Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: LQNipZbDeGN5/tL6Aow5cY+R/HP+LQVV/X9H7YX/J3U=
Subject key identifier: E8:E9:81:CD:46:B5:39:B8:81:F3:FD:94:50:CB:95:DF:E6:1C:25:21
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 019D28BBAAEC429843A27E4A0B91632162BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 10E4
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: DBJ+jaO4W/dI36qC89j5semLlVI8e5ONJHdCRrl1f6c=)
2: ws3LMFUwqOssAgdFH0sQW1QshrQ.roa (hash: 0QPouBqOetwvm5EolmlFqYseOotdTyUeyqwZDQ7ojQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:aa:ec:42:98:43:a2:7e:4a:0b:91:63:21:62:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=e8e981cd46b539b881f3fd9450cb95dfe61c2521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:25:9f:76:b7:1c:d4:aa:3e:3f:55:65:41:
50:db:5e:fb:e9:cf:38:43:dc:d3:4f:5d:bf:a5:fd:
5c:08:a7:65:a9:59:bc:7a:cb:2b:4c:75:d2:c1:09:
4e:c5:03:6e:76:11:d6:a7:44:a1:31:87:39:81:17:
10:fc:99:45:d1:87:de:4b:a3:b9:bc:ff:cd:ee:7a:
f1:d6:1b:9b:f5:7f:73:f8:4b:61:71:d2:b4:fd:2c:
c6:35:ac:21:83:b7:82:89:88:f8:76:52:1c:41:7e:
ff:7e:82:ac:52:bd:f9:f3:7e:74:e2:eb:20:3e:e8:
ba:b7:63:fe:3b:89:4d:d2:74:dc:e5:a8:03:78:fa:
0a:9d:c5:79:09:12:07:2b:a4:c4:ed:47:9f:e7:16:
65:ec:d4:29:b3:dc:5b:4e:3b:7b:ff:09:50:85:f6:
94:5f:bc:ab:20:34:02:4b:a7:54:f3:a1:ee:88:ce:
d5:da:5d:aa:33:75:26:73:b6:5b:27:12:6e:e7:45:
df:3c:bf:64:41:0c:2c:c6:d4:0f:ea:94:5d:66:b7:
39:43:bc:98:18:51:57:f4:9f:bb:e1:7e:20:4e:7c:
8c:09:03:c5:0f:7d:ce:35:97:b1:e3:27:71:52:e6:
7b:5b:d2:02:64:5b:a9:04:6e:20:79:af:90:72:be:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:81:CD:46:B5:39:B8:81:F3:FD:94:50:CB:95:DF:E6:1C:25:21
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:7b:99:7a:30:79:f4:51:d8:0b:2f:4d:04:24:a1:f4:cf:
0b:24:3e:10:f4:1f:df:96:82:2f:28:35:f0:45:48:aa:50:90:
98:f4:50:da:2d:46:8e:86:45:e2:7d:b6:be:64:5e:89:21:50:
13:c0:9d:de:41:ee:8d:3a:ad:3e:c5:37:3d:f6:36:42:4e:53:
4e:11:db:b6:b0:b7:fe:a4:37:3e:f2:0f:51:b0:70:26:dc:b2:
77:b4:41:3e:3f:ff:e0:31:2b:bc:cb:42:9f:33:c1:f2:6e:87:
55:13:df:a0:6a:11:86:cc:bf:32:4a:1c:9c:01:2a:79:7c:3a:
87:7c:a3:dd:95:75:78:20:66:50:3c:8c:a7:2d:e9:64:f4:75:
14:79:0e:65:93:c4:51:ab:c9:97:ee:fc:a2:4a:dd:52:29:8f:
d9:3a:85:71:a2:96:1d:d3:62:c7:d2:17:9f:27:9c:40:08:3c:
11:99:c9:6e:59:b6:df:69:49:19:c1:f7:40:38:ed:a4:0e:96:
21:4a:88:a2:24:74:d4:a9:f5:58:b9:f5:5f:3e:9a:dd:f0:61:
47:95:7f:bb:5e:7c:bd:16:b6:52:10:c6:ca:0f:d3:e1:50:a5:
fc:8c:dc:a0:a7:94:49:a8:7c:22:be:e8:f6:f1:dd:bb:16:f8:
c7:c3:9f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6rsQphDon5KC5FjIWK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMzAxNzc1YjNmZGZmMDRhMjI3ZDZkODU5YzAxYjZkNjMz
YTRmMGIwHhcNMjYwMzI2MDYwMTIwWhcNMjYwMzI3MDYwMTIwWjAzMTEwLwYDVQQD
EyhlOGU5ODFjZDQ2YjUzOWI4ODFmM2ZkOTQ1MGNiOTVkZmU2MWMyNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZQln3a3HNSqPj9VZUFQ21776c84
Q9zTT12/pf1cCKdlqVm8essrTHXSwQlOxQNudhHWp0ShMYc5gRcQ/JlF0YfeS6O5
vP/N7nrx1hub9X9z+EthcdK0/SzGNawhg7eCiYj4dlIcQX7/foKsUr3583504usg
Pui6t2P+O4lN0nTc5agDePoKncV5CRIHK6TE7Uef5xZl7NQps9xbTjt7/wlQhfaU
X7yrIDQCS6dU86HuiM7V2l2qM3Umc7ZbJxJu50XfPL9kQQwsxtQP6pRdZrc5Q7yY
GFFX9J+74X4gTnyMCQPFD33ONZex4ydxUuZ7W9ICZFupBG4gea+Qcr4x5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjpgc1GtTm4gfP9lFDLld/mHCUhMB8GA1UdIwQY
MBaAFEMwF3Wz/f8EoifW2FnAG21jOk8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEt
MmNkMDA5MTBiY2I3LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEtMmNkMDA5MTBiY2I3
LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKZ7mXow
efRR2AsvTQQkofTPCyQ+EPQf35aCLyg18EVIqlCQmPRQ2i1GjoZF4n22vmReiSFQ
E8Cd3kHujTqtPsU3PfY2Qk5TThHbtrC3/qQ3PvIPUbBwJtyyd7RBPj//4DErvMtC
nzPB8m6HVRPfoGoRhsy/MkocnAEqeXw6h3yj3ZV1eCBmUDyMpy3pZPR1FHkOZZPE
UavJl+78okrdUimP2TqFcaKWHdNix9IXnyecQAg8EZnJblm232lJGcH3QDjtpA6W
IUqIoiR01Kn1WLn1Xz6a3fBhR5V/u158vRa2UhDGyg/T4VCl/IzcoKeUSah8Ir7o
9vHduxb4x8Of0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:53 2026 by rpki-client