Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: Iz+VgBmwFjwNxbt052f84XpNlVFrg0R3LIrXwS2tKR4=
Subject key identifier: 0A:84:E1:93:0B:21:04:57:81:7C:79:D6:8C:AF:00:48:9B:A4:93:5B
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019CAB6B320FCE3A4A087C8CDAC47AC26C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 115D
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: BJEVa_aX9GRfgBGuldqxrBW_ggU.roa (hash: yxFSDsFQ1W994H/MWEZPZMlBkPI/Yd+y9utpq4Nr9O8=)
2: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: tVFFKMEzNx07z9S4+PFkg2K73HWP92Nc0JWOc9oJGx4=)
3: aZLmDNfDNQfMwJ6001JcSrReXVo.roa (hash: q9+55aFzyoEUFmJ9wbybuO0labtSZYAJl9v8e7OVPio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:32:0f:ce:3a:4a:08:7c:8c:da:c4:7a:c2:6c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=0a84e1930b210457817c79d68caf00489ba4935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:89:5f:df:c1:3d:1c:1a:c6:22:b5:6a:e3:
53:a1:34:5e:f9:1a:1d:e1:c7:01:79:8b:bc:16:0d:
e2:13:3c:03:99:cd:6f:95:ec:20:07:e4:61:34:af:
de:d8:76:a5:65:61:e6:e1:33:11:14:0e:4a:0a:d3:
00:2a:f0:ac:b1:00:24:71:02:5e:83:2f:c2:47:c0:
c5:fd:0b:8c:27:53:13:47:7d:e7:0f:24:f0:0b:fa:
85:9a:ea:59:7f:0a:64:60:ce:8a:2f:7d:45:aa:13:
d6:60:0f:6a:f0:ef:06:c0:e9:96:1c:5c:73:c7:26:
d4:07:b2:2f:86:96:4d:7c:a5:27:a8:57:14:ea:c4:
8f:3b:ea:dd:c9:03:25:e0:60:63:29:61:e2:52:5b:
5a:54:9a:d2:9a:d7:cb:95:3c:61:a3:0d:99:9b:d2:
a3:ae:b1:0c:12:9f:c4:a5:f5:e6:2e:10:ae:d9:81:
44:32:29:8f:f2:6b:44:a7:0a:f8:c0:95:6a:bb:58:
4b:34:64:a1:40:b3:83:51:c6:7a:2e:a2:24:aa:7d:
63:97:dc:10:47:43:f6:79:7e:ab:0f:ec:4f:de:92:
5b:1a:31:2d:a2:5c:bb:c4:42:b0:16:2b:94:be:81:
8b:fb:3c:4e:a5:ee:de:70:25:85:f2:5a:7c:35:9a:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:E1:93:0B:21:04:57:81:7C:79:D6:8C:AF:00:48:9B:A4:93:5B
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:79:f4:44:f6:00:c6:ec:02:25:30:12:33:ca:75:5c:bf:26:
09:a6:39:6c:3b:f6:84:0b:f1:1c:ea:05:05:0e:53:97:c0:d1:
b1:9e:b6:e0:5a:bb:37:5d:25:8d:3b:74:03:a8:a0:f6:af:62:
05:0e:52:e5:d4:eb:21:b6:c9:dd:b7:1f:8a:25:f2:88:f0:35:
00:1f:47:d9:97:77:9d:77:5c:04:e8:7f:fe:cf:d6:7e:98:d4:
81:32:a6:7c:cb:d3:30:ae:59:13:9d:6b:be:43:11:40:48:68:
e7:83:9a:9d:d3:af:73:e7:7e:fc:32:62:5a:01:05:d7:29:9a:
1d:33:83:0d:e5:e7:8f:df:ee:59:d8:3e:c0:e7:38:f4:61:01:
a0:8b:28:e3:e8:bc:d6:41:ed:c5:dc:e5:70:ad:03:23:65:25:
21:ff:fa:c1:dd:a5:e1:67:93:1a:f2:ba:4c:e1:cc:7d:a2:9f:
7d:83:2f:42:64:dd:29:f6:00:18:0a:c9:45:26:11:e7:4e:68:
44:4c:7e:4d:a2:07:cd:a2:57:5b:02:2f:aa:9e:ed:60:3f:8b:
d8:eb:90:ac:39:de:cd:1a:64:72:a1:53:26:36:66:b7:c1:74:
c3:62:4f:fe:e0:52:8b:9e:b5:5b:eb:a9:b5:9a:38:ad:0d:c0:
fb:da:66:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazIPzjpKCHyM2sR6wmyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2Y0YTEyOGQwOWRmYzRiOGIwMzVhMTJjZDgzMWY5Zjdi
MDE0NjkwHhcNMjYwMzAxMjIwMDU0WhcNMjYwMzAyMjIwMDU0WjAzMTEwLwYDVQQD
EygwYTg0ZTE5MzBiMjEwNDU3ODE3Yzc5ZDY4Y2FmMDA0ODliYTQ5MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jCJX9/BPRwaxiK1auNToTRe+Rod
4ccBeYu8Fg3iEzwDmc1vlewgB+RhNK/e2HalZWHm4TMRFA5KCtMAKvCssQAkcQJe
gy/CR8DF/QuMJ1MTR33nDyTwC/qFmupZfwpkYM6KL31FqhPWYA9q8O8GwOmWHFxz
xybUB7IvhpZNfKUnqFcU6sSPO+rdyQMl4GBjKWHiUltaVJrSmtfLlTxhow2Zm9Kj
rrEMEp/EpfXmLhCu2YFEMimP8mtEpwr4wJVqu1hLNGShQLODUcZ6LqIkqn1jl9wQ
R0P2eX6rD+xP3pJbGjEtoly7xEKwFiuUvoGL+zxOpe7ecCWF8lp8NZofjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqE4ZMLIQRXgXx51oyvAEibpJNbMB8GA1UdIwQY
MBaAFELPShKNCd/EuLA1oSzYMfn3sBRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEt
MGIwNDM3NWY5YjM2LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEtMGIwNDM3NWY5YjM2
LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHn0RPYA
xuwCJTASM8p1XL8mCaY5bDv2hAvxHOoFBQ5Tl8DRsZ624Fq7N10ljTt0A6ig9q9i
BQ5S5dTrIbbJ3bcfiiXyiPA1AB9H2Zd3nXdcBOh//s/WfpjUgTKmfMvTMK5ZE51r
vkMRQEho54OandOvc+d+/DJiWgEF1ymaHTODDeXnj9/uWdg+wOc49GEBoIso4+i8
1kHtxdzlcK0DI2UlIf/6wd2l4WeTGvK6TOHMfaKffYMvQmTdKfYAGArJRSYR505o
REx+TaIHzaJXWwIvqp7tYD+L2OuQrDnezRpkcqFTJjZmt8F0w2JP/uBSi561W+up
tZo4rQ3A+9pmgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:34 2026 by rpki-client