Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: last1zFf545I8QuwkurBbCZ0uY3iiU4e1vuyGhPP2Ms=
Subject key identifier: 31:29:BC:A8:D5:1E:D4:B1:96:21:70:71:BA:A7:50:4F:D4:01:B1:B3
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019D29607AA7D4A676E6A20942511A4D5F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 0654
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: zWQcXn5gpfqKEVOrdGeY9leqtrg7zpby4OheSBAA+HQ=)
2: geuCX65zM5b7m_vZubXGXyTi8IY.roa (hash: qQCab6ruYYvNVl/wsnvfIx6ptbnTRuSgj4X/okH45lc=)
3: odNrW4lU42BAvPE84otnwCnAcjo.roa (hash: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7a:a7:d4:a6:76:e6:a2:09:42:51:1a:4d:5f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=3129bca8d51ed4b196217071baa7504fd401b1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:17:29:cc:b6:94:a6:ce:96:5c:59:a8:f5:
aa:a4:b2:b9:6d:41:cf:66:44:48:28:cd:0b:c9:3c:
24:61:25:c8:cf:ad:1d:0c:8f:92:ed:24:06:76:d5:
8b:bb:30:ec:01:03:24:35:98:a3:7d:ab:2f:58:82:
b9:53:a7:71:a7:e2:5b:f1:91:a6:12:cf:23:57:8b:
30:42:99:eb:ed:96:e5:7d:72:d4:21:3d:d9:6f:3a:
f0:e0:af:88:87:57:98:ff:f5:1f:4c:b3:f1:37:bf:
b0:0a:8a:5b:c9:79:33:b4:ae:3a:b1:aa:af:30:c9:
4c:d0:35:38:a8:9f:a4:f6:83:b3:c9:a5:49:ab:44:
c2:6b:6b:b9:85:05:3f:b4:a7:56:32:92:c9:0e:b2:
c8:c4:89:85:d6:1e:8b:13:54:9c:4a:ac:17:38:e2:
31:f6:70:eb:99:cc:d9:cf:39:fb:87:db:df:32:d5:
4e:4a:75:7c:db:61:cf:3d:b7:0e:d1:b2:48:7b:fa:
57:3e:fd:c3:bf:f2:90:32:1d:82:e9:5b:75:be:87:
50:db:ac:f3:3f:a4:e2:7f:48:ea:cb:0b:6b:42:59:
82:5d:8e:77:9d:17:9d:09:19:d4:59:fb:a5:39:bc:
7e:c8:e9:1d:fe:e8:5b:5b:91:c4:cc:48:c2:7a:09:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:29:BC:A8:D5:1E:D4:B1:96:21:70:71:BA:A7:50:4F:D4:01:B1:B3
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:c1:6b:85:8c:47:4b:31:9f:07:d1:bd:c0:53:a8:65:1b:
7d:24:bf:64:f7:fa:03:9d:a8:ef:bd:cf:7d:a4:60:13:fb:9c:
cf:58:3b:78:9e:4f:17:e1:11:07:61:c9:9a:08:dc:18:16:52:
d3:da:52:3b:ab:b1:d4:06:bf:9a:b7:33:3d:2b:ff:70:30:fd:
8a:a7:ec:f9:7a:10:44:93:62:36:c3:fc:54:c5:50:80:d5:b3:
c9:a1:e7:4a:ef:d5:15:83:19:6e:5f:5c:75:4f:75:41:a0:5f:
98:06:b4:f3:e4:3d:f9:76:ec:b2:10:9b:9a:2a:56:e2:b6:78:
98:dc:d3:f9:23:11:39:30:d5:85:2f:b7:fd:39:44:24:3a:6f:
4d:d9:01:af:b3:41:8c:47:ca:76:98:92:f7:cf:e7:a3:b6:c2:
9b:74:af:97:58:11:f3:5a:11:c2:fb:2a:74:04:7e:e0:75:6a:
63:5a:af:99:da:3d:19:ea:2d:df:f7:e9:f4:31:b8:03:2a:ea:
66:8d:37:4e:c1:49:f8:a4:86:d2:86:e9:90:58:6e:a4:eb:59:
d2:fa:b7:73:e7:9b:e2:49:a9:0e:ba:3b:5b:a2:5a:5a:97:e7:
77:75:3e:0e:06:1c:31:25:87:58:42:be:00:dd:5f:a4:14:a3:
22:65:37:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYHqn1KZ25qIJQlEaTV9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm
NjM1YjcwHhcNMjYwMzI2MDkwMTIxWhcNMjYwMzI3MDkwMTIxWjAzMTEwLwYDVQQD
EygzMTI5YmNhOGQ1MWVkNGIxOTYyMTcwNzFiYWE3NTA0ZmQ0MDFiMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD8XKcy2lKbOllxZqPWqpLK5bUHP
ZkRIKM0LyTwkYSXIz60dDI+S7SQGdtWLuzDsAQMkNZijfasvWIK5U6dxp+Jb8ZGm
Es8jV4swQpnr7ZblfXLUIT3Zbzrw4K+Ih1eY//UfTLPxN7+wCopbyXkztK46saqv
MMlM0DU4qJ+k9oOzyaVJq0TCa2u5hQU/tKdWMpLJDrLIxImF1h6LE1ScSqwXOOIx
9nDrmczZzzn7h9vfMtVOSnV822HPPbcO0bJIe/pXPv3Dv/KQMh2C6Vt1vodQ26zz
P6Tif0jqywtrQlmCXY53nRedCRnUWfulObx+yOkd/uhbW5HEzEjCegnfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEpvKjVHtSxliFwcbqnUE/UAbGzMB8GA1UdIwQY
MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt
NTFkYzJiMDk2ZGVmLzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm
LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4HBa4WM
R0sxnwfRvcBTqGUbfSS/ZPf6A52o773PfaRgE/ucz1g7eJ5PF+ERB2HJmgjcGBZS
09pSO6ux1Aa/mrczPSv/cDD9iqfs+XoQRJNiNsP8VMVQgNWzyaHnSu/VFYMZbl9c
dU91QaBfmAa08+Q9+XbsshCbmipW4rZ4mNzT+SMROTDVhS+3/TlEJDpvTdkBr7NB
jEfKdpiS98/no7bCm3Svl1gR81oRwvsqdAR+4HVqY1qvmdo9Geot3/fp9DG4Ayrq
Zo03TsFJ+KSG0obpkFhupOtZ0vq3c+eb4kmpDro7W6JaWpfnd3U+DgYcMSWHWEK+
AN1fpBSjImU3ag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:56 2026 by rpki-client