Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: v4NNdDPPr7/YZm+w0fwhS9Ei+2T+rNrzfY5Trwo2DCI=
Subject key identifier: E8:C8:74:AC:31:F3:9B:CD:F3:16:F5:1B:CC:1F:6E:29:77:AF:8E:84
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019CABDA0C610D3DFA24A8AA7498EF3E0D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0A34
Signing time: Mon 02 Mar 2026 00:01:59 +0000
Manifest this update: Mon 02 Mar 2026 00:01:59 +0000
Manifest next update: Tue 03 Mar 2026 00:01:59 +0000
Files and hashes: 1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=)
2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=)
3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: 8wB5FBXOG3Uw5+xxfVRqvdAFXjPboeCQPZYcfLlVnag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:0c:61:0d:3d:fa:24:a8:aa:74:98:ef:3e:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Mar 2 00:01:59 2026 GMT
Not After : Mar 3 00:01:59 2026 GMT
Subject: CN=e8c874ac31f39bcdf316f51bcc1f6e2977af8e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:14:19:5d:14:de:67:4a:fe:8c:99:34:e5:
51:c1:87:9a:19:e7:a3:45:26:1d:bb:14:e7:a2:18:
69:e4:34:7b:91:0f:0a:d8:fa:c8:e8:ab:bf:a5:a5:
f5:37:ca:2d:87:5c:04:61:ca:b8:74:44:1d:de:27:
40:21:57:5a:2d:40:87:c5:8b:de:ac:e5:47:a5:d1:
f3:75:d6:d3:98:5f:6b:4c:40:ec:0f:d9:c3:b1:8c:
eb:9b:5e:00:1a:2d:0d:af:ef:c0:64:83:4f:ef:c5:
5d:9d:46:b9:c3:a0:c2:57:62:d7:58:a6:50:11:2a:
30:f7:d8:7b:bb:26:42:80:1f:06:13:60:b6:0c:af:
4f:2a:e8:24:c4:d4:7b:a3:b0:30:6c:6c:ea:1c:f1:
2c:63:f8:c8:58:ea:cc:a1:e5:2e:f6:bc:a2:31:cc:
c8:8d:e2:dc:a0:7a:10:aa:b2:1d:d1:18:c6:64:33:
50:7b:ef:e8:1e:d5:8f:d8:6d:4f:d1:c3:48:ef:ce:
95:50:3f:5c:1a:cc:72:37:1f:60:49:11:3a:7e:89:
4a:91:82:fd:87:1a:b7:04:14:6e:de:e0:4d:c6:24:
25:a2:eb:83:c8:35:51:3f:ed:3f:12:d9:ab:d8:6e:
a5:f3:23:2d:1e:4b:1b:9f:3a:fd:b7:ad:44:16:d6:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:74:AC:31:F3:9B:CD:F3:16:F5:1B:CC:1F:6E:29:77:AF:8E:84
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f5:e4:db:2c:a5:49:a7:d2:30:60:a0:31:da:25:9c:24:90:
55:c2:20:ac:ea:9d:0a:e9:21:a3:a5:e6:69:41:cd:ff:69:12:
62:e7:15:ba:7b:e8:ff:37:c9:f6:d5:4d:b0:88:e1:60:ef:91:
9e:d0:54:4a:cb:c5:e2:b7:5a:d2:75:37:92:10:d8:3a:1a:73:
95:db:2c:2e:d1:c6:59:a5:87:af:96:33:4b:ba:82:bd:1e:60:
a8:29:2d:44:77:6c:1e:ae:e2:08:30:7d:8c:66:03:6e:41:9a:
85:74:a4:96:1b:e0:13:fb:92:98:6c:d7:d1:80:39:76:89:4a:
ae:cd:7b:fd:c8:d9:a6:54:24:b7:77:b1:08:ab:26:8c:68:07:
1b:05:57:49:b9:a6:57:5e:84:ec:2b:6c:41:c6:6d:f5:92:2f:
d6:da:51:20:36:cb:5a:8d:f7:77:1e:b4:38:d3:15:b9:2c:1a:
e8:cf:56:6b:be:5b:35:cd:ea:87:59:ba:a7:e6:0f:f5:05:1e:
c7:09:e6:c0:46:7f:c8:40:6f:dd:ea:df:19:d6:19:ea:df:52:
c0:e5:9a:3b:0b:ea:5b:34:56:a6:55:b5:ce:d8:a4:d8:42:65:
25:94:dd:dc:79:27:7d:c3:6a:35:d9:a6:2a:d1:39:59:7a:17:
b6:a5:22:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2gxhDT36JKiqdJjvPg1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi
ZmNkZTQwHhcNMjYwMzAyMDAwMTU5WhcNMjYwMzAzMDAwMTU5WjAzMTEwLwYDVQQD
EyhlOGM4NzRhYzMxZjM5YmNkZjMxNmY1MWJjYzFmNmUyOTc3YWY4ZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ0UGV0U3mdK/oyZNOVRwYeaGeej
RSYduxTnohhp5DR7kQ8K2PrI6Ku/paX1N8oth1wEYcq4dEQd3idAIVdaLUCHxYve
rOVHpdHzddbTmF9rTEDsD9nDsYzrm14AGi0Nr+/AZINP78VdnUa5w6DCV2LXWKZQ
ESow99h7uyZCgB8GE2C2DK9PKugkxNR7o7AwbGzqHPEsY/jIWOrMoeUu9ryiMczI
jeLcoHoQqrId0RjGZDNQe+/oHtWP2G1P0cNI786VUD9cGsxyNx9gSRE6folKkYL9
hxq3BBRu3uBNxiQlouuDyDVRP+0/Etmr2G6l8yMtHksbnzr9t61EFtZE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjIdKwx85vN8xb1G8wfbil3r46EMB8GA1UdIwQY
MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt
MDZiM2NlYTQ5MmVlLzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl
LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevXk2yyl
SafSMGCgMdolnCSQVcIgrOqdCukho6XmaUHN/2kSYucVunvo/zfJ9tVNsIjhYO+R
ntBUSsvF4rda0nU3khDYOhpzldssLtHGWaWHr5YzS7qCvR5gqCktRHdsHq7iCDB9
jGYDbkGahXSklhvgE/uSmGzX0YA5dolKrs17/cjZplQkt3exCKsmjGgHGwVXSbmm
V16E7CtsQcZt9ZIv1tpRIDbLWo33dx60ONMVuSwa6M9Wa75bNc3qh1m6p+YP9QUe
xwnmwEZ/yEBv3erfGdYZ6t9SwOWaOwvqWzRWplW1ztik2EJlJZTd3HknfcNqNdmm
KtE5WXoXtqUiPw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:36 2026 by rpki-client