Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: S6uuFM2UJTjnbzmeq1FqC9XctxDxgb5MXt9Tydn+1a4=
Subject key identifier: 24:13:80:77:BA:20:ED:69:B4:B0:50:1E:8F:87:2C:95:B2:B2:B5:F3
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019D281718992DAA803EF44CB18FCCB9D7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:35 +0000
Manifest this update: Thu 26 Mar 2026 03:01:35 +0000
Manifest next update: Fri 27 Mar 2026 03:01:35 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: uHdk8vmFpts2eJashBhkhIE43lznmmrJV3P4IWukZJ0=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:18:99:2d:aa:80:3e:f4:4c:b1:8f:cc:b9:d7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Mar 26 03:01:35 2026 GMT
Not After : Mar 27 03:01:35 2026 GMT
Subject: CN=24138077ba20ed69b4b0501e8f872c95b2b2b5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:76:52:ec:dc:00:e0:13:8a:1c:7e:d0:02:
60:78:e9:2a:96:bb:1d:21:38:e2:70:ae:ca:0b:82:
bb:3e:c9:01:2e:93:4b:4a:99:8c:05:7e:84:e5:eb:
7c:51:c1:a7:86:c2:d8:fe:0b:78:43:29:3c:7d:30:
27:47:e7:23:29:ab:61:52:9f:d0:92:4f:25:ce:b0:
4a:45:c1:bc:73:b4:4a:f2:de:bc:44:a1:ce:3c:17:
55:40:28:e8:5c:a0:43:cb:99:3d:19:da:d1:f6:22:
74:40:37:92:98:30:63:e9:24:13:3c:20:23:6b:77:
74:46:3b:be:74:01:f1:69:e5:56:76:ad:80:b5:f7:
c7:74:0e:3a:2c:4d:82:8c:8f:a5:c1:a5:44:59:6b:
f6:07:31:d0:40:f9:ce:8c:2a:69:81:b3:5b:9d:af:
b9:62:61:e5:69:a1:dd:7c:73:bc:c0:e8:61:f3:33:
75:20:41:d6:03:eb:c6:bb:96:8e:0c:28:09:24:94:
52:e4:6e:37:ea:54:f8:44:c9:61:1b:78:a1:b5:e7:
ce:f2:b8:d0:2a:0e:a9:52:c9:81:4a:71:87:13:39:
9e:e0:6c:4d:bf:38:e5:f7:71:9a:55:23:e2:14:38:
55:2d:62:cc:3e:c9:e0:f9:c8:18:8b:64:3e:48:26:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:80:77:BA:20:ED:69:B4:B0:50:1E:8F:87:2C:95:B2:B2:B5:F3
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:06:90:49:59:f9:e0:6f:be:b3:62:5e:c8:75:09:8a:0e:58:
4d:ca:10:db:68:24:6b:6a:c1:fe:e0:6c:fe:e8:ad:ba:dd:5a:
df:0c:df:d6:68:e1:ca:b5:c6:55:d1:a4:14:5d:ee:78:01:ad:
4d:f6:dc:60:58:d3:af:45:de:d7:aa:a6:62:cc:93:09:33:10:
0a:e1:eb:4a:72:c5:d3:d8:34:83:47:00:c8:ac:4f:70:06:d8:
05:0f:2c:e2:4b:a6:a0:46:51:6c:0e:dc:24:b8:6f:a9:6c:6d:
49:4c:c8:05:8b:47:c2:6f:12:5f:02:a5:ca:df:a7:12:29:1a:
3d:5d:2a:01:4a:a4:1b:89:ca:e6:78:f3:d5:04:fb:31:f2:b3:
d3:82:6c:45:c2:f9:59:02:ec:41:3b:9b:de:85:f3:7d:9b:b8:
23:fb:f3:45:c0:4f:28:0b:f4:05:fb:0c:c6:44:70:d3:39:1e:
1b:51:d8:9f:bd:c3:fc:73:8d:e0:d2:84:74:be:f1:07:4b:3e:
92:18:ca:23:3a:fd:90:09:59:8e:1d:86:bd:3f:29:01:9c:15:
c7:c8:24:5f:9c:1e:6a:76:8e:1c:36:d7:3b:28:c1:93:45:84:
90:d1:95:e7:29:12:77:47:cd:70:7a:76:66:21:e7:0e:7b:5b:
59:cd:bf:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFxiZLaqAPvRMsY/Mude+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh
Y2I0NGQwHhcNMjYwMzI2MDMwMTM1WhcNMjYwMzI3MDMwMTM1WjAzMTEwLwYDVQQD
EygyNDEzODA3N2JhMjBlZDY5YjRiMDUwMWU4Zjg3MmM5NWIyYjJiNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9N2UuzcAOATihx+0AJgeOkqlrsd
ITjicK7KC4K7PskBLpNLSpmMBX6E5et8UcGnhsLY/gt4Qyk8fTAnR+cjKathUp/Q
kk8lzrBKRcG8c7RK8t68RKHOPBdVQCjoXKBDy5k9GdrR9iJ0QDeSmDBj6SQTPCAj
a3d0Rju+dAHxaeVWdq2AtffHdA46LE2CjI+lwaVEWWv2BzHQQPnOjCppgbNbna+5
YmHlaaHdfHO8wOhh8zN1IEHWA+vGu5aODCgJJJRS5G436lT4RMlhG3ihtefO8rjQ
Kg6pUsmBSnGHEzme4GxNvzjl93GaVSPiFDhVLWLMPsng+cgYi2Q+SCaeQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQTgHe6IO1ptLBQHo+HLJWysrXzMB8GA1UdIwQY
MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt
MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj
LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQaQSVn5
4G++s2JeyHUJig5YTcoQ22gka2rB/uBs/uitut1a3wzf1mjhyrXGVdGkFF3ueAGt
TfbcYFjTr0Xe16qmYsyTCTMQCuHrSnLF09g0g0cAyKxPcAbYBQ8s4kumoEZRbA7c
JLhvqWxtSUzIBYtHwm8SXwKlyt+nEikaPV0qAUqkG4nK5njz1QT7MfKz04JsRcL5
WQLsQTub3oXzfZu4I/vzRcBPKAv0BfsMxkRw0zkeG1HYn73D/HON4NKEdL7xB0s+
khjKIzr9kAlZjh2GvT8pAZwVx8gkX5weanaOHDbXOyjBk0WEkNGV5ykSd0fNcHp2
ZiHnDntbWc2/fg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:30 2026 by rpki-client