Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: 1VM2oHLbUi/U9KNAP5FqrbLdDFXW9JW8ng7YlKxpUSE=
Subject key identifier: 3A:04:74:6B:0A:0C:8F:A1:CA:CA:01:80:26:CE:7E:D8:E0:5A:B0:62
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019D270499265DEADFFE2E08D50961E4D90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0A53
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: fJF3NF6MR2gP0j6t9kxd935a7few2mXt9lDLrw84Uwk=)
2: RhhybVhgxehJpyQFfu1dQiF3RZc.roa (hash: vTXKPtYUm1UxDqfrm9GUHJ6eZM3EZfiTITZU7YFaPA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:99:26:5d:ea:df:fe:2e:08:d5:09:61:e4:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=3a04746b0a0c8fa1caca018026ce7ed8e05ab062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:88:4f:25:12:69:3d:d3:89:96:6d:ce:c1:
c9:45:e5:b3:fa:82:6c:77:41:de:88:cf:04:8a:a8:
6a:dd:18:34:7b:37:07:d6:d4:fe:93:b5:aa:0b:02:
c0:77:fc:5f:06:9a:43:a3:ae:4e:2c:4c:c7:b8:ef:
81:da:c3:b7:43:d6:ec:20:2a:3b:31:91:4a:85:38:
7b:c1:fd:31:42:f2:44:62:4f:ab:08:54:04:73:b4:
c5:d0:7f:c3:0a:6e:a8:19:17:c1:9b:66:85:87:38:
8e:d9:2d:4d:c5:4c:44:11:fc:fc:40:81:8f:f6:72:
e6:4f:d6:05:3b:ee:e5:c7:b6:07:3a:9e:90:df:b7:
4b:49:55:85:da:38:d9:f8:ba:bd:ff:7d:f6:96:a4:
52:9d:40:0d:df:0a:c0:4b:e6:21:15:f7:d4:d0:68:
80:b6:2e:48:41:d3:90:a3:87:db:84:26:5b:66:ab:
70:d2:d3:f5:e4:ce:e2:66:4a:73:21:78:ff:6f:ce:
3c:f7:d0:56:ef:cc:9e:04:7c:76:5d:a3:42:7b:e4:
65:46:48:35:50:28:ba:2d:6b:fa:79:bd:8c:6e:cb:
36:75:d7:f8:f1:5b:0f:f3:39:03:d7:b8:ce:d1:43:
fe:e2:91:fe:60:0c:df:86:2c:ed:48:a9:52:69:71:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:04:74:6B:0A:0C:8F:A1:CA:CA:01:80:26:CE:7E:D8:E0:5A:B0:62
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:06:f6:77:3d:6d:c3:22:ca:0d:af:ba:6f:00:c1:9a:c1:b5:
ab:7e:7c:61:4e:31:ff:69:c4:14:52:ed:e3:0b:6f:e2:76:05:
07:f2:9c:1c:12:27:dd:e4:fc:23:22:2c:1f:4d:4b:d2:7e:97:
3a:84:ea:d5:55:83:63:62:28:dc:db:16:0a:40:53:7e:0f:fa:
bd:8d:cb:0c:6c:bd:1c:4a:13:87:33:59:37:e2:1f:b4:06:8d:
ee:33:6a:2c:e4:c2:31:cd:d9:e8:bd:9c:4a:29:5a:31:fc:3a:
c5:19:1f:aa:e6:d6:11:6b:27:4c:08:7e:d5:d0:15:8b:da:e3:
b1:5c:a5:ca:b9:aa:a4:08:0a:ca:3b:81:c0:77:5e:b0:36:ec:
31:d1:10:be:46:51:6f:5a:d2:89:48:65:e0:35:ae:38:79:1f:
7b:ce:ed:9e:74:15:35:61:40:93:d4:56:85:3c:84:d1:3c:8a:
af:c6:ee:85:87:3a:13:8f:96:02:be:f9:c3:af:30:13:4c:da:
07:e3:67:f1:97:ec:c4:aa:bf:33:c5:d9:f5:b9:34:aa:3d:f6:
70:78:d0:cb:fb:81:9f:4d:41:5d:5a:b8:3f:20:78:98:f0:d8:
2e:04:2a:92:76:65:77:52:d0:58:5a:79:e8:9a:fd:41:c5:93:
cd:dc:ef:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJkmXerf/i4I1Qlh5NkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGZhMDE3NTMyZmY2ZDlmYjM4YjQwMDM3ODk2YWZhZjBh
YWNmOGIwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
EygzYTA0NzQ2YjBhMGM4ZmExY2FjYTAxODAyNmNlN2VkOGUwNWFiMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPuITyUSaT3TiZZtzsHJReWz+oJs
d0HeiM8Eiqhq3Rg0ezcH1tT+k7WqCwLAd/xfBppDo65OLEzHuO+B2sO3Q9bsICo7
MZFKhTh7wf0xQvJEYk+rCFQEc7TF0H/DCm6oGRfBm2aFhziO2S1NxUxEEfz8QIGP
9nLmT9YFO+7lx7YHOp6Q37dLSVWF2jjZ+Lq9/332lqRSnUAN3wrAS+YhFffU0GiA
ti5IQdOQo4fbhCZbZqtw0tP15M7iZkpzIXj/b84899BW78yeBHx2XaNCe+RlRkg1
UCi6LWv6eb2Mbss2ddf48VsP8zkD17jO0UP+4pH+YAzfhiztSKlSaXGEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoEdGsKDI+hysoBgCbOftjgWrBiMB8GA1UdIwQY
MBaAFECPoBdTL/bZ+zi0ADeJavrwqs+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAt
ZjE5ODJhNjkxZDQ1LzEvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAtZjE5ODJhNjkxZDQ1
LzEvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgb2dz1t
wyLKDa+6bwDBmsG1q358YU4x/2nEFFLt4wtv4nYFB/KcHBIn3eT8IyIsH01L0n6X
OoTq1VWDY2Io3NsWCkBTfg/6vY3LDGy9HEoThzNZN+IftAaN7jNqLOTCMc3Z6L2c
SilaMfw6xRkfqubWEWsnTAh+1dAVi9rjsVylyrmqpAgKyjuBwHdesDbsMdEQvkZR
b1rSiUhl4DWuOHkfe87tnnQVNWFAk9RWhTyE0TyKr8buhYc6E4+WAr75w68wE0za
B+Nn8ZfsxKq/M8XZ9bk0qj32cHjQy/uBn01BXVq4PyB4mPDYLgQqknZld1LQWFp5
6Jr9QcWTzdzvBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:30 2026 by rpki-client