Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: 2kGitBrSbXpSPVMpHUkyDzGIJN0zMdXnr8034sLfkLo=
Subject key identifier: 6F:23:C6:79:4A:09:AD:7E:5F:F0:15:96:60:2B:08:86:06:2F:F6:82
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 019D284E198B76C7656164247DD641E531CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: 3/gaZs3h4MwjfEQ1iMkvnPqVzHHAgOllBlz5TGMldIU=)
2: wt3Ui80OQ2RXah5MDzF8MWqly2Q.roa (hash: J67sJRmcaTP47jMbuSDSqG6+LX3lK8JypZ67sDFFc/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:19:8b:76:c7:65:61:64:24:7d:d6:41:e5:31:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=6f23c6794a09ad7e5ff01596602b0886062ff682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2b:8b:9b:ad:af:9a:6a:6b:6a:08:8d:b4:db:
f1:b1:30:84:6c:47:98:c6:a3:ca:89:44:cd:68:23:
a3:e6:17:46:4a:50:a7:f9:7a:e6:eb:33:81:ff:9c:
23:35:61:85:ea:8e:72:91:98:5c:46:d1:17:f3:0d:
b1:dc:10:a9:50:55:55:d4:15:7b:07:d6:08:67:80:
d5:8c:0a:b1:cb:0d:89:02:bd:c8:4c:be:22:91:8e:
95:9b:70:70:4c:d1:12:ec:be:ca:ee:90:77:6d:3b:
7f:4e:a9:8d:80:68:9f:9c:20:f5:e9:a9:ca:d8:3f:
f2:bd:19:3f:99:eb:2b:5c:af:77:7b:f8:32:13:ba:
78:90:d2:05:96:92:fb:f0:e5:74:ca:1b:d1:b7:be:
f9:7a:6c:ab:8e:2c:34:3a:85:ef:0d:41:e2:2f:f6:
62:3e:80:4a:06:b5:b8:f7:90:ef:d5:49:25:eb:12:
84:db:38:20:10:1b:0b:22:da:d9:36:27:9e:ae:aa:
24:1e:12:54:ad:43:ce:77:80:0d:35:65:02:4d:5f:
cc:66:87:1a:15:38:dc:78:7f:9f:84:16:79:fb:d9:
23:c9:9a:94:56:5b:64:97:72:98:af:9f:3c:da:f2:
eb:90:64:b0:3d:01:8f:3e:15:86:3f:1f:e2:89:12:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:C6:79:4A:09:AD:7E:5F:F0:15:96:60:2B:08:86:06:2F:F6:82
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:d1:fa:e3:31:97:ac:07:4b:3f:94:dc:c3:0f:69:22:98:
b8:e8:d7:e9:e6:34:ef:41:ff:aa:48:97:0d:13:d3:40:5b:91:
f3:bf:ba:ac:a2:8e:7b:87:76:d7:7a:da:28:e3:b1:4d:1a:d1:
2f:87:16:57:83:dc:df:f8:20:02:1e:1b:81:fc:f9:de:9c:d6:
6f:f5:17:2d:a8:da:d5:b6:a1:96:0f:d4:3a:63:55:7a:5d:3e:
e1:c7:e4:98:75:1f:95:24:f7:16:22:d3:8f:64:6a:58:1e:f4:
1a:76:c6:5f:4d:11:2e:b6:d8:c1:8c:bf:41:10:52:26:42:31:
ce:34:91:e4:89:f8:90:7e:58:25:f4:f2:cf:3c:4d:b5:35:ce:
b6:bc:b9:6e:5d:f6:f6:4a:ee:63:5f:02:0a:35:99:20:0c:ec:
01:b4:bf:99:05:a5:8f:28:39:3f:d1:0b:50:24:1a:3f:0a:cb:
c3:b1:72:0e:ba:0c:96:6d:89:27:6d:b0:53:92:fd:ba:1b:6d:
71:2f:17:2d:92:68:52:c7:49:ed:0b:a5:d9:58:94:09:c9:76:
8c:43:fc:bd:5a:f0:15:dc:6d:1e:87:fa:3e:12:fe:bb:3c:c2:
86:6d:51:6c:db:3c:20:99:bc:48:3a:d7:80:89:5b:c2:78:60:
d4:a0:1b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThmLdsdlYWQkfdZB5THNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1
OTdhMTIwHhcNMjYwMzI2MDQwMTQwWhcNMjYwMzI3MDQwMTQwWjAzMTEwLwYDVQQD
Eyg2ZjIzYzY3OTRhMDlhZDdlNWZmMDE1OTY2MDJiMDg4NjA2MmZmNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SuLm62vmmpragiNtNvxsTCEbEeY
xqPKiUTNaCOj5hdGSlCn+Xrm6zOB/5wjNWGF6o5ykZhcRtEX8w2x3BCpUFVV1BV7
B9YIZ4DVjAqxyw2JAr3ITL4ikY6Vm3BwTNES7L7K7pB3bTt/TqmNgGifnCD16anK
2D/yvRk/mesrXK93e/gyE7p4kNIFlpL78OV0yhvRt775emyrjiw0OoXvDUHiL/Zi
PoBKBrW495Dv1Ukl6xKE2zggEBsLItrZNieerqokHhJUrUPOd4ANNWUCTV/MZoca
FTjceH+fhBZ5+9kjyZqUVltkl3KYr5882vLrkGSwPQGPPhWGPx/iiRKwsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8jxnlKCa1+X/AVlmArCIYGL/aCMB8GA1UdIwQY
MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt
NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm
LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7nR+uMx
l6wHSz+U3MMPaSKYuOjX6eY070H/qkiXDRPTQFuR87+6rKKOe4d213raKOOxTRrR
L4cWV4Pc3/ggAh4bgfz53pzWb/UXLaja1bahlg/UOmNVel0+4cfkmHUflST3FiLT
j2RqWB70GnbGX00RLrbYwYy/QRBSJkIxzjSR5In4kH5YJfTyzzxNtTXOtry5bl32
9kruY18CCjWZIAzsAbS/mQWljyg5P9ELUCQaPwrLw7FyDroMlm2JJ22wU5L9uhtt
cS8XLZJoUsdJ7Qul2ViUCcl2jEP8vVrwFdxtHof6PhL+uzzChm1RbNs8IJm8SDrX
gIlbwnhg1KAb7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:58 2026 by rpki-client