
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
File: QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft (raw, json)
Hash identifier: I7vLnpQJOf80w7MU+fXw/YOeGO2htGaNlaWQi42vDo0=
Subject key identifier: 8F:AE:7D:F1:0E:EA:4C:34:5A:88:99:6E:6E:10:3B:BB:A8:AE:44:09
Authority key identifier: 41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
Certificate issuer: /CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Certificate serial: 019D27729BCEC4DDAD4522E74758FA839359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
Manifest number: 26
Signing time: Thu 26 Mar 2026 00:01:55 +0000
Manifest this update: Thu 26 Mar 2026 00:01:55 +0000
Manifest next update: Fri 27 Mar 2026 00:01:55 +0000
Files and hashes: 1: QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl (hash: Rd2teGtC8NhlfWwwG4YhMlfZkU8Xtv49AbVrTbZx104=)
2: qWIzmVr_aMvnz8_UVm4flIAA-A0.roa (hash: s3nWLOdDzZcWov+Frxv6A1ZD6t4lQ0e8G2c/DIWlHD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:9b:ce:c4:dd:ad:45:22:e7:47:58:fa:83:93:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Validity
Not Before: Mar 26 00:01:55 2026 GMT
Not After : Mar 27 00:01:55 2026 GMT
Subject: CN=8fae7df10eea4c345a88996e6e103bbba8ae4409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:71:9a:dd:87:7c:67:40:76:fe:09:43:87:
aa:19:e1:2f:4f:70:df:b9:66:a7:3a:ad:3c:69:78:
e4:c3:ff:3a:fa:6e:9f:22:98:eb:ff:17:0d:28:1f:
e4:8b:74:73:84:53:7b:36:c1:68:f6:ad:99:1d:50:
1a:17:6b:8f:9b:f4:67:22:99:6d:a0:ac:d4:d7:70:
cd:65:04:ad:c8:7e:ef:18:24:da:01:4f:94:87:37:
f1:b2:ec:3a:16:97:6a:ba:2b:9e:92:f5:05:7f:a8:
bc:91:10:87:cc:4f:45:8b:f2:99:44:6c:22:e4:a1:
e7:73:02:1e:6f:4d:a7:30:c4:cc:36:aa:55:06:68:
2c:2c:50:cb:df:2f:f3:65:0c:f1:d7:7e:36:fd:2e:
cb:a4:be:e8:bf:0e:60:31:dd:5b:af:1c:8b:a7:2f:
9f:9c:e0:97:4a:c6:49:ff:9a:4d:1e:94:73:0d:d2:
ff:5c:a2:7a:ae:c6:54:68:3f:a0:07:58:74:15:7d:
ad:cc:d1:f7:77:41:21:c9:e3:4e:9a:9e:a5:1e:32:
c5:4b:87:72:22:ce:b1:a2:d9:36:a7:70:7d:c4:a6:
ff:e7:02:ef:40:31:e2:f6:22:96:55:ee:43:15:b9:
bb:68:46:55:6e:87:04:c7:31:dd:be:2f:8d:e6:2e:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AE:7D:F1:0E:EA:4C:34:5A:88:99:6E:6E:10:3B:BB:A8:AE:44:09
X509v3 Authority Key Identifier:
keyid:41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:55:74:22:74:b9:f6:e5:9d:c7:5c:06:94:03:0f:7f:ff:07:
15:96:64:b6:50:18:dc:49:4e:f2:26:37:95:03:5c:9c:73:7c:
20:80:9d:12:c1:52:78:1d:28:0d:67:e8:ce:48:33:70:6c:3e:
cc:fa:8c:90:8f:04:73:2c:28:1b:31:f2:7a:76:3a:61:a1:ab:
cd:b7:6f:4b:a6:f8:64:52:fc:03:39:52:d3:d1:9e:42:91:04:
0d:86:ff:9d:ec:76:1b:c6:3e:39:2f:78:84:38:36:27:87:7b:
45:91:bb:0a:4c:28:e4:e6:b1:7b:f4:f0:eb:39:85:aa:32:7d:
16:f5:cd:3a:fd:59:55:0b:b5:df:60:a0:6c:5e:ac:87:57:8f:
0e:4d:23:6a:70:41:6b:12:6c:b1:55:c8:5d:f1:ed:6f:9a:42:
92:89:2e:0d:3e:c2:fb:bd:64:1e:43:03:5f:2d:36:42:42:63:
98:63:78:80:e0:36:0f:69:fa:f6:7a:65:0b:69:df:93:d7:34:
f6:e7:02:d8:2d:2f:6d:f1:cd:62:e3:69:90:2b:ce:b3:06:72:
f3:a7:85:95:b3:f6:2e:aa:dc:4a:c2:1c:d2:7d:d6:7a:f2:30:
06:c8:f3:95:cc:80:a1:53:b7:3f:9e:11:d5:cf:ea:88:65:d6:
22:8e:7f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncpvOxN2tRSLnR1j6g5NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWM1YjM1NDRiMThjMmNlNTc3ODQ3YmMxYjJhZGE1Mzkz
ODViMTkwHhcNMjYwMzI2MDAwMTU1WhcNMjYwMzI3MDAwMTU1WjAzMTEwLwYDVQQD
Eyg4ZmFlN2RmMTBlZWE0YzM0NWE4ODk5NmU2ZTEwM2JiYmE4YWU0NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MRxmt2HfGdAdv4JQ4eqGeEvT3Df
uWanOq08aXjkw/86+m6fIpjr/xcNKB/ki3RzhFN7NsFo9q2ZHVAaF2uPm/RnIplt
oKzU13DNZQStyH7vGCTaAU+Uhzfxsuw6FpdquiuekvUFf6i8kRCHzE9Fi/KZRGwi
5KHncwIeb02nMMTMNqpVBmgsLFDL3y/zZQzx1342/S7LpL7ovw5gMd1brxyLpy+f
nOCXSsZJ/5pNHpRzDdL/XKJ6rsZUaD+gB1h0FX2tzNH3d0EhyeNOmp6lHjLFS4dy
Is6xotk2p3B9xKb/5wLvQDHi9iKWVe5DFbm7aEZVbocExzHdvi+N5i497wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+uffEO6kw0WoiZbm4QO7uorkQJMB8GA1UdIwQY
MBaAFEFcWzVEsYws5XeEe8GyraU5OFsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hMWM1M2UtZGRiMi00ODU4LTgyNWMt
OGNhOGFjZWY1ZDVjLzEvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hMWM1M2UtZGRiMi00ODU4LTgyNWMtOGNhOGFjZWY1ZDVj
LzEvUVZ4Yk5VU3hqQ3psZDRSN3diS3RwVGs0V3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVV0InS5
9uWdx1wGlAMPf/8HFZZktlAY3ElO8iY3lQNcnHN8IICdEsFSeB0oDWfozkgzcGw+
zPqMkI8EcywoGzHyenY6YaGrzbdvS6b4ZFL8AzlS09GeQpEEDYb/nex2G8Y+OS94
hDg2J4d7RZG7Ckwo5Oaxe/Tw6zmFqjJ9FvXNOv1ZVQu132CgbF6sh1ePDk0janBB
axJssVXIXfHtb5pCkokuDT7C+71kHkMDXy02QkJjmGN4gOA2D2n69nplC2nfk9c0
9ucC2C0vbfHNYuNpkCvOswZy86eFlbP2LqrcSsIc0n3WevIwBsjzlcyAoVO3P54R
1c/qiGXWIo5/Sw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:23 2026 by rpki-client