Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: 9j7TmzBoL8L/lf8X7u6BlZUUzlNQV5m4GpKMFB6zdbk=
Subject key identifier: 7C:D9:8D:06:38:F8:D6:7E:CE:52:50:90:7E:E1:63:60:94:EB:94:FF
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019D29CE2322C392AEAB8006A60CE610C36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 14FB
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: J9w76c+PjmaI2bUg+rwK40TXsB5j7p5eXoQaWAS04eI=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:23:22:c3:92:ae:ab:80:06:a6:0c:e6:10:c3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=7cd98d0638f8d67ece5250907ee1636094eb94ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5d:37:8b:09:58:f5:29:c8:74:2c:b0:75:8f:
5a:8b:ca:d5:95:8d:39:47:2d:0a:ee:3d:28:b5:a5:
ef:a0:28:05:36:d5:c2:91:bd:6d:f8:97:40:a3:bf:
7d:5a:96:bb:75:44:59:fd:9b:6f:29:a4:be:f6:bd:
ae:3b:e1:95:84:e4:8d:d1:d3:bb:99:a8:73:b2:ff:
3c:4b:30:95:68:af:6d:87:97:ec:80:3b:84:13:bc:
20:23:72:96:b4:92:76:0c:92:8a:a2:94:be:97:36:
87:c4:13:45:25:41:a3:00:21:d8:14:ae:5e:76:f6:
b7:d0:a6:47:29:66:51:fc:7b:f9:16:9e:9d:61:e5:
67:3e:16:d4:d7:e5:b9:28:bd:f7:73:29:64:d1:34:
89:76:84:9a:07:31:08:8c:20:32:9c:54:2b:0c:d4:
5c:11:37:0b:7c:55:10:56:26:42:6b:77:59:af:a4:
c5:b7:35:bd:4f:5f:30:fd:c2:4f:f9:b4:47:33:da:
ac:73:ea:a8:b0:5d:61:af:67:45:b4:1e:4b:3b:2c:
78:39:39:7c:83:d0:b9:68:7f:68:18:9a:e1:f3:e6:
d5:b3:d0:50:59:cc:50:06:ee:10:42:d4:55:cb:56:
89:9e:90:6a:a2:82:f1:d5:a4:2a:2b:69:59:27:98:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:8D:06:38:F8:D6:7E:CE:52:50:90:7E:E1:63:60:94:EB:94:FF
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:d7:ec:13:48:0d:7e:b9:ce:4a:0a:90:8d:7c:bf:dd:8f:
21:9b:cc:ad:7d:8e:30:6f:da:5a:f2:ac:1c:f7:22:ba:f0:1b:
fb:f4:b1:49:0c:06:ca:3b:68:41:56:34:e2:f6:f4:4b:6a:92:
db:1e:b4:82:d9:b9:65:0f:89:88:cf:7e:a5:79:bf:de:40:6e:
2c:39:df:bc:e3:cd:b0:99:e2:04:1e:36:ac:6a:7b:94:c4:2a:
d1:0d:88:27:a1:e4:d0:f8:0e:ef:f6:ab:49:e2:5b:9e:45:d8:
b6:cf:11:27:df:6d:40:38:20:3b:6b:5f:e4:b5:2a:41:85:7c:
79:91:47:2d:9f:44:66:f5:3c:4b:37:b1:98:fc:32:ab:32:8a:
2e:00:fd:09:cc:0d:04:c7:22:b4:76:f2:97:93:90:4b:75:bc:
45:21:25:ef:e5:8b:a8:12:c5:b3:ea:15:21:cb:75:14:de:75:
42:c7:8c:85:5f:47:0e:bb:aa:92:60:0f:a8:cc:e4:ae:73:aa:
71:a3:6b:34:54:23:6c:a0:85:e3:9d:11:f4:b2:68:b9:19:3b:
b0:2b:89:a0:74:25:3b:d2:68:6b:9b:65:ed:d5:12:b2:9a:62:
61:cf:0e:e1:93:b3:db:71:4c:e0:00:3a:66:94:9e:78:c8:38:
33:e2:d6:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pziMiw5Kuq4AGpgzmEMNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjYwMzI2MTEwMTA4WhcNMjYwMzI3MTEwMTA4WjAzMTEwLwYDVQQD
Eyg3Y2Q5OGQwNjM4ZjhkNjdlY2U1MjUwOTA3ZWUxNjM2MDk0ZWI5NGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l03iwlY9SnIdCywdY9ai8rVlY05
Ry0K7j0otaXvoCgFNtXCkb1t+JdAo799Wpa7dURZ/ZtvKaS+9r2uO+GVhOSN0dO7
mahzsv88SzCVaK9th5fsgDuEE7wgI3KWtJJ2DJKKopS+lzaHxBNFJUGjACHYFK5e
dva30KZHKWZR/Hv5Fp6dYeVnPhbU1+W5KL33cylk0TSJdoSaBzEIjCAynFQrDNRc
ETcLfFUQViZCa3dZr6TFtzW9T18w/cJP+bRHM9qsc+qosF1hr2dFtB5LOyx4OTl8
g9C5aH9oGJrh8+bVs9BQWcxQBu4QQtRVy1aJnpBqooLx1aQqK2lZJ5jEWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzZjQY4+NZ+zlJQkH7hY2CU65T/MB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIczX7BNI
DX65zkoKkI18v92PIZvMrX2OMG/aWvKsHPciuvAb+/SxSQwGyjtoQVY04vb0S2qS
2x60gtm5ZQ+JiM9+pXm/3kBuLDnfvOPNsJniBB42rGp7lMQq0Q2IJ6Hk0PgO7/ar
SeJbnkXYts8RJ99tQDggO2tf5LUqQYV8eZFHLZ9EZvU8SzexmPwyqzKKLgD9CcwN
BMcitHbyl5OQS3W8RSEl7+WLqBLFs+oVIct1FN51QseMhV9HDruqkmAPqMzkrnOq
caNrNFQjbKCF450R9LJouRk7sCuJoHQlO9Joa5tl7dUSsppiYc8O4ZOz23FM4AA6
ZpSeeMg4M+LWFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:26 2026 by rpki-client