Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: 2og3skU+YMakw7lh//OjqBMJKN7gGIJQ05DGWnQM7SM=
Subject key identifier: 85:1E:35:0E:70:F6:E4:46:98:89:34:2C:4E:FC:7E:4F:72:A3:70:42
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 019DA4F834440472EF2AFA6B1B28A3384DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 04A2
Signing time: Sun 19 Apr 2026 09:00:22 +0000
Manifest this update: Sun 19 Apr 2026 09:00:22 +0000
Manifest next update: Mon 20 Apr 2026 09:00:22 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: yEndE49NdpfSs7QX9Rbozb67vJrNnU3b0xIJsrkLuTY=)
2: onU8z40HzXbnWY9IaUiQLwKDFGU.roa (hash: JmAau5mAfXMJlxpYOlZN7re/iLo9qI2ZxQ8BfJtKX+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:34:44:04:72:ef:2a:fa:6b:1b:28:a3:38:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Apr 19 09:00:22 2026 GMT
Not After : Apr 20 09:00:22 2026 GMT
Subject: CN=851e350e70f6e4469889342c4efc7e4f72a37042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:c7:9b:f9:56:c5:4f:2b:73:6c:0b:c8:76:
8b:a0:5f:71:c0:f1:2f:93:8b:41:5a:f1:cd:93:74:
34:f1:80:e4:fa:47:79:b3:08:44:8f:da:3a:f9:cd:
e7:5e:a5:92:96:4f:2d:22:9f:b8:d6:f0:57:c8:b3:
1d:f6:44:18:ab:0a:0e:c2:e7:4c:b4:e0:53:1a:6e:
23:02:87:8b:0e:f6:9b:a5:8d:97:7e:fe:13:13:2b:
25:36:6b:ed:f5:24:b3:23:81:f0:52:63:56:9a:ba:
ba:37:b7:07:94:2e:a0:ff:b9:15:fc:28:57:94:bb:
93:3e:1a:94:5f:48:30:a3:bf:0b:60:62:ca:20:91:
5a:1e:6f:06:e1:aa:53:d1:55:51:d3:fc:1f:91:f2:
b9:28:92:6c:03:b9:ab:c8:bf:1d:95:e0:68:a4:25:
95:64:7c:3e:76:c2:b9:95:c5:d1:2a:5c:38:f7:7d:
ab:c7:9b:36:47:a8:ec:13:09:21:4b:c3:22:55:00:
91:dd:e8:b7:bb:04:04:ff:8f:87:f0:f1:85:0e:ac:
56:33:ad:6c:fc:74:59:05:3d:8a:9e:f8:5c:8b:74:
2f:e2:94:9e:9c:96:58:1d:55:7d:7b:ca:bc:47:a2:
5b:09:8b:f9:a0:78:45:51:21:3f:4b:1e:21:7c:b6:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:35:0E:70:F6:E4:46:98:89:34:2C:4E:FC:7E:4F:72:A3:70:42
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b7:64:a0:91:4f:0e:ab:51:43:22:60:5b:e8:21:37:91:e1:
7c:74:ac:12:80:26:92:ed:f6:c7:de:f5:42:aa:f4:92:5a:f6:
e7:43:d4:f0:06:99:cb:89:06:2f:ce:ee:15:6f:83:aa:a5:da:
cc:66:24:bb:1e:44:09:6b:d2:24:94:9e:9b:a9:81:cd:94:86:
56:f2:a8:0d:d3:74:c6:cf:90:80:28:e1:70:e9:97:33:71:05:
81:86:3d:b9:7d:bd:c4:76:8a:06:36:7a:aa:fa:e5:ea:9e:ce:
6c:43:b8:95:9d:a6:45:71:a7:73:f3:cc:42:6f:06:ea:23:4a:
23:db:25:61:6f:a0:f4:87:86:47:1f:77:35:45:4a:51:bd:45:
e5:d2:c7:5e:2e:12:cc:8f:2f:1f:9c:fa:91:f1:8a:8f:bd:43:
36:01:d7:ba:bc:94:80:40:f8:c7:4b:32:47:f6:c9:8a:b5:29:
59:5a:7b:3f:8e:72:d9:93:a2:b4:13:23:6c:d2:b0:78:00:67:
66:bb:13:eb:24:19:ad:7b:b0:4b:90:7f:8f:18:53:7f:2e:cd:
da:2d:b8:58:6c:3f:43:78:16:e6:21:ac:66:97:02:b6:ae:b5:
d6:83:4d:05:6e:5f:a8:06:6a:91:c4:8e:e4:c9:ca:70:93:af:
a7:2e:ec:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+DREBHLvKvprGyijOE2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl
ZDEzOWIwHhcNMjYwNDE5MDkwMDIyWhcNMjYwNDIwMDkwMDIyWjAzMTEwLwYDVQQD
Eyg4NTFlMzUwZTcwZjZlNDQ2OTg4OTM0MmM0ZWZjN2U0ZjcyYTM3MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCrHm/lWxU8rc2wLyHaLoF9xwPEv
k4tBWvHNk3Q08YDk+kd5swhEj9o6+c3nXqWSlk8tIp+41vBXyLMd9kQYqwoOwudM
tOBTGm4jAoeLDvabpY2Xfv4TEyslNmvt9SSzI4HwUmNWmrq6N7cHlC6g/7kV/ChX
lLuTPhqUX0gwo78LYGLKIJFaHm8G4apT0VVR0/wfkfK5KJJsA7mryL8dleBopCWV
ZHw+dsK5lcXRKlw4932rx5s2R6jsEwkhS8MiVQCR3ei3uwQE/4+H8PGFDqxWM61s
/HRZBT2Knvhci3Qv4pSenJZYHVV9e8q8R6JbCYv5oHhFUSE/Sx4hfLbf/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUeNQ5w9uRGmIk0LE78fk9yo3BCMB8GA1UdIwQY
MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct
MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj
LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7dkoJFP
DqtRQyJgW+ghN5HhfHSsEoAmku32x971Qqr0klr250PU8AaZy4kGL87uFW+DqqXa
zGYkux5ECWvSJJSem6mBzZSGVvKoDdN0xs+QgCjhcOmXM3EFgYY9uX29xHaKBjZ6
qvrl6p7ObEO4lZ2mRXGnc/PMQm8G6iNKI9slYW+g9IeGRx93NUVKUb1F5dLHXi4S
zI8vH5z6kfGKj71DNgHXuryUgED4x0syR/bJirUpWVp7P45y2ZOitBMjbNKweABn
ZrsT6yQZrXuwS5B/jxhTfy7N2i24WGw/Q3gW5iGsZpcCtq611oNNBW5fqAZqkcSO
5MnKcJOvpy7s9A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:30 2026 by rpki-client