Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: nrLU0XGSmagUA7PmdUkQdszlmW2hGMxeU++KNKOz7Tk=
Subject key identifier: 97:DE:D5:A1:DB:82:84:B1:22:A8:9C:C5:F8:8F:A4:03:9C:B7:15:9D
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 019D292926C31375F4259F934F99DB4D5695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 05A0
Signing time: Thu 26 Mar 2026 08:00:55 +0000
Manifest this update: Thu 26 Mar 2026 08:00:55 +0000
Manifest next update: Fri 27 Mar 2026 08:00:55 +0000
Files and hashes: 1: 17zD_45Ojk85pCPTQUH6kHV39wg.roa (hash: 2aOFgr3OtXXpdP6T9v8he8K/GmBIDnp5QHJOyXnb+rI=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: tDdb7BB2TWHq+lmVuoLYFgUbrIpNwF6bcehpyILIxJ4=)
3: tVgtWKf3hovbROlWOuakv2HBNcQ.roa (hash: tZH+J6Wky64drRqnuI4atQm17bvmIikThIiw7SOfunU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:26:c3:13:75:f4:25:9f:93:4f:99:db:4d:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Mar 26 08:00:55 2026 GMT
Not After : Mar 27 08:00:55 2026 GMT
Subject: CN=97ded5a1db8284b122a89cc5f88fa4039cb7159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:b2:b6:5a:b9:9f:f8:07:c5:6a:73:2b:01:
04:a1:ca:d3:b1:b0:89:9d:e3:89:df:dd:06:88:f6:
9d:64:fb:7e:21:5b:ad:96:ec:8b:11:3d:08:e8:8c:
3a:d4:b1:b0:72:c2:2a:9c:37:d0:bf:27:db:44:4b:
e0:69:6a:a2:84:47:7d:47:4f:1b:be:6e:f4:7e:15:
47:0d:57:81:14:52:43:5b:d8:b0:44:4d:e5:e5:11:
6a:cf:ea:c3:17:a7:4c:c9:ab:65:92:61:c2:86:d4:
40:e5:52:ac:b5:60:f5:89:6e:a9:f8:d5:c4:61:c9:
ba:cf:d3:31:4c:3f:e0:57:3f:f0:52:60:d8:05:e6:
42:cb:50:d9:9d:66:ec:08:9a:d8:d0:e0:b1:a4:69:
0b:af:46:58:a9:b7:c3:83:57:02:a4:a5:9c:9d:1e:
a5:34:2f:a2:78:dc:af:12:36:55:a8:e8:45:02:39:
f6:e6:8d:23:0e:2f:59:c3:89:c0:6d:4a:f6:9f:94:
8b:95:1b:48:e4:c5:32:7b:85:37:af:4e:c5:5e:37:
cb:7f:40:27:a1:69:69:b9:ec:93:d0:ef:3e:88:8f:
87:7d:5d:1c:fd:9b:f3:2c:f4:8f:f7:f4:9a:13:a7:
77:15:3e:e6:e1:a4:2f:cd:d6:1c:19:77:98:b1:4d:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:D5:A1:DB:82:84:B1:22:A8:9C:C5:F8:8F:A4:03:9C:B7:15:9D
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:6c:d7:4f:ce:e3:b8:9b:b0:66:20:94:5c:56:59:bf:47:
94:b9:ae:ba:eb:45:76:49:da:8e:c0:f0:8b:11:d6:4b:50:73:
5a:fd:82:8b:d0:0c:5c:6e:24:09:82:c7:50:6a:aa:7e:bd:3b:
56:c0:24:22:56:9f:00:67:a4:f7:e5:22:d4:63:6d:04:44:93:
81:1e:92:db:66:da:df:b4:b7:39:97:f0:54:0b:7b:33:c9:96:
57:2b:77:ca:60:94:4d:c7:d1:b7:56:0f:61:62:eb:35:9d:c6:
5d:ad:94:b4:9d:78:f4:8a:b2:bd:50:3d:a5:48:bf:82:25:6b:
4f:77:a1:dc:ad:c3:d3:34:eb:c2:8f:40:83:f0:cb:52:85:38:
7c:c9:2c:71:9b:00:4b:8b:94:dc:fd:6c:6e:f0:f9:3f:f6:5c:
dc:53:c4:7c:71:66:f0:d6:2b:7c:ca:9f:60:54:c1:94:8f:c4:
00:b0:d3:7c:9b:1b:89:aa:ae:7d:b6:82:8e:eb:54:6f:3f:21:
1b:68:11:7f:99:81:32:e5:25:ab:4a:39:7b:7e:50:78:a3:2e:
8a:65:d6:05:7b:b0:12:62:3c:e6:33:77:1b:cc:a3:5d:5e:f2:
46:16:8f:a4:d4:42:07:82:1d:60:73:98:8d:b6:1b:75:07:8f:
00:23:9b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKSbDE3X0JZ+TT5nbTVaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm
YjVmNDIwHhcNMjYwMzI2MDgwMDU1WhcNMjYwMzI3MDgwMDU1WjAzMTEwLwYDVQQD
Eyg5N2RlZDVhMWRiODI4NGIxMjJhODljYzVmODhmYTQwMzljYjcxNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPmytlq5n/gHxWpzKwEEocrTsbCJ
neOJ390GiPadZPt+IVutluyLET0I6Iw61LGwcsIqnDfQvyfbREvgaWqihEd9R08b
vm70fhVHDVeBFFJDW9iwRE3l5RFqz+rDF6dMyatlkmHChtRA5VKstWD1iW6p+NXE
Ycm6z9MxTD/gVz/wUmDYBeZCy1DZnWbsCJrY0OCxpGkLr0ZYqbfDg1cCpKWcnR6l
NC+ieNyvEjZVqOhFAjn25o0jDi9Zw4nAbUr2n5SLlRtI5MUye4U3r07FXjfLf0An
oWlpueyT0O8+iI+HfV0c/ZvzLPSP9/SaE6d3FT7m4aQvzdYcGXeYsU2MqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfe1aHbgoSxIqicxfiPpAOctxWdMB8GA1UdIwQY
MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt
N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy
LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaZs10/O
47ibsGYglFxWWb9HlLmuuutFdknajsDwixHWS1BzWv2Ci9AMXG4kCYLHUGqqfr07
VsAkIlafAGek9+Ui1GNtBESTgR6S22ba37S3OZfwVAt7M8mWVyt3ymCUTcfRt1YP
YWLrNZ3GXa2UtJ149IqyvVA9pUi/giVrT3eh3K3D0zTrwo9Ag/DLUoU4fMkscZsA
S4uU3P1sbvD5P/Zc3FPEfHFm8NYrfMqfYFTBlI/EALDTfJsbiaqufbaCjutUbz8h
G2gRf5mBMuUlq0o5e35QeKMuimXWBXuwEmI85jN3G8yjXV7yRhaPpNRCB4IdYHOY
jbYbdQePACObrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:45 2026 by rpki-client