Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: 1VHnYdAZJgdyL/T8/Q02IX7xa1fZKYmb6EsbdqlILig=
Subject key identifier: AA:2C:B5:3E:EB:2C:91:5D:9D:F7:27:B2:A7:49:DA:B9:4E:9C:F1:AA
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019D9AAC24AA4784BE43BBB71BB17BABFA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 0841
Signing time: Fri 17 Apr 2026 09:01:05 +0000
Manifest this update: Fri 17 Apr 2026 09:01:05 +0000
Manifest next update: Sat 18 Apr 2026 09:01:05 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: yg01G6If2jUn83KHvXNrW3h2tYQ4JthfSZREFsiwHS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:24:aa:47:84:be:43:bb:b7:1b:b1:7b:ab:fa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Apr 17 09:01:05 2026 GMT
Not After : Apr 18 09:01:05 2026 GMT
Subject: CN=aa2cb53eeb2c915d9df727b2a749dab94e9cf1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:72:ad:36:13:09:86:a3:91:5d:54:48:6c:
5d:43:49:2f:f4:ec:e7:23:ac:42:43:40:ae:9d:cf:
36:a6:e9:db:23:bc:dc:a2:a9:3c:1e:da:80:dc:a1:
14:1c:61:ec:2a:85:55:32:e1:88:77:3b:53:2d:6a:
f0:28:a2:c2:2f:e7:80:3f:41:81:46:7e:f6:24:6a:
99:f9:5a:88:f4:ce:f0:b8:7f:37:ae:6f:f2:7b:35:
d4:23:e2:50:81:f4:e2:79:bb:0f:84:f9:18:b6:f9:
9a:44:29:51:49:db:f7:89:b2:1f:a8:67:b6:b1:2e:
96:cd:a0:a7:36:0f:d6:49:20:5d:bb:a0:f3:2a:9b:
fa:b0:9b:8e:93:e2:9f:3a:eb:12:23:2c:56:77:8c:
7d:41:ad:4c:87:c1:a0:c8:23:f6:9e:a7:1c:e8:24:
cd:a3:9a:49:88:6d:61:ac:9c:49:bf:40:6f:46:4b:
b1:47:79:bb:c1:b9:31:4f:4a:88:16:1d:4a:4d:6f:
2b:31:a2:b9:11:7a:48:45:2c:7d:94:1e:df:c8:b7:
07:c6:19:1a:80:d5:0a:3b:f4:f9:60:59:1c:58:64:
a8:05:34:ee:2e:bc:95:2a:81:9a:1c:66:85:70:cf:
a1:84:62:2d:59:8f:ec:49:34:22:a2:cc:49:a1:d7:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2C:B5:3E:EB:2C:91:5D:9D:F7:27:B2:A7:49:DA:B9:4E:9C:F1:AA
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:ba:2d:80:06:93:95:fb:56:aa:8e:cf:81:e0:72:67:72:
4c:63:85:6c:62:aa:a6:cf:d7:66:f8:42:fc:a1:85:42:9f:43:
e8:cf:44:99:ef:f2:75:15:25:7b:30:c8:e4:c6:93:55:4a:88:
aa:7c:01:9f:1e:e1:95:51:08:45:6b:50:59:ca:16:99:62:e1:
ed:29:88:fd:00:3f:a0:5c:9f:80:55:53:0c:76:5e:ec:a6:c9:
4a:0e:4d:74:c8:4c:31:6b:10:0e:ee:19:f4:fc:b1:80:bc:78:
80:38:d7:5a:b4:58:b7:ae:a7:c2:0f:47:f2:7d:cd:8f:b4:1f:
1c:5d:ac:43:77:9c:9f:2a:85:2d:41:8d:c6:d7:c9:e8:a4:88:
4d:30:ab:05:e9:eb:34:ef:76:27:d8:63:f0:db:12:16:f9:cd:
fd:3a:70:f9:5c:f8:e3:e9:84:a1:6e:53:b0:27:d5:33:6e:2f:
54:ee:a3:c0:de:e9:8a:d9:fa:8b:25:6c:48:82:e2:28:e7:b4:
d9:2d:eb:c6:27:f6:74:c5:be:32:32:a4:64:37:99:30:cc:35:
87:30:59:06:09:68:79:5f:97:b1:4c:3d:c0:35:0e:65:c8:c5:
b6:21:77:ab:ba:2a:49:bf:06:4c:99:f1:94:2c:1d:8b:e8:0d:
d8:31:a7:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arCSqR4S+Q7u3G7F7q/pyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1
MWQ3OTEwHhcNMjYwNDE3MDkwMTA1WhcNMjYwNDE4MDkwMTA1WjAzMTEwLwYDVQQD
EyhhYTJjYjUzZWViMmM5MTVkOWRmNzI3YjJhNzQ5ZGFiOTRlOWNmMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykByrTYTCYajkV1USGxdQ0kv9Ozn
I6xCQ0Cunc82punbI7zcoqk8HtqA3KEUHGHsKoVVMuGIdztTLWrwKKLCL+eAP0GB
Rn72JGqZ+VqI9M7wuH83rm/yezXUI+JQgfTiebsPhPkYtvmaRClRSdv3ibIfqGe2
sS6WzaCnNg/WSSBdu6DzKpv6sJuOk+KfOusSIyxWd4x9Qa1Mh8GgyCP2nqcc6CTN
o5pJiG1hrJxJv0BvRkuxR3m7wbkxT0qIFh1KTW8rMaK5EXpIRSx9lB7fyLcHxhka
gNUKO/T5YFkcWGSoBTTuLryVKoGaHGaFcM+hhGItWY/sSTQiosxJodezfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKostT7rLJFdnfcnsqdJ2rlOnPGqMB8GA1UdIwQY
MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt
MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4
LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqK6LYAG
k5X7VqqOz4HgcmdyTGOFbGKqps/XZvhC/KGFQp9D6M9Eme/ydRUlezDI5MaTVUqI
qnwBnx7hlVEIRWtQWcoWmWLh7SmI/QA/oFyfgFVTDHZe7KbJSg5NdMhMMWsQDu4Z
9PyxgLx4gDjXWrRYt66nwg9H8n3Nj7QfHF2sQ3ecnyqFLUGNxtfJ6KSITTCrBenr
NO92J9hj8NsSFvnN/Tpw+Vz44+mEoW5TsCfVM24vVO6jwN7pitn6iyVsSILiKOe0
2S3rxif2dMW+MjKkZDeZMMw1hzBZBgloeV+XsUw9wDUOZcjFtiF3q7oqSb8GTJnx
lCwdi+gN2DGndw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:23 2026 by rpki-client