Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: JOT4/wgm1T93GZWdh0cDpDLjgBTEZvhqxcDeN1u/8qc=
Subject key identifier: 29:1F:84:6C:66:93:4F:EB:5B:02:E5:80:60:FA:12:DB:08:04:EB:EF
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 019E205AC9758888FE543EB6AE03D7AA0774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0D15
Signing time: Wed 13 May 2026 08:01:21 +0000
Manifest this update: Wed 13 May 2026 08:01:21 +0000
Manifest next update: Thu 14 May 2026 08:01:21 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: 5bmpEYSHcmIbaz//NvupwhHqo8S7wYlYhQoLkyel3RY=)
2: YVo8LjxK7TZOHy2e0UtRMc12yMo.roa (hash: y1sW6xShCe5Zkqn/itmgk+RBNdntx91KOyuie9DOHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:c9:75:88:88:fe:54:3e:b6:ae:03:d7:aa:07:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: May 13 08:01:21 2026 GMT
Not After : May 14 08:01:21 2026 GMT
Subject: CN=291f846c66934feb5b02e58060fa12db0804ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:dd:e2:72:fd:26:e8:40:28:3f:01:2b:81:
19:1e:cc:b5:79:f1:dc:d7:f1:23:56:26:48:0a:60:
fe:e8:23:30:a3:f3:1b:63:68:68:d9:6a:bd:68:90:
74:28:55:30:c8:78:9c:59:f7:56:d1:e4:4b:3a:b6:
e6:d1:77:5c:20:1e:e6:50:d8:5b:14:e2:44:20:f9:
02:50:0b:b9:de:64:28:09:27:e9:d0:36:5c:65:9f:
45:8c:37:cf:bb:b5:b3:8a:74:1c:a6:13:5e:c7:b0:
76:0f:e0:48:87:23:28:3a:32:9a:ac:98:06:ad:ff:
98:38:1d:c0:28:2f:10:94:7e:fe:0f:35:18:62:ac:
de:5b:16:fe:8e:05:1e:0e:32:a7:5c:7a:6b:48:f0:
03:9a:68:16:e5:72:f6:33:ff:0b:23:28:ac:2a:44:
78:91:b3:ed:8f:1b:79:36:bf:e1:b2:9e:39:4d:f9:
3a:9b:c0:e0:2f:02:75:e3:a3:db:b8:8f:73:ab:e8:
19:21:66:86:06:ae:f7:c7:13:b0:65:48:3b:43:18:
af:f8:f6:24:fa:0d:ec:6d:58:65:36:01:e9:82:1c:
f7:58:f4:d7:c9:cf:1b:87:8b:ef:8f:0d:e5:54:d1:
0b:ec:e4:6b:5c:a1:64:31:a5:c4:25:a7:5d:e6:55:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1F:84:6C:66:93:4F:EB:5B:02:E5:80:60:FA:12:DB:08:04:EB:EF
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:66:ec:76:60:c9:45:7b:29:98:16:89:ba:f9:9f:8f:8d:d7:
62:02:b0:c3:dc:9d:ec:f7:74:9a:19:d7:69:9d:74:0e:43:6d:
ff:1c:04:4a:30:bb:95:ec:c3:c4:20:bd:eb:f7:60:9d:64:0d:
fe:ac:34:fd:04:4d:fa:b0:b2:01:f7:32:be:50:6c:b4:4d:d7:
d9:87:cc:03:fc:3e:5a:75:4d:f4:68:7a:4a:2e:c3:d3:f5:4d:
7f:cb:8f:b2:5a:c7:ca:8b:a0:51:78:6e:3c:a3:34:5f:49:94:
04:ef:76:f1:56:46:a7:16:95:17:6c:c1:e8:9f:da:48:10:3c:
e0:ed:26:dd:2a:e6:0b:3f:0f:87:24:4a:88:12:be:8b:9f:36:
44:06:3c:4d:95:a8:b2:b7:d1:93:c8:9d:fe:64:28:fd:29:0b:
c9:c1:8c:fc:6d:41:ef:ac:c0:aa:df:5c:a7:94:44:2e:81:ba:
c4:73:2a:3e:b5:a0:87:00:00:30:ad:b9:96:8d:9a:ab:6d:a2:
3d:36:1a:b8:d5:6f:be:34:0b:79:5d:60:76:01:c6:b1:e4:76:
db:a0:a2:28:74:8c:e3:4f:26:40:0b:58:ae:c2:bb:75:a2:d4:
bd:25:50:f8:4a:c2:36:81:25:65:5b:1c:1f:f8:5b:84:c4:bc:
0b:a6:05:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWsl1iIj+VD62rgPXqgd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1OTFhNzViZDY5M2U5ZDNiNzY2ODM0YmYwNzRmN2Ix
ZWVlM2EwHhcNMjYwNTEzMDgwMTIxWhcNMjYwNTE0MDgwMTIxWjAzMTEwLwYDVQQD
EygyOTFmODQ2YzY2OTM0ZmViNWIwMmU1ODA2MGZhMTJkYjA4MDRlYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeHd4nL9JuhAKD8BK4EZHsy1efHc
1/EjViZICmD+6CMwo/MbY2ho2Wq9aJB0KFUwyHicWfdW0eRLOrbm0XdcIB7mUNhb
FOJEIPkCUAu53mQoCSfp0DZcZZ9FjDfPu7WzinQcphNex7B2D+BIhyMoOjKarJgG
rf+YOB3AKC8QlH7+DzUYYqzeWxb+jgUeDjKnXHprSPADmmgW5XL2M/8LIyisKkR4
kbPtjxt5Nr/hsp45Tfk6m8DgLwJ146PbuI9zq+gZIWaGBq73xxOwZUg7Qxiv+PYk
+g3sbVhlNgHpghz3WPTXyc8bh4vvjw3lVNEL7ORrXKFkMaXEJadd5lWYEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkfhGxmk0/rWwLlgGD6EtsIBOvvMB8GA1UdIwQY
MBaAFEDVWRp1vWk+nTt2aDS/B097Hu46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2Ut
YTEwYTNhNDk2M2ZiLzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2UtYTEwYTNhNDk2M2Zi
LzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWbsdmDJ
RXspmBaJuvmfj43XYgKww9yd7Pd0mhnXaZ10DkNt/xwESjC7lezDxCC96/dgnWQN
/qw0/QRN+rCyAfcyvlBstE3X2YfMA/w+WnVN9Gh6Si7D0/VNf8uPslrHyougUXhu
PKM0X0mUBO928VZGpxaVF2zB6J/aSBA84O0m3SrmCz8PhyRKiBK+i582RAY8TZWo
srfRk8id/mQo/SkLycGM/G1B76zAqt9cp5RELoG6xHMqPrWghwAAMK25lo2aq22i
PTYauNVvvjQLeV1gdgHGseR226CiKHSM408mQAtYrsK7daLUvSVQ+ErCNoElZVsc
H/hbhMS8C6YFLg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:20:29 2026 by rpki-client