Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: aNdw9bR2XyIOHmGXxV/mFAeafCEBPBfW1lSCepua/yY=
Subject key identifier: 23:C2:1E:B3:66:5E:AE:42:09:6C:B9:D9:5B:B0:35:11:21:33:A5:D2
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019CAE35C199D44087C18E4CC93B33690B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0C43
Signing time: Mon 02 Mar 2026 11:01:24 +0000
Manifest this update: Mon 02 Mar 2026 11:01:24 +0000
Manifest next update: Tue 03 Mar 2026 11:01:24 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: hwlLboJPyzV0GC2oNN/FmizK6FsmvnGUSncvGD84L50=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c1:99:d4:40:87:c1:8e:4c:c9:3b:33:69:0b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Mar 2 11:01:24 2026 GMT
Not After : Mar 3 11:01:24 2026 GMT
Subject: CN=23c21eb3665eae42096cb9d95bb035112133a5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:37:28:1a:f7:3d:e7:f6:a9:dd:4a:9a:8e:
cc:1d:d3:d6:c2:aa:17:df:da:3e:58:6d:51:45:7e:
db:05:d0:20:94:2b:5b:64:d0:5d:e1:b2:cd:00:46:
fe:7a:83:53:7f:9c:2c:11:ce:d6:d7:d3:ea:d3:bf:
83:11:da:d7:6e:15:70:8c:74:22:df:e0:54:2a:b8:
c4:f4:a2:75:98:bb:01:78:ba:3e:93:e9:be:1f:dc:
41:40:39:4d:57:54:69:6a:01:26:bc:16:c1:d3:e3:
a4:6e:5a:45:23:aa:77:d7:dd:f9:36:2b:91:21:2e:
6c:92:61:00:ba:45:85:10:8b:16:e5:1f:5a:4e:e6:
8e:df:96:23:a6:2f:97:d2:55:a5:aa:24:68:fe:4d:
b6:9a:91:c8:46:e8:e5:26:84:e0:1d:4b:5e:06:c4:
d1:6d:a5:0a:46:7b:77:3d:5b:9c:27:95:96:00:b6:
a8:fc:23:fe:e7:08:f9:3b:e1:71:c5:b1:85:cc:e7:
08:c6:ce:6f:0d:11:b5:cd:4a:c5:61:f6:a6:c3:4d:
99:8a:8c:20:6c:3b:77:1e:ec:85:28:f6:d8:00:ea:
d4:7a:95:0b:d3:14:c0:92:8c:1d:04:e2:7d:d1:b7:
e5:e1:47:dc:8f:c2:2a:09:b1:9c:67:ab:ba:ca:6a:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:1E:B3:66:5E:AE:42:09:6C:B9:D9:5B:B0:35:11:21:33:A5:D2
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:42:3e:7b:01:02:40:b9:09:f1:40:8a:13:83:f9:6f:e2:51:
f4:47:a6:1d:68:1e:74:9b:b9:84:93:87:77:1e:0f:6c:7f:29:
99:df:de:57:85:f9:44:dd:ce:4c:35:60:20:75:48:e6:b9:81:
86:dd:e6:d6:3a:d3:0d:43:44:a3:7b:30:37:8e:93:21:8d:43:
3e:67:6f:de:11:8a:2f:be:30:c3:c3:82:85:dc:1d:c0:85:2e:
40:c4:16:98:a8:80:7f:41:79:ac:d8:07:e5:82:28:28:63:ba:
43:f5:b5:de:26:b3:ca:dd:52:ef:76:4a:14:bf:7c:b2:4a:e2:
65:5e:c7:06:b8:15:59:e8:f5:0d:a6:7d:99:62:34:14:38:89:
33:aa:20:66:e0:95:f2:6b:fe:9d:84:b5:db:5b:ce:51:b4:f9:
9a:ad:74:77:51:4e:b3:49:d7:a2:d8:1e:f4:55:63:48:b2:0a:
80:e6:37:6e:ca:55:3a:3e:66:cd:fd:c8:f4:5b:d9:b6:aa:69:
df:9e:17:1c:7f:17:a5:92:58:e2:d6:11:88:e3:1d:87:38:3d:
20:15:8f:a6:94:da:c0:ad:6b:0f:c9:24:4e:18:d8:58:c2:a5:
9b:95:68:20:1c:56:ff:a6:e9:0b:49:60:67:9d:d9:f4:19:81:
f3:f3:0a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNcGZ1ECHwY5MyTszaQubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk
ODg0ZDgwHhcNMjYwMzAyMTEwMTI0WhcNMjYwMzAzMTEwMTI0WjAzMTEwLwYDVQQD
EygyM2MyMWViMzY2NWVhZTQyMDk2Y2I5ZDk1YmIwMzUxMTIxMzNhNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzc3KBr3Pef2qd1Kmo7MHdPWwqoX
39o+WG1RRX7bBdAglCtbZNBd4bLNAEb+eoNTf5wsEc7W19Pq07+DEdrXbhVwjHQi
3+BUKrjE9KJ1mLsBeLo+k+m+H9xBQDlNV1RpagEmvBbB0+OkblpFI6p31935NiuR
IS5skmEAukWFEIsW5R9aTuaO35Yjpi+X0lWlqiRo/k22mpHIRujlJoTgHUteBsTR
baUKRnt3PVucJ5WWALao/CP+5wj5O+FxxbGFzOcIxs5vDRG1zUrFYfamw02Ziowg
bDt3HuyFKPbYAOrUepUL0xTAkowdBOJ90bfl4Ufcj8IqCbGcZ6u6ymrccQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPCHrNmXq5CCWy52VuwNREhM6XSMB8GA1UdIwQY
MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt
M2M3NmRkNDkxMDA2LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2
LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUI+ewEC
QLkJ8UCKE4P5b+JR9EemHWgedJu5hJOHdx4PbH8pmd/eV4X5RN3OTDVgIHVI5rmB
ht3m1jrTDUNEo3swN46TIY1DPmdv3hGKL74ww8OChdwdwIUuQMQWmKiAf0F5rNgH
5YIoKGO6Q/W13iazyt1S73ZKFL98skriZV7HBrgVWej1DaZ9mWI0FDiJM6ogZuCV
8mv+nYS121vOUbT5mq10d1FOs0nXotge9FVjSLIKgOY3bspVOj5mzf3I9FvZtqpp
354XHH8XpZJY4tYRiOMdhzg9IBWPppTawK1rD8kkThjYWMKlm5VoIBxW/6bpC0lg
Z53Z9BmB8/MKBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:41 2026 by rpki-client