Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: wcWoC2OvOioH57H8cQ2XDF3ZTJBy5NZBDaaAIf3TlGI=
Subject key identifier: C8:71:02:D5:48:A4:AD:DA:57:36:B2:E3:BC:43:E3:1D:43:D9:F3:0D
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 019D2695BCC7364506C4B30E889B2A8E106E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 164C
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: /Gu3azzncIu7VGiX4Ufcmusb6WVXyuv6BIB+0Xil7+U=)
2: i-5JU6m0HCD3U3xlIXpYe2CvZ6s.roa (hash: DdvpLWQk/bI8gzJCBKoMFQlNjo/QKF7hqu6rxtSiFmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bc:c7:36:45:06:c4:b3:0e:88:9b:2a:8e:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=c87102d548a4adda5736b2e3bc43e31d43d9f30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:94:35:0c:fc:67:ae:b7:28:50:dc:e7:67:
5f:d4:c7:f9:27:52:ea:72:31:c8:c6:f1:bc:fd:01:
38:3d:3f:e5:d7:ac:24:24:6a:8f:81:9e:54:5d:7d:
f5:cd:07:85:95:31:d5:b3:1a:b1:43:f5:34:bf:ff:
97:73:10:b2:f0:00:53:c7:af:37:35:4b:e0:b7:c2:
dd:0a:50:ad:e6:93:70:b9:ac:36:85:a8:94:cc:23:
e9:64:32:95:95:32:71:4c:e3:45:25:fb:16:78:59:
1f:5b:7c:25:31:1e:6c:a7:9e:02:73:bb:ba:16:ed:
2e:7f:82:fa:f8:1f:26:be:89:d4:26:36:72:61:84:
62:31:20:c6:d5:35:b7:fb:d8:33:46:35:78:9d:07:
d8:95:7a:92:23:d1:74:c2:5e:8f:75:a1:be:15:5e:
ed:09:44:8c:ee:1a:0a:71:09:dc:d6:c9:79:f3:74:
59:32:f5:60:ee:a3:01:79:46:e4:0b:60:d8:eb:0a:
a2:bb:4d:85:66:a8:f3:e2:a0:f2:1a:22:10:a4:6f:
a4:4b:7d:91:a0:6f:0c:b6:fe:33:fe:4b:61:c1:70:
c0:01:7d:c8:c2:ec:64:46:2b:31:1c:1d:40:e7:a4:
f4:a7:8e:88:db:f4:d7:6c:b1:78:da:1e:8a:02:a5:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:02:D5:48:A4:AD:DA:57:36:B2:E3:BC:43:E3:1D:43:D9:F3:0D
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a8:80:3a:44:bb:10:2f:d5:54:60:4b:e6:f5:d6:79:99:16:
b5:80:02:dd:ab:1c:66:ea:d0:73:2b:99:6b:48:00:20:85:47:
c4:29:01:17:96:ab:97:a4:c4:af:33:4a:e1:20:5d:8c:25:7f:
bc:71:d8:9c:8d:b8:fe:84:dd:5e:16:f6:cc:7c:3c:dd:bd:15:
dd:f2:c5:9c:ec:20:cd:86:d3:1d:cd:f6:f8:c7:78:8a:10:fc:
66:9c:7d:a1:53:0e:de:54:b7:61:25:b2:06:2a:da:88:4b:a7:
12:36:0e:fa:1d:0b:f2:0f:43:51:17:bd:41:b3:1c:ab:61:10:
9c:4d:67:7a:4d:cf:84:71:4f:94:9a:3e:72:17:35:b6:a2:ff:
d1:be:70:1b:8a:b3:51:fa:cb:87:dc:3b:f9:d7:04:6f:e7:b2:
11:32:f3:df:98:1f:7f:97:0c:68:62:5d:e2:7c:79:08:2e:a1:
5a:5e:02:25:88:41:dd:9a:4a:ac:90:3b:dd:1f:57:d6:40:86:
b0:6a:5b:e2:1b:39:1a:b5:5e:6e:86:bd:0d:b8:fe:8c:e2:06:
ae:2b:cc:d5:c3:bd:54:29:36:67:31:cb:87:2d:25:e2:25:8f:
02:42:3f:5a:10:b7:05:d2:40:83:bf:2a:63:8c:09:9d:d2:16:
51:a8:79:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlbzHNkUGxLMOiJsqjhBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2M3ZTg1ZGU0OWQ3OTI0Y2U1MGQzZDZhOWU1MmU5ZTlj
MmUzMTIwHhcNMjYwMzI1MjAwMDQwWhcNMjYwMzI2MjAwMDQwWjAzMTEwLwYDVQQD
EyhjODcxMDJkNTQ4YTRhZGRhNTczNmIyZTNiYzQzZTMxZDQzZDlmMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2eUNQz8Z663KFDc52df1Mf5J1Lq
cjHIxvG8/QE4PT/l16wkJGqPgZ5UXX31zQeFlTHVsxqxQ/U0v/+XcxCy8ABTx683
NUvgt8LdClCt5pNwuaw2haiUzCPpZDKVlTJxTONFJfsWeFkfW3wlMR5sp54Cc7u6
Fu0uf4L6+B8mvonUJjZyYYRiMSDG1TW3+9gzRjV4nQfYlXqSI9F0wl6PdaG+FV7t
CUSM7hoKcQnc1sl583RZMvVg7qMBeUbkC2DY6wqiu02FZqjz4qDyGiIQpG+kS32R
oG8Mtv4z/kthwXDAAX3IwuxkRisxHB1A56T0p46I2/TXbLF42h6KAqUckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhxAtVIpK3aVzay47xD4x1D2fMNMB8GA1UdIwQY
MBaAFEA8foXeSdeSTOUNPWqeUunpwuMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0Yzct
MGQ2ZGNiMGVjZmNmLzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0YzctMGQ2ZGNiMGVjZmNm
LzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqiAOkS7
EC/VVGBL5vXWeZkWtYAC3ascZurQcyuZa0gAIIVHxCkBF5arl6TErzNK4SBdjCV/
vHHYnI24/oTdXhb2zHw83b0V3fLFnOwgzYbTHc32+Md4ihD8Zpx9oVMO3lS3YSWy
BiraiEunEjYO+h0L8g9DURe9QbMcq2EQnE1nek3PhHFPlJo+chc1tqL/0b5wG4qz
UfrLh9w7+dcEb+eyETLz35gff5cMaGJd4nx5CC6hWl4CJYhB3ZpKrJA73R9X1kCG
sGpb4hs5GrVeboa9Dbj+jOIGrivM1cO9VCk2ZzHLhy0l4iWPAkI/WhC3BdJAg78q
Y4wJndIWUah5BQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:39 2026 by rpki-client