Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File: qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier: 2CRNO38LJcV55H65brV8k/0tIw6cfDdvg9m/OtLYoY8=
Subject key identifier: E0:84:F8:8D:4C:BE:BA:BA:0C:4F:3E:28:1A:7E:0D:E9:E4:7A:D0:CA
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 019CAFED160B6FB958E9BB3D27AB2068F749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number: 1596
Signing time: Mon 02 Mar 2026 19:01:16 +0000
Manifest this update: Mon 02 Mar 2026 19:01:16 +0000
Manifest next update: Tue 03 Mar 2026 19:01:16 +0000
Files and hashes: 1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: MTB4rhP4yGyGDDrCt1/xTrb6nwAg65NoNFLmMhyeasg=)
3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ed:16:0b:6f:b9:58:e9:bb:3d:27:ab:20:68:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Mar 2 19:01:16 2026 GMT
Not After : Mar 3 19:01:16 2026 GMT
Subject: CN=e084f88d4cbebaba0c4f3e281a7e0de9e47ad0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:da:be:1a:0f:25:62:95:98:2d:f8:22:36:
f3:0e:b6:a9:c1:0b:35:c6:e8:fc:8b:1a:0c:95:e6:
ce:7b:f3:f8:ce:e1:66:fb:d1:71:08:99:44:23:d6:
0e:8c:cf:7e:e9:71:fe:32:d9:07:0c:1c:55:8e:ef:
7a:93:7a:cb:d7:2f:16:67:0c:8e:27:64:76:3a:42:
c9:3b:cd:3c:36:49:4b:51:90:ce:bd:c5:b0:ba:47:
a4:63:67:f1:2a:76:6d:b8:3e:d3:26:69:8a:e1:9b:
2b:06:ad:56:ff:3d:1e:d1:ea:64:01:45:b2:ec:6c:
c8:66:54:65:78:b2:99:4c:5b:17:6f:9e:41:5f:96:
f9:d7:90:fa:65:92:51:1c:65:dc:49:a0:98:0c:d3:
ab:dd:e8:37:0f:64:31:78:d7:b9:75:c1:17:9b:09:
b8:a8:e4:27:c4:a5:a8:e3:8e:d5:94:9b:7b:86:b1:
93:68:bb:02:17:8f:ac:e2:40:1e:63:11:af:28:ae:
85:39:16:b4:07:aa:65:0a:aa:48:89:75:85:07:13:
af:73:31:e4:e6:ad:14:cf:49:a5:46:9b:0f:3e:72:
99:c9:f5:0b:b7:31:4d:36:15:fb:23:cf:98:9b:be:
8e:3c:1e:25:12:42:bd:04:06:b5:66:32:ca:d0:60:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:F8:8D:4C:BE:BA:BA:0C:4F:3E:28:1A:7E:0D:E9:E4:7A:D0:CA
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dc:ac:7a:fe:09:21:71:81:d2:2c:71:74:92:bc:80:32:44:
6b:07:94:0e:23:53:36:69:6f:a5:58:f8:95:a8:d9:8b:aa:cb:
c9:40:60:db:8c:06:26:07:2b:86:d6:73:96:04:8f:97:f8:99:
dc:39:6c:88:05:32:96:80:da:f1:f7:03:48:60:76:5d:33:47:
56:a5:4d:cd:64:7a:46:24:55:d3:f2:3f:34:ac:a6:4f:1b:3e:
33:15:f5:0c:da:8b:36:c6:13:9f:3e:a5:e9:e7:03:3f:f4:99:
44:2d:24:5f:dd:59:32:35:83:53:49:5e:a3:d1:02:0b:1a:dc:
28:80:69:9a:9c:ba:51:6b:ba:1e:55:9a:50:49:5e:12:5f:d7:
84:37:16:6a:7f:59:ba:0e:43:ff:51:78:e2:f6:99:de:af:eb:
da:94:14:fb:31:fd:cb:8b:08:51:85:31:7b:fc:04:fe:d0:45:
52:ae:a3:05:57:fe:02:e0:6a:f5:18:b8:a5:5f:be:11:77:12:
7c:b1:5d:85:bf:0f:96:b3:e1:5b:e0:92:43:a7:47:73:1d:6e:
9f:db:4b:88:1a:34:f5:06:1f:70:4f:26:0e:07:06:d9:19:5c:
54:81:85:18:d9:22:ae:9c:62:a0:5b:98:0e:16:11:9f:76:ac:
da:c7:17:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7RYLb7lY6bs9J6sgaPdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjNmZTZkYWQ4YWQ0ZmRhZWU2ZGQ2OTgzYzFlNTVjZGU4
NDgyYTIwHhcNMjYwMzAyMTkwMTE2WhcNMjYwMzAzMTkwMTE2WjAzMTEwLwYDVQQD
EyhlMDg0Zjg4ZDRjYmViYWJhMGM0ZjNlMjgxYTdlMGRlOWU0N2FkMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXTavhoPJWKVmC34IjbzDrapwQs1
xuj8ixoMlebOe/P4zuFm+9FxCJlEI9YOjM9+6XH+MtkHDBxVju96k3rL1y8WZwyO
J2R2OkLJO808NklLUZDOvcWwukekY2fxKnZtuD7TJmmK4ZsrBq1W/z0e0epkAUWy
7GzIZlRleLKZTFsXb55BX5b515D6ZZJRHGXcSaCYDNOr3eg3D2QxeNe5dcEXmwm4
qOQnxKWo447VlJt7hrGTaLsCF4+s4kAeYxGvKK6FORa0B6plCqpIiXWFBxOvczHk
5q0Uz0mlRpsPPnKZyfULtzFNNhX7I8+Ym76OPB4lEkK9BAa1ZjLK0GBXsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCE+I1Mvrq6DE8+KBp+DenketDKMB8GA1UdIwQY
MBaAFKgj/m2titT9rubdaYPB5VzehIKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQt
OWJmZGYyMjUxMjY3LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQtOWJmZGYyMjUxMjY3
LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtysev4J
IXGB0ixxdJK8gDJEaweUDiNTNmlvpVj4lajZi6rLyUBg24wGJgcrhtZzlgSPl/iZ
3DlsiAUyloDa8fcDSGB2XTNHVqVNzWR6RiRV0/I/NKymTxs+MxX1DNqLNsYTnz6l
6ecDP/SZRC0kX91ZMjWDU0leo9ECCxrcKIBpmpy6UWu6HlWaUEleEl/XhDcWan9Z
ug5D/1F44vaZ3q/r2pQU+zH9y4sIUYUxe/wE/tBFUq6jBVf+AuBq9Ri4pV++EXcS
fLFdhb8PlrPhW+CSQ6dHcx1un9tLiBo09QYfcE8mDgcG2RlcVIGFGNkirpxioFuY
DhYRn3as2scXQA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:30 2026 by rpki-client