
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: YFtZ6zDufnrrHVna6GrN65j0tpXej39hw389zx22hko=
Subject key identifier: 42:9A:AD:2C:7D:5A:DC:46:0C:74:03:58:A5:49:02:D0:23:20:BE:03
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 019CA94577FD6802574606871B7E6819051D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 108A
Signing time: Sun 01 Mar 2026 12:00:28 +0000
Manifest this update: Sun 01 Mar 2026 12:00:28 +0000
Manifest next update: Mon 02 Mar 2026 12:00:28 +0000
Files and hashes: 1: JNIABgZFmaWxjr_C6leE2KJ6tTA.roa (hash: U+MKLIrsfWPb0hJeiOLmKOB38yCKlAGbLyA4d1nN0Hs=)
2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: OZQiFiK/LbfHrV9TIfREGZPPDq7gIqo5Abdo8PZq3PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:77:fd:68:02:57:46:06:87:1b:7e:68:19:05:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Mar 1 12:00:28 2026 GMT
Not After : Mar 2 12:00:28 2026 GMT
Subject: CN=429aad2c7d5adc460c740358a54902d02320be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:a7:e9:26:e5:ef:b1:aa:3d:42:c1:45:c5:
23:14:51:19:09:7a:27:13:0e:e0:8c:11:36:cd:4d:
37:98:fa:f5:42:0c:77:b3:40:60:13:a8:51:c3:d7:
da:ad:27:39:09:5e:70:70:9a:4d:1e:a9:ba:76:42:
5d:44:45:a3:02:70:99:39:64:68:39:b8:e6:4e:dd:
ab:4a:97:52:e3:4b:84:f6:23:55:91:54:c5:a3:0e:
6c:7b:6f:4a:2f:a5:5b:35:92:3d:00:c7:14:9d:1a:
05:92:00:fb:1f:c4:74:97:3c:04:ed:38:2f:bd:82:
f7:c3:d6:04:c0:6c:01:1b:16:7b:1b:21:80:8b:ee:
36:bd:ce:a0:9b:d8:5d:56:e6:00:54:5a:34:55:09:
81:3c:2f:51:57:de:f9:a6:14:71:e8:de:a5:00:7e:
5d:86:14:98:cf:60:e9:09:64:88:52:ca:84:25:2c:
86:19:f8:b4:8c:1f:50:d3:23:84:70:42:71:79:e4:
1f:26:92:6a:d3:3a:5f:55:58:76:02:6f:4b:cf:32:
28:85:dd:49:a8:ff:a1:92:93:13:38:e6:b9:2d:0a:
a9:da:d2:3e:12:9a:e2:9b:ce:b8:98:f0:a0:6a:37:
31:d3:4d:a4:2a:b7:ef:fa:8f:ca:8a:c0:07:dc:3b:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9A:AD:2C:7D:5A:DC:46:0C:74:03:58:A5:49:02:D0:23:20:BE:03
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:81:d5:c0:29:22:11:f1:28:1d:6f:20:a9:78:60:22:c4:f4:
bf:8d:9e:86:bf:70:aa:87:72:82:31:7b:b5:56:85:e6:82:76:
d0:53:19:dc:ef:9b:cc:89:9d:25:7e:85:25:29:2f:d6:b2:78:
41:96:1a:a5:70:ed:83:53:bd:2b:1d:de:fa:bb:42:ca:45:f3:
7f:22:4c:87:70:79:e7:ee:9e:e3:58:45:8b:bc:2e:a0:ed:9a:
39:39:50:9f:a4:76:bd:fb:e2:55:0e:95:8b:84:c4:ff:a8:e1:
86:f3:46:42:9a:62:8c:de:f4:81:c4:e8:4f:8f:cc:5b:a7:7b:
d6:cc:eb:2f:18:d4:bc:5b:07:a9:34:bd:12:f6:15:33:a9:b9:
05:47:15:19:40:ed:d7:59:27:ca:ee:5d:4c:7d:2d:2b:b1:35:
e7:de:36:0e:a2:46:9e:bd:12:05:f6:79:cd:e7:e3:0a:e2:79:
10:dd:f4:00:4e:40:00:0b:ae:91:e1:79:f7:e3:b0:2f:93:f0:
1b:90:d5:ae:cd:8b:39:8c:90:d2:1e:e0:6d:50:75:16:67:da:
7e:ab:1e:f4:39:98:36:df:bb:f0:84:de:9e:b3:2b:fc:b3:e3:
da:f9:64:27:40:73:88:86:63:6a:c6:a1:63:a5:1a:f1:ad:59:
26:fc:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:30 2026 by rpki-client