Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: DBf6QsiL0QYtLVQWkgfYcdu0nwitYQoQf4+BtxJu7U0=
Subject key identifier: A6:26:B9:9F:5F:2C:AF:98:81:22:CD:4C:06:3A:97:58:E5:D7:22:21
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 019D28BBBA45C8A973CA9CA2F9AAA8098962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: 9p7dGXDhhIMjMpnYQ1dR4KNOndM.roa (hash: v32tTh04pVTtA27giNDJzrAPLcEj/C1fD9RHh94I4MU=)
2: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: L9FN7rOIM3AVg2PVxlqRMaHRngrX0DGBvRO/3/wp320=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ba:45:c8:a9:73:ca:9c:a2:f9:aa:a8:09:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=a626b99f5f2caf988122cd4c063a9758e5d72221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:ab:5b:d2:86:ff:bc:02:c6:47:46:28:1d:
96:24:17:b1:ce:38:de:d9:44:e1:be:37:12:fc:61:
45:3b:b7:21:50:72:78:1c:f3:64:80:14:ed:ec:e1:
5f:79:0f:69:d0:84:10:f2:ea:b3:68:56:60:96:90:
0e:82:14:39:c9:79:70:b7:3d:a2:0f:30:b9:3f:27:
89:f3:58:74:ac:36:a8:98:1d:92:cb:73:9b:3d:7d:
48:79:b1:e7:cb:3c:a7:e3:aa:b9:56:81:2c:84:fd:
5d:c5:f3:1b:e0:23:14:a6:7d:fc:0b:6a:3f:0c:2a:
05:5b:c2:ea:2a:d4:4d:22:71:14:16:9d:51:89:7c:
1b:26:06:c7:d6:09:6e:94:65:0e:d7:b2:2f:18:e1:
c9:9d:60:5a:b9:fe:36:a3:c4:fe:c1:b3:1d:08:df:
18:e3:82:22:f1:49:c3:d3:f5:c5:f8:5e:92:b5:1b:
eb:87:db:c7:04:ab:92:37:cf:6b:a4:cd:92:f8:b0:
69:5e:0a:ab:08:8a:aa:7e:e6:fa:aa:d8:82:a2:bb:
8d:68:f1:e1:96:16:3e:e0:c2:6f:7d:e9:a8:6f:a7:
f7:ff:16:02:bc:49:d1:91:72:31:01:48:17:c7:cc:
71:26:25:95:b1:e1:cc:df:f8:a1:f9:45:4c:8d:85:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:B9:9F:5F:2C:AF:98:81:22:CD:4C:06:3A:97:58:E5:D7:22:21
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:63:56:61:e3:3c:05:ed:4c:28:99:31:a9:19:fa:32:67:4a:
5a:0c:77:3c:c5:f9:4d:3b:1c:93:59:f0:2e:69:49:ea:6f:ef:
b1:a0:88:2e:c0:69:f2:a8:fe:f9:0f:27:b9:56:8d:3b:60:e7:
83:37:85:c8:48:76:aa:be:2e:49:a6:5f:99:9d:12:62:b4:fb:
51:e0:45:b8:ea:7e:2e:42:82:fc:37:0b:7c:79:4f:91:e1:17:
51:a2:c1:c1:87:1c:30:f3:a0:40:6b:8a:70:37:d2:e9:cb:57:
89:8f:36:6c:64:bd:47:10:4f:30:c0:4d:e7:07:87:fb:e6:48:
ab:8e:ac:cf:68:fd:27:c8:31:36:01:35:94:d1:8b:3d:60:ed:
b9:d7:69:e6:e5:0b:b7:bf:a0:e6:de:3e:6a:b4:30:0b:f1:12:
db:c5:4b:34:48:a3:7c:ab:3d:18:89:58:0f:13:a2:a5:da:5e:
0c:43:fe:22:4a:b3:00:c9:ca:b0:5e:87:11:03:0c:56:94:78:
76:07:48:58:7f:a4:f5:d0:0a:cd:3e:9b:2b:cd:3b:aa:1b:ce:
93:35:ae:d9:c5:78:b3:8f:af:9b:3a:e1:77:2a:26:0d:d3:43:
ed:2e:b2:a2:06:0b:35:21:4e:a0:ec:4b:0d:fb:05:f8:84:5f:
98:9d:a8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou7pFyKlzypyi+aqoCYliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGU4Mjg4Mjk4NDZmNjM0NjVhMzc0NDdlY2UzYTc0NmE0
OGRkNmMwHhcNMjYwMzI2MDYwMTI0WhcNMjYwMzI3MDYwMTI0WjAzMTEwLwYDVQQD
EyhhNjI2Yjk5ZjVmMmNhZjk4ODEyMmNkNGMwNjNhOTc1OGU1ZDcyMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzCrW9KG/7wCxkdGKB2WJBexzjje
2UThvjcS/GFFO7chUHJ4HPNkgBTt7OFfeQ9p0IQQ8uqzaFZglpAOghQ5yXlwtz2i
DzC5PyeJ81h0rDaomB2Sy3ObPX1IebHnyzyn46q5VoEshP1dxfMb4CMUpn38C2o/
DCoFW8LqKtRNInEUFp1RiXwbJgbH1glulGUO17IvGOHJnWBauf42o8T+wbMdCN8Y
44Ii8UnD0/XF+F6StRvrh9vHBKuSN89rpM2S+LBpXgqrCIqqfub6qtiCoruNaPHh
lhY+4MJvfemob6f3/xYCvEnRkXIxAUgXx8xxJiWVseHM3/ih+UVMjYVYmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYmuZ9fLK+YgSLNTAY6l1jl1yIhMB8GA1UdIwQY
MBaAFEKOgogphG9jRlo3RH7OOnRqSN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMt
YTJmNjdmMmJmOTUwLzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMtYTJmNjdmMmJmOTUw
LzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWNWYeM8
Be1MKJkxqRn6MmdKWgx3PMX5TTsck1nwLmlJ6m/vsaCILsBp8qj++Q8nuVaNO2Dn
gzeFyEh2qr4uSaZfmZ0SYrT7UeBFuOp+LkKC/DcLfHlPkeEXUaLBwYccMPOgQGuK
cDfS6ctXiY82bGS9RxBPMMBN5weH++ZIq46sz2j9J8gxNgE1lNGLPWDtuddp5uUL
t7+g5t4+arQwC/ES28VLNEijfKs9GIlYDxOipdpeDEP+IkqzAMnKsF6HEQMMVpR4
dgdIWH+k9dAKzT6bK807qhvOkzWu2cV4s4+vmzrhdyomDdND7S6yogYLNSFOoOxL
DfsF+IRfmJ2o3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:43 2026 by rpki-client