
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: WBL6rWzZqVmQgDU4gTfx5d232u1nCOC89N5mjpDfeIU=
Subject key identifier: 9D:25:7E:C8:B6:C4:85:83:DB:29:B5:AC:29:DA:79:1B:EA:8B:DD:7D
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019CABA227C2CF7D7364C827305A636D725B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 23:00:56 +0000
Manifest this update: Sun 01 Mar 2026 23:00:56 +0000
Manifest next update: Mon 02 Mar 2026 23:00:56 +0000
Files and hashes: 1: VyKqzxZ8-5ygWJNcg4AE05d6_mE.roa (hash: eTq1Nu+al+6xzFG/LttgMYk2x81Ow2Yalg2eI2MZJbI=)
2: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: K8AqltUIvMJTp7WRb/LLR9v26MaWJKD/odG7FM4HW5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:27:c2:cf:7d:73:64:c8:27:30:5a:63:6d:72:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Mar 1 23:00:56 2026 GMT
Not After : Mar 2 23:00:56 2026 GMT
Subject: CN=9d257ec8b6c48583db29b5ac29da791bea8bdd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:98:8a:b7:4a:62:d6:28:d3:2e:bc:c2:72:
99:1f:7b:46:03:3a:11:c8:69:44:17:bf:fb:23:86:
5f:03:8f:77:28:cb:97:31:77:ce:49:be:7a:b7:33:
ad:c5:ad:10:e3:dc:7d:4a:98:09:93:a9:2e:38:bd:
f9:10:fa:42:12:d6:be:03:19:5f:b7:de:e1:cd:0a:
c6:ba:05:e6:84:13:a0:54:35:c5:78:fb:3c:46:25:
40:6f:13:e0:c1:ca:26:8e:36:db:81:80:9b:4c:49:
86:36:21:f6:85:00:f0:21:24:e2:91:7c:ce:ae:4e:
98:1f:e5:87:f6:53:cc:6d:45:c6:6d:2c:c7:c8:22:
55:85:df:df:19:78:9a:bb:ac:57:1a:6c:b5:50:47:
f8:8f:b0:f1:1b:62:65:98:c8:21:26:20:e1:f7:b8:
ef:01:e3:c3:21:dd:cb:14:d9:30:37:44:33:51:d0:
b6:f9:c9:3c:38:2b:42:48:69:36:79:a3:30:7e:bf:
91:7f:9e:36:3d:ba:6c:7e:bc:36:da:7e:a4:55:d2:
4e:d8:7e:08:af:37:0a:2d:c3:98:a9:1a:1d:3b:38:
61:b1:68:2e:18:21:e9:9f:5a:26:15:c0:23:ba:04:
ab:b7:f6:86:46:85:a0:f4:79:59:06:90:bc:9f:f9:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:7E:C8:B6:C4:85:83:DB:29:B5:AC:29:DA:79:1B:EA:8B:DD:7D
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:26:71:0a:5a:35:a5:d1:a8:3f:f4:c7:6b:bb:72:c8:aa:c5:
55:66:b6:d2:2a:9c:ce:11:b6:70:3e:2e:34:1a:21:83:9b:0d:
5d:68:9a:1d:bc:5d:0f:2e:59:c7:66:0a:78:19:81:1a:20:cb:
6d:8a:c7:a3:dc:03:be:3f:23:7c:17:e4:fe:4f:09:b2:04:65:
c4:f0:c1:22:8a:50:1d:6f:fe:08:14:99:bb:f2:dd:5f:62:84:
ad:bd:81:e9:b5:bd:4a:b1:8e:91:51:30:68:d1:0e:7c:70:2c:
9c:da:f8:8f:3f:a5:a3:4e:a7:25:76:ea:8a:3b:44:17:b0:a3:
74:e7:c3:5c:91:71:27:54:e7:fb:1d:cc:3d:c7:fb:62:c6:15:
b4:58:71:d8:46:2c:d3:4e:2d:52:a7:0f:83:b8:8c:e5:33:5e:
cc:a3:a3:c5:96:da:9c:27:29:db:f8:fb:97:af:a2:d0:f9:db:
2a:12:bd:47:10:31:d1:60:3b:35:98:88:d2:e4:19:57:c5:9f:
aa:58:1a:80:60:45:21:4e:05:31:e7:25:e3:90:87:42:25:54:
57:3c:98:9f:5d:a0:fa:5a:0b:4b:ed:34:ba:1c:2d:42:ee:e9:
a3:7a:9a:a1:09:ff:04:f6:9e:e5:98:61:d8:16:35:f4:b9:89:
65:7f:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:27 2026 by rpki-client