20:e0:02:a7:
75:67:d4:29:a6:14:e8:05:d0:02:65:45:32:1f:e1:
a4:a2:8c:09:e0:4f:fc:1e:a0:42:11:58:ed:e4:29:
9a:83:a1:9b:b7:9b:f7:59:b8:2d:b8:6f:bf:36:cd:
3f:98:91:0a:d8:01:54:14:35:13:1f:71:ae:64:17:
a6:09:13:16:68:e4:32:c6:cc:b3:6e:9b:b6:86:aa:
2d:bd:b7:17:96:28:ef:3e:ee:76:8c:95:fe:ec:5c:
a7:47:a8:e0:ef:ce:5b:f9:6b:c8:3a:de:8b:95:58:
9c:6c:68:32:b4:ce:fe:ef:34:3d:c2:1c:08:71:0e:
4b:bd:b3:58:96:73:42:27:1a:ba:6f:df:2f:c5:4f:
83:6e:1f:e0:06:2c:a5:67:01:dd:2f:9c:0d:00:b6:
56:55:92:78:ed:bb:e1:22:46:79:8b:36:c9:62:2b:
a1:b0:3c:2f:cf:d6:ba:5f:db:6d:0e:42:79:26:fd:
cf:60:45:e0:43:f0:7d:59:05:92:c6:d1:75:99:8d:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:0B:2B:53:EB:D4:8C:AE:D8:35:01:6F:3D:13:22:C4:80:7C:AE
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6e:b5:d6:57:50:0f:f7:fa:8a:d2:1f:fe:0b:86:f7:d1:1f:
96:9e:f4:94:b5:0c:3a:d5:0d:28:96:84:11:f2:9d:27:bf:e9:
b0:c1:5e:f1:91:2b:32:a1:3b:ea:93:a7:16:9a:2e:ec:c4:14:
e0:b7:c1:c5:36:e8:ea:33:97:53:ca:11:d7:53:54:34:64:a0:
66:dd:4c:fd:87:96:7c:4d:3a:80:b5:3a:fc:22:c4:a8:fd:eb:
3f:7e:c2:dc:6f:37:6c:08:76:a6:8a:ee:71:b4:57:d6:36:fb:
df:ae:e2:20:0a:a9:c5:a4:84:6f:81:20:99:42:22:38:f2:1b:
7c:69:4d:2e:ff:0b:15:53:25:d9:31:94:1b:1d:09:f5:a5:bf:
bd:7b:bb:7a:18:fc:9b:af:a1:e6:7a:17:7b:1b:cf:e1:10:6c:
41:32:aa:5a:7e:e5:a9:63:65:18:22:3f:db:14:8c:48:41:0b:
9f:a7:41:97:3b:a0:39:7f:03:06:62:4b:33:e0:4f:41:1a:a1:
40:3e:cd:0c:f9:a9:e1:ec:18:52:54:89:6f:af:2b:42:43:42:
5a:ff:3b:88:9a:97:a7:10:4c:72:70:78:da:ed:ea:79:61:97:
e4:a2:f8:92:cb:8b:9b:65:8f:3b:4e:c9:1c:c1:bd:48:50:23:
85:63:aa:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CYnKG08U2PXtX/PB1vBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3
OTRhYTcwHhcNMjYwMzI5MTAwMDE5WhcNMjYwMzMwMTAwMDE5WjAzMTEwLwYDVQQD
EygyM2QwMGIyYjUzZWJkNDhjYWVkODM1MDE2ZjNkMTMyMmM0ODA3Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXiIkMa4/UptN3+4ijnAd22EfSNO
cDnOYzp37b+eVSs97TpTzd6LRDdpXnbiLQJ29l2K6X9E5CDgAqd1Z9QpphToBdAC
ZUUyH+GkoowJ4E/8HqBCEVjt5Cmag6Gbt5v3WbgtuG+/Ns0/mJEK2AFUFDUTH3Gu
ZBemCRMWaOQyxsyzbpu2hqotvbcXlijvPu52jJX+7FynR6jg785b+WvIOt6LlVic
bGgytM7+7zQ9whwIcQ5LvbNYlnNCJxq6b98vxU+Dbh/gBiylZwHdL5wNALZWVZJ4
7bvhIkZ5izbJYiuhsDwvz9a6X9ttDkJ5Jv3PYEXgQ/B9WQWSxtF1mY1nIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPQCytT69SMrtg1AW89EyLEgHyuMB8GA1UdIwQY
MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt
MzdhMjRlMDgxZjY4LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4
LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom611ldQ
D/f6itIf/guG99Eflp70lLUMOtUNKJaEEfKdJ7/psMFe8ZErMqE76pOnFpou7MQU
4LfBxTbo6jOXU8oR11NUNGSgZt1M/YeWfE06gLU6/CLEqP3rP37C3G83bAh2poru
cbRX1jb7367iIAqpxaSEb4EgmUIiOPIbfGlNLv8LFVMl2TGUGx0J9aW/vXu7ehj8
m6+h5noXexvP4RBsQTKqWn7lqWNlGCI/2xSMSEELn6dBlzugOX8DBmJLM+BPQRqh
QD7NDPmp4ewYUlSJb68rQkNCWv87iJqXpxBMcnB42u3qeWGX5KL4ksuLm2WPO07J
HMG9SFAjhWOqow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:02 2026 by rpki-client