Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: Qz+ay2F1tvRkyEk+gM4SxVjQIHwqLxwzH8IXabr6jDY=
Subject key identifier: 3F:7D:34:88:1C:53:06:49:40:A6:5D:7A:D0:EA:A3:61:43:D6:FC:A1
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 019D28F2E0285F85B7EEDE3249EB7DCE8F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 07:01:38 +0000
Manifest this update: Thu 26 Mar 2026 07:01:38 +0000
Manifest next update: Fri 27 Mar 2026 07:01:38 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: tglnei+bdERX+0jj8t1lr8grjPQf2nm6SQJrYt6Gy04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e0:28:5f:85:b7:ee:de:32:49:eb:7d:ce:8f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Mar 26 07:01:38 2026 GMT
Not After : Mar 27 07:01:38 2026 GMT
Subject: CN=3f7d34881c53064940a65d7ad0eaa36143d6fca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:f0:0a:8c:31:1e:d3:7e:76:4a:00:78:ad:
0b:b9:11:ad:ea:3e:17:a7:af:11:ab:fc:f1:24:b1:
63:a9:43:b2:44:4e:a5:07:49:a0:63:a8:e1:a2:49:
ad:41:87:bd:b0:f9:e5:a5:d8:1f:24:d9:a8:76:fd:
a0:05:42:fb:19:c9:8c:01:fc:d4:68:db:1f:4d:9b:
11:df:ee:31:55:9a:f4:75:9c:ff:ed:d5:4b:6c:df:
e9:1f:67:d6:e7:94:43:65:59:02:a4:ec:e8:56:b9:
97:7b:b7:5e:6a:ef:31:bc:87:3d:f4:7f:3c:19:22:
4c:e7:4c:c9:38:6d:7a:35:e1:3b:0c:c7:bc:27:a6:
b5:71:82:09:10:f8:21:ac:ac:d8:9c:5d:78:fb:4e:
7c:bb:a6:b7:0e:4d:c8:99:d8:a8:2e:19:65:73:25:
12:32:6e:ca:e2:15:44:e5:b2:9b:66:62:0b:80:e9:
74:54:be:e8:6d:5d:49:52:55:30:b2:3a:f0:ad:02:
31:9a:e9:1b:fb:71:e1:87:7e:95:d4:39:7e:af:4d:
de:fa:48:5e:36:a4:9f:58:4a:f5:8a:7b:18:d1:bd:
ec:04:86:a5:42:05:e9:cd:60:61:1a:b6:99:d9:53:
6b:7f:4c:ca:f0:1e:e5:d1:05:ae:6e:51:f6:e2:c8:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7D:34:88:1C:53:06:49:40:A6:5D:7A:D0:EA:A3:61:43:D6:FC:A1
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9e:29:68:9e:32:4e:37:84:40:4b:18:43:a0:1e:66:f7:68:
09:48:11:7a:4b:67:5d:16:fe:7d:8d:ef:34:40:10:0b:db:65:
ca:d9:82:1f:a3:8f:00:64:02:ed:ea:03:9f:4f:8d:82:d8:18:
62:2c:ba:fb:da:ff:06:82:8e:28:f1:06:d5:57:e3:35:2f:08:
d9:28:86:eb:83:ef:e6:57:47:d7:eb:1a:ae:b0:81:03:66:f5:
8e:a5:90:f7:bd:b2:14:48:4c:ac:de:7e:69:8e:fc:bc:9a:16:
e6:23:1c:ca:d3:ba:36:72:b4:ce:66:ec:4c:50:89:19:0e:66:
40:16:e9:39:75:5b:c3:07:41:e2:dd:cb:c1:91:dc:35:8a:14:
68:ab:06:33:09:bd:3b:cc:c2:0e:02:05:cb:c9:f8:f9:79:0d:
5a:cb:e3:76:ee:87:4a:c3:18:f3:e7:90:8f:c7:9a:e5:ac:b3:
da:53:35:6c:bc:e6:29:3f:05:87:65:4d:40:84:48:12:93:c6:
5d:ad:c7:12:4a:19:9e:f7:8e:1f:30:91:3b:f4:f3:f1:13:d4:
51:6e:93:1e:37:82:07:09:e7:8f:cf:b7:a5:ff:52:92:49:9d:
22:86:55:81:61:e2:33:ef:69:1b:d7:23:70:6b:9a:7f:48:c6:
ac:3e:f8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8uAoX4W37t4ySet9zo8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzc3YjQ3MzYzNjgxMzc4ZmFjZTQ2NjE0MWQ1NGNjODgz
OTljZjUwHhcNMjYwMzI2MDcwMTM4WhcNMjYwMzI3MDcwMTM4WjAzMTEwLwYDVQQD
EygzZjdkMzQ4ODFjNTMwNjQ5NDBhNjVkN2FkMGVhYTM2MTQzZDZmY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKDwCowxHtN+dkoAeK0LuRGt6j4X
p68Rq/zxJLFjqUOyRE6lB0mgY6jhokmtQYe9sPnlpdgfJNmodv2gBUL7GcmMAfzU
aNsfTZsR3+4xVZr0dZz/7dVLbN/pH2fW55RDZVkCpOzoVrmXe7deau8xvIc99H88
GSJM50zJOG16NeE7DMe8J6a1cYIJEPghrKzYnF14+058u6a3Dk3ImdioLhllcyUS
Mm7K4hVE5bKbZmILgOl0VL7obV1JUlUwsjrwrQIxmukb+3Hhh36V1Dl+r03e+khe
NqSfWEr1insY0b3sBIalQgXpzWBhGraZ2VNrf0zK8B7l0QWublH24sgTzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD99NIgcUwZJQKZdetDqo2FD1vyhMB8GA1UdIwQY
MBaAFEPHe0c2NoE3j6zkZhQdVMyIOZz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEt
MWZkMTBkOGUwNzVmLzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEtMWZkMTBkOGUwNzVm
LzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ4paJ4y
TjeEQEsYQ6AeZvdoCUgRektnXRb+fY3vNEAQC9tlytmCH6OPAGQC7eoDn0+NgtgY
Yiy6+9r/BoKOKPEG1VfjNS8I2SiG64Pv5ldH1+sarrCBA2b1jqWQ972yFEhMrN5+
aY78vJoW5iMcytO6NnK0zmbsTFCJGQ5mQBbpOXVbwwdB4t3LwZHcNYoUaKsGMwm9
O8zCDgIFy8n4+XkNWsvjdu6HSsMY8+eQj8ea5ayz2lM1bLzmKT8Fh2VNQIRIEpPG
Xa3HEkoZnveOHzCRO/Tz8RPUUW6THjeCBwnnj8+3pf9SkkmdIoZVgWHiM+9pG9cj
cGuaf0jGrD74+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:37 2026 by rpki-client