Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: FsRTKshhmSesSLmlkkzsq8jd9fjIK4MWa0WllMwyVsg=
Subject key identifier: 8F:F2:42:BC:9A:8D:D4:72:E1:D4:92:B5:20:74:83:42:88:3A:29:E1
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 019D28BB99D5E4F9AB160F308AC0D9F64669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: GIquyDt/K5oaiiIfun9nYbKxfNkvXHNpE2ul6SD8Q6E=)
2: kSqnJudP1pAwQZ-smOra_DXvmqo.roa (hash: MWXJ230azqqoaYeTEJboZO3ZCTU5ujgS6o/oqGqK34I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:99:d5:e4:f9:ab:16:0f:30:8a:c0:d9:f6:46:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=8ff242bc9a8dd472e1d492b520748342883a29e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:79:0f:20:6a:40:41:73:d7:b6:20:be:fb:
00:70:61:57:8e:3b:bf:0a:b0:47:50:5b:a8:eb:df:
9f:46:fb:0d:10:3a:bc:16:4c:63:fe:44:38:19:a3:
84:4b:99:56:80:ac:1a:40:4e:1b:88:63:30:13:21:
36:a8:5a:6a:b0:c5:ce:81:d8:8d:34:f1:91:f7:ba:
4c:e3:84:8c:96:45:38:ad:5b:a8:a3:ff:ea:1f:4a:
cc:e9:b5:4b:60:a8:eb:a5:87:97:03:6e:bc:81:21:
60:4d:39:cd:ec:af:d3:c2:d1:0d:a2:9f:35:fa:85:
12:47:76:54:cd:2d:82:4b:d8:48:f3:d4:67:1a:d0:
1e:51:2b:ae:5a:3f:a2:28:39:81:8a:25:dd:c3:c9:
36:1e:91:0a:88:e1:c7:8e:bb:da:53:dc:44:98:ab:
7c:af:f9:a5:da:c4:a9:a5:9d:17:18:62:2d:fd:75:
2c:b7:5a:58:9c:a1:a1:62:2b:6a:45:ee:e5:c7:86:
a3:e6:8c:ae:42:7f:39:72:2e:59:02:22:e8:aa:50:
e3:f4:f8:8a:f2:d7:f4:ea:b5:ce:0f:23:5f:40:72:
7d:19:01:8e:bf:64:60:a2:1f:9b:84:5d:b6:0d:d1:
dc:20:68:72:10:ff:93:1c:e3:6b:6c:45:48:dd:79:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:42:BC:9A:8D:D4:72:E1:D4:92:B5:20:74:83:42:88:3A:29:E1
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6e:e4:a4:7c:04:22:31:82:32:79:55:7d:a3:89:c8:e9:5f:
58:3d:13:f0:3a:33:c5:84:93:1d:0a:d7:74:a5:f9:4a:63:fe:
0d:0c:11:9d:84:44:96:ea:22:40:70:6a:f0:ed:27:16:1e:40:
89:ef:43:60:00:02:da:e7:cd:95:63:c2:f9:04:a8:a9:bc:a2:
af:8f:5c:76:4e:05:65:e3:ce:17:0f:df:64:ac:7e:b9:b0:16:
98:52:b6:99:4a:2f:c4:79:3a:b0:bd:77:92:d7:18:cd:44:19:
69:30:7f:f8:2c:4b:27:f8:42:08:08:b1:8d:22:f5:8d:dd:c0:
3a:33:75:67:ec:18:ca:3d:b6:50:4f:a2:f4:aa:b6:89:1e:4e:
02:cd:72:26:5c:e7:a2:82:79:64:7a:50:f6:37:1d:e3:cf:3a:
08:ec:16:b8:b4:e6:9e:4a:7c:56:50:b3:9c:cf:39:f2:84:f1:
56:03:af:fd:8c:90:11:44:2f:4f:8d:ec:85:58:6f:3f:5a:0e:
be:0a:d6:50:d6:fb:20:50:34:c8:65:a9:07:c3:bc:17:8e:e1:
83:6d:61:15:88:4a:c2:7c:ee:61:22:55:35:3e:b9:d9:60:fb:
5e:ab:aa:57:8b:f0:bf:ed:86:c5:52:5a:10:b2:f5:d0:86:d5:
f6:83:ff:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5nV5PmrFg8wisDZ9kZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxM2ZmYTEwNmFlM2ZlZTZiZTg3YmFjMDZhODdiYTU3ZWQx
YzExNDAwHhcNMjYwMzI2MDYwMTE2WhcNMjYwMzI3MDYwMTE2WjAzMTEwLwYDVQQD
Eyg4ZmYyNDJiYzlhOGRkNDcyZTFkNDkyYjUyMDc0ODM0Mjg4M2EyOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGN5DyBqQEFz17YgvvsAcGFXjju/
CrBHUFuo69+fRvsNEDq8Fkxj/kQ4GaOES5lWgKwaQE4biGMwEyE2qFpqsMXOgdiN
NPGR97pM44SMlkU4rVuoo//qH0rM6bVLYKjrpYeXA268gSFgTTnN7K/TwtENop81
+oUSR3ZUzS2CS9hI89RnGtAeUSuuWj+iKDmBiiXdw8k2HpEKiOHHjrvaU9xEmKt8
r/ml2sSppZ0XGGIt/XUst1pYnKGhYitqRe7lx4aj5oyuQn85ci5ZAiLoqlDj9PiK
8tf06rXODyNfQHJ9GQGOv2Rgoh+bhF22DdHcIGhyEP+THONrbEVI3Xl7twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/yQryajdRy4dSStSB0g0KIOinhMB8GA1UdIwQY
MBaAFEE/+hBq4/7mvoe6wGqHulftHBFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMt
ZmEyNmVjMzlmYWJhLzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMtZmEyNmVjMzlmYWJh
LzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm7kpHwE
IjGCMnlVfaOJyOlfWD0T8DozxYSTHQrXdKX5SmP+DQwRnYREluoiQHBq8O0nFh5A
ie9DYAAC2ufNlWPC+QSoqbyir49cdk4FZePOFw/fZKx+ubAWmFK2mUovxHk6sL13
ktcYzUQZaTB/+CxLJ/hCCAixjSL1jd3AOjN1Z+wYyj22UE+i9Kq2iR5OAs1yJlzn
ooJ5ZHpQ9jcd4886COwWuLTmnkp8VlCznM858oTxVgOv/YyQEUQvT43shVhvP1oO
vgrWUNb7IFA0yGWpB8O8F47hg21hFYhKwnzuYSJVNT652WD7XquqV4vwv+2GxVJa
ELL10IbV9oP/Vw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:13 2026 by rpki-client