Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
File: Qqq-41QockWGZCkvpZLj914autQ.mft (raw, json)
Hash identifier: ddIcaCx86/+o6nlMkG5EJ0PhbnKq5LCuz4zf6J9gryA=
Subject key identifier: 73:97:40:7B:15:C7:88:B0:DE:2D:8E:0C:D8:9C:D2:41:30:6D:0D:A5
Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Certificate issuer: /CN=42aabee3542872458664292fa592e3f75e1abad4
Certificate serial: 019D2A72B93AFF0C2506F804405429DCFC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:00:54 +0000
Manifest this update: Thu 26 Mar 2026 14:00:54 +0000
Manifest next update: Fri 27 Mar 2026 14:00:54 +0000
Files and hashes: 1: EkG3e2CzMWqMey50Z0zLUoced24.roa (hash: zN704C7SP9ziI6h8RBTc9pIfbTJJHW3SA5CkRr77PJo=)
2: Qqq-41QockWGZCkvpZLj914autQ.crl (hash: +xmvHumxoqaEhdnnuZLboR8YmCNwBqg/Yr2yFfsQnaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b9:3a:ff:0c:25:06:f8:04:40:54:29:dc:fc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4
Validity
Not Before: Mar 26 14:00:54 2026 GMT
Not After : Mar 27 14:00:54 2026 GMT
Subject: CN=7397407b15c788b0de2d8e0cd89cd241306d0da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:3a:c1:94:5f:6b:c6:a3:52:79:7b:7b:49:
5c:b8:9e:db:11:2b:1a:c3:8c:07:a2:7e:ea:8e:53:
8b:db:46:10:00:82:11:0c:09:24:9d:77:4b:d0:66:
6b:7e:1a:c2:50:39:95:25:6d:98:95:a7:52:24:84:
e3:07:cc:79:d6:ca:1e:89:93:6d:68:c9:14:f7:e9:
bd:88:ea:08:bf:ac:6a:73:83:b0:01:3e:77:c7:47:
f1:f1:e8:c6:37:fd:81:0e:37:55:73:43:b8:7f:ce:
46:73:af:bc:1e:3b:d5:1f:ee:36:fe:b9:81:b5:8e:
16:fa:e5:93:2c:a3:a6:a8:27:dc:13:92:bf:9a:95:
77:55:7d:ba:ab:d1:c2:b6:36:be:50:8e:25:35:21:
50:7a:86:10:d4:76:da:41:80:fd:ea:43:e4:0d:cc:
80:e5:95:a9:8f:dd:3e:9d:14:08:45:95:8c:11:c9:
79:91:9c:a9:4c:ea:10:bd:2e:c3:7d:d4:78:e6:49:
ae:93:89:59:10:4a:cb:cd:56:68:55:6e:b2:c9:8e:
f8:90:79:1e:68:5e:e5:92:ce:06:9a:d9:22:dd:92:
3d:1c:99:94:65:f2:e7:b6:fd:20:77:9f:95:27:65:
77:e9:78:85:e6:40:bd:ea:23:6e:36:87:b9:48:3b:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:40:7B:15:C7:88:B0:DE:2D:8E:0C:D8:9C:D2:41:30:6D:0D:A5
X509v3 Authority Key Identifier:
keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:51:88:a3:0a:fb:97:04:1e:b1:e6:32:0d:61:b7:c0:12:
35:ff:0a:36:f7:fc:ad:0d:f3:e1:80:67:71:26:f7:fc:b9:f6:
40:27:19:da:7a:8f:f4:df:f5:8c:a8:c8:23:3b:86:f2:e0:bc:
c3:99:ed:b1:34:b1:7f:43:17:ae:5d:10:77:e9:63:ce:fc:f3:
52:45:32:e7:68:d9:f5:df:df:6d:31:2e:4e:3b:c9:83:51:8a:
85:01:92:44:00:99:88:0f:ad:53:1b:5a:d6:f2:ac:8d:e2:cb:
39:1e:70:c5:e1:30:b5:42:24:be:8c:b9:76:00:50:16:0c:f1:
a3:62:46:87:f1:be:b0:4b:1d:1e:b9:97:cf:8b:af:1a:64:de:
e4:f8:9b:c9:06:15:1b:a7:35:bf:89:9f:f1:b2:b7:c2:d7:4a:
35:17:ed:73:07:e8:70:1d:d8:0f:4d:da:5f:20:60:81:60:f1:
56:91:8e:f1:94:97:a6:2c:38:47:44:b4:89:46:d4:f6:6f:9a:
e5:26:2b:10:49:f4:5f:4f:03:bf:79:d0:f8:9f:e2:f8:54:dc:
98:6f:79:62:e0:84:8e:bf:f2:8d:4a:d0:c0:3c:2f:56:90:b3:
69:04:1a:35:77:3c:1a:bf:40:a7:67:95:a6:75:22:86:23:5b:
8f:6a:4a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcrk6/wwlBvgEQFQp3PxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWFiZWUzNTQyODcyNDU4NjY0MjkyZmE1OTJlM2Y3NWUx
YWJhZDQwHhcNMjYwMzI2MTQwMDU0WhcNMjYwMzI3MTQwMDU0WjAzMTEwLwYDVQQD
Eyg3Mzk3NDA3YjE1Yzc4OGIwZGUyZDhlMGNkODljZDI0MTMwNmQwZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVU6wZRfa8ajUnl7e0lcuJ7bESsa
w4wHon7qjlOL20YQAIIRDAkknXdL0GZrfhrCUDmVJW2YladSJITjB8x51soeiZNt
aMkU9+m9iOoIv6xqc4OwAT53x0fx8ejGN/2BDjdVc0O4f85Gc6+8HjvVH+42/rmB
tY4W+uWTLKOmqCfcE5K/mpV3VX26q9HCtja+UI4lNSFQeoYQ1HbaQYD96kPkDcyA
5ZWpj90+nRQIRZWMEcl5kZypTOoQvS7DfdR45kmuk4lZEErLzVZoVW6yyY74kHke
aF7lks4Gmtki3ZI9HJmUZfLntv0gd5+VJ2V36XiF5kC96iNuNoe5SDvieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOXQHsVx4iw3i2ODNic0kEwbQ2lMB8GA1UdIwQY
MBaAFEKqvuNUKHJFhmQpL6WS4/deGrrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOTg5YWItODQwYy00MDIzLWI4NDIt
YWIzYmRmOGU1YzQ4LzEvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9jOTg5YWItODQwYy00MDIzLWI4NDItYWIzYmRmOGU1YzQ4
LzEvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcpRiKMK
+5cEHrHmMg1ht8ASNf8KNvf8rQ3z4YBncSb3/Ln2QCcZ2nqP9N/1jKjIIzuG8uC8
w5ntsTSxf0MXrl0Qd+ljzvzzUkUy52jZ9d/fbTEuTjvJg1GKhQGSRACZiA+tUxta
1vKsjeLLOR5wxeEwtUIkvoy5dgBQFgzxo2JGh/G+sEsdHrmXz4uvGmTe5PibyQYV
G6c1v4mf8bK3wtdKNRftcwfocB3YD03aXyBggWDxVpGO8ZSXpiw4R0S0iUbU9m+a
5SYrEEn0X08Dv3nQ+J/i+FTcmG95YuCEjr/yjUrQwDwvVpCzaQQaNXc8Gr9Ap2eV
pnUihiNbj2pK4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:44 2026 by rpki-client