Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: BZhxNt2YMhiGEJHJnNuKJge3h4/Xyqk/vMPgAmzcC6c=
Subject key identifier: CD:72:5A:02:8A:E5:E8:9A:78:F1:0B:4C:C9:0A:BB:50:A8:40:F9:7E
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 019D2816D2B53A73AA0AE785C4E9DF4DF18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: 8tumiphBeiey0kOdxFy4ZvgHUCZL+PBS2hCpgFByAYI=)
2: vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa (hash: o/PY0zcPwn5EFiTDVfiSoj0UDONeDefYMUGFGgIeJHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d2:b5:3a:73:aa:0a:e7:85:c4:e9:df:4d:f1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=cd725a028ae5e89a78f10b4cc90abb50a840f97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:45:8f:26:5e:8e:fd:34:68:14:23:c9:f0:
3f:a9:a2:17:ca:15:77:30:06:4f:f0:b0:6b:43:1e:
55:31:d5:6a:b3:82:26:1a:10:ea:b3:e9:1f:cd:c7:
89:39:45:8e:0e:40:e4:47:25:57:8f:2b:a8:bc:0a:
33:82:94:d8:19:a7:25:53:9d:26:cf:78:f9:60:79:
36:78:04:fd:13:46:c9:36:57:aa:3d:a8:6c:92:f6:
79:0c:d9:e1:a8:d0:28:75:c0:31:7d:75:e9:2d:45:
8e:fb:2d:e4:c4:a3:41:9e:aa:81:5a:b5:e8:fc:4f:
69:1c:22:73:30:f3:42:76:94:2f:ee:d2:7f:ae:5b:
1d:b0:fe:ec:3a:0b:76:d1:27:1e:7c:92:bd:91:5d:
75:05:b9:92:b9:9b:da:8a:94:f4:eb:6f:f2:3e:2d:
a6:95:e6:c9:73:77:0a:c5:29:89:30:2d:eb:97:b4:
0d:a6:5f:5b:66:5f:ca:3d:b5:d0:f7:73:39:f8:0c:
91:0f:8c:e1:a4:10:4a:da:4b:35:b6:38:b7:d5:74:
e2:d6:1e:f5:e7:07:ba:15:b9:7f:b5:69:18:aa:f4:
51:f8:ea:bf:90:15:33:7f:c8:da:c3:9a:6c:b6:23:
e4:26:a4:34:1e:e8:73:c1:d6:cc:89:69:5e:7d:28:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:5A:02:8A:E5:E8:9A:78:F1:0B:4C:C9:0A:BB:50:A8:40:F9:7E
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:36:58:f6:ef:3f:ea:b6:cf:73:06:a8:6d:6c:50:1c:62:8f:
bb:ca:84:db:7d:00:bc:4f:46:66:31:55:af:ee:6b:ee:e0:95:
ae:3f:eb:76:7c:1e:5a:5b:18:4b:b7:dd:3c:4c:eb:d4:bb:2a:
69:d0:a4:43:e5:48:c0:4e:cc:77:03:63:29:3e:8b:e5:cb:ab:
b5:9d:51:aa:8f:de:ca:0b:08:ef:70:a5:d2:b8:4d:25:da:86:
25:6e:f1:13:dc:31:80:96:01:09:86:d9:4b:70:d6:e5:c6:d8:
22:80:fe:ed:03:38:da:f7:f2:2e:a4:ac:a6:c6:f0:01:78:f7:
6f:2c:51:ce:7e:d0:b5:97:d1:95:94:15:74:09:0c:bc:43:bc:
0a:27:78:7b:45:a3:6c:42:1a:c9:c4:cb:c7:4f:5b:08:11:e1:
a7:05:97:b3:df:0d:54:4f:10:bb:e6:2c:bb:7a:81:96:3b:83:
b3:d0:c2:06:b9:d5:bb:70:fb:21:6f:0a:94:d7:ed:41:78:18:
9e:50:72:81:3c:52:f5:dc:89:12:85:2e:c9:1b:58:ae:8a:c8:
62:24:6d:0a:41:99:40:da:92:34:4b:a1:b4:8c:9b:cb:b9:bc:
1a:c7:cf:d2:6c:f8:66:5a:67:6b:34:c2:09:24:d4:bb:2a:a6:
e8:ac:06:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFtK1OnOqCueFxOnfTfGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOGZkMDVlZWI2ZWEwNWExMWQ2NjdhYmVkZDhlYTEwOTNk
MjcxYjMwHhcNMjYwMzI2MDMwMTE3WhcNMjYwMzI3MDMwMTE3WjAzMTEwLwYDVQQD
EyhjZDcyNWEwMjhhZTVlODlhNzhmMTBiNGNjOTBhYmI1MGE4NDBmOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2JFjyZejv00aBQjyfA/qaIXyhV3
MAZP8LBrQx5VMdVqs4ImGhDqs+kfzceJOUWODkDkRyVXjyuovAozgpTYGaclU50m
z3j5YHk2eAT9E0bJNleqPahskvZ5DNnhqNAodcAxfXXpLUWO+y3kxKNBnqqBWrXo
/E9pHCJzMPNCdpQv7tJ/rlsdsP7sOgt20ScefJK9kV11BbmSuZvaipT062/yPi2m
lebJc3cKxSmJMC3rl7QNpl9bZl/KPbXQ93M5+AyRD4zhpBBK2ks1tji31XTi1h71
5we6Fbl/tWkYqvRR+Oq/kBUzf8jaw5pstiPkJqQ0HuhzwdbMiWlefSh/LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1yWgKK5eiaePELTMkKu1CoQPl+MB8GA1UdIwQY
MBaAFKqP0F7rbqBaEdZnq+3Y6hCT0nGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEt
Yjk3YzJjNGFkNDM5LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEtYjk3YzJjNGFkNDM5
LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjZY9u8/
6rbPcwaobWxQHGKPu8qE230AvE9GZjFVr+5r7uCVrj/rdnweWlsYS7fdPEzr1Lsq
adCkQ+VIwE7MdwNjKT6L5curtZ1Rqo/eygsI73Cl0rhNJdqGJW7xE9wxgJYBCYbZ
S3DW5cbYIoD+7QM42vfyLqSspsbwAXj3byxRzn7QtZfRlZQVdAkMvEO8Cid4e0Wj
bEIaycTLx09bCBHhpwWXs98NVE8Qu+Ysu3qBljuDs9DCBrnVu3D7IW8KlNftQXgY
nlBygTxS9dyJEoUuyRtYrorIYiRtCkGZQNqSNEuhtIyby7m8GsfP0mz4ZlpnazTC
CSTUuyqm6KwGVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:51 2026 by rpki-client