Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: 6HsNGUSVKIFQHfF7Q9MIae/wZegJ859JSynjKCInuuM=
Subject key identifier: 0F:8B:10:B4:0B:FB:9E:90:2D:C6:BE:B1:EE:27:75:81:0A:EE:3F:1B
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019E2091CC7306D797AD43DE771883CB839B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 09:01:26 +0000
Manifest this update: Wed 13 May 2026 09:01:26 +0000
Manifest next update: Thu 14 May 2026 09:01:26 +0000
Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: U3oYSqDUP1h5SCVfAHU3xeth+InJBz0jajLZd5AMYVA=)
3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:cc:73:06:d7:97:ad:43:de:77:18:83:cb:83:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: May 13 09:01:26 2026 GMT
Not After : May 14 09:01:26 2026 GMT
Subject: CN=0f8b10b40bfb9e902dc6beb1ee2775810aee3f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:ed:0d:f7:31:02:e0:9a:31:8b:ec:0c:1d:
4a:b1:35:12:8c:65:b6:84:0d:98:96:de:40:2f:32:
c6:4f:bd:59:e9:bf:0c:39:f5:77:dc:2c:cf:12:ea:
af:3d:d6:d7:17:9f:18:01:ca:6d:b9:e4:5f:2a:52:
18:da:c6:61:50:fc:ff:32:69:88:f4:d7:2d:11:83:
cf:7f:2f:e4:c2:b5:4e:18:80:e6:eb:6b:a8:a9:6e:
b9:87:e7:1b:81:a6:e4:a2:9b:b0:b0:c0:eb:81:9c:
56:7c:94:6c:57:19:66:8b:ae:27:9b:a1:d8:de:2a:
8a:9d:4a:6a:55:79:5f:51:83:c2:85:2a:e6:d9:7b:
fb:46:1c:c3:76:68:72:74:95:1b:3f:5d:e8:1f:02:
84:62:80:20:ba:b9:2e:3d:12:b6:30:94:5a:7c:cd:
30:98:2b:de:33:e7:0e:cd:db:f6:f1:90:fb:a9:94:
d3:ef:89:fc:08:22:20:1f:66:5d:cc:24:09:8d:14:
cf:77:04:ae:b3:e3:3d:81:fc:12:ef:82:36:46:77:
79:08:03:71:36:39:fa:14:e1:6e:b2:f3:4c:f8:32:
9e:0b:a3:11:19:cb:9f:61:5a:26:78:ae:c2:f2:23:
71:ee:e6:b2:09:70:bf:41:3f:cf:a6:cc:7f:4b:e7:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:10:B4:0B:FB:9E:90:2D:C6:BE:B1:EE:27:75:81:0A:EE:3F:1B
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:aa:b1:c7:f1:27:30:2e:c9:78:73:3a:52:4e:0f:29:a4:f9:
1c:a3:f1:9b:c0:9a:c4:8f:1a:0a:fe:57:d6:f8:ad:87:42:01:
cf:d6:9f:b3:ad:e0:2f:96:46:bb:d4:b7:fd:bd:9f:90:da:14:
f2:5b:a1:bf:9c:92:a7:2b:8b:87:7e:48:78:f7:e3:ea:bc:66:
a9:17:c5:09:fb:8f:f4:15:61:64:a4:d6:b8:2d:93:5c:77:22:
e3:b3:52:eb:b9:5a:00:a7:7c:cc:03:09:db:0e:9e:23:b5:a7:
4f:59:f9:ee:c0:e0:06:2c:99:99:fc:d5:9c:b3:a8:98:6e:9f:
72:4f:17:66:06:dc:c9:f1:92:9e:b7:20:85:4b:24:d1:d1:ba:
e1:c1:8e:0b:a9:f6:4f:18:f8:49:ec:33:44:f1:1b:91:ef:78:
b3:41:75:09:34:b7:1d:d0:2a:36:13:a0:09:ad:a8:1f:54:e7:
83:aa:b1:b9:b9:38:51:19:1e:bc:45:f8:7c:d3:d7:df:ba:d7:
d0:2f:af:88:cc:1f:95:10:ac:a8:f0:5d:f5:ae:21:14:2a:30:
62:93:e8:fe:64:a4:fa:9c:32:5d:c6:f3:bb:21:aa:bd:05:25:
51:b7:bb:65:39:f6:5c:60:d9:0a:35:96:30:8d:d7:9c:9b:bc:
2a:de:48:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkcxzBteXrUPedxiDy4ObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjYwNTEzMDkwMTI2WhcNMjYwNTE0MDkwMTI2WjAzMTEwLwYDVQQD
EygwZjhiMTBiNDBiZmI5ZTkwMmRjNmJlYjFlZTI3NzU4MTBhZWUzZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ3tDfcxAuCaMYvsDB1KsTUSjGW2
hA2Ylt5ALzLGT71Z6b8MOfV33CzPEuqvPdbXF58YAcptueRfKlIY2sZhUPz/MmmI
9NctEYPPfy/kwrVOGIDm62uoqW65h+cbgabkopuwsMDrgZxWfJRsVxlmi64nm6HY
3iqKnUpqVXlfUYPChSrm2Xv7RhzDdmhydJUbP13oHwKEYoAgurkuPRK2MJRafM0w
mCveM+cOzdv28ZD7qZTT74n8CCIgH2ZdzCQJjRTPdwSus+M9gfwS74I2Rnd5CANx
Njn6FOFusvNM+DKeC6MRGcufYVomeK7C8iNx7uayCXC/QT/Ppsx/S+dYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+LELQL+56QLca+se4ndYEK7j8bMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKqxx/En
MC7JeHM6Uk4PKaT5HKPxm8CaxI8aCv5X1vith0IBz9afs63gL5ZGu9S3/b2fkNoU
8luhv5ySpyuLh35IePfj6rxmqRfFCfuP9BVhZKTWuC2TXHci47NS67laAKd8zAMJ
2w6eI7WnT1n57sDgBiyZmfzVnLOomG6fck8XZgbcyfGSnrcghUsk0dG64cGOC6n2
Txj4SewzRPEbke94s0F1CTS3HdAqNhOgCa2oH1Tng6qxubk4URkevEX4fNPX37rX
0C+viMwflRCsqPBd9a4hFCowYpPo/mSk+pwyXcbzuyGqvQUlUbe7ZTn2XGDZCjWW
MI3XnJu8Kt5ICg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:36 2026 by rpki-client