Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: RDkxpEyKqmpgze6Se5npGZDOuDQxc2iYmhDtJzFdStI=
Subject key identifier: BC:A3:40:CA:A3:97:B5:F2:77:BC:04:F4:8C:2D:2C:3F:B2:52:A5:E1
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 019D981850DB70D73087031093766A961F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 11F4
Signing time: Thu 16 Apr 2026 21:00:23 +0000
Manifest this update: Thu 16 Apr 2026 21:00:23 +0000
Manifest next update: Fri 17 Apr 2026 21:00:23 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: IHhjm3Jnwa7ZtDZIFrbvhD/E5LX3rTph7ARi6el8J24=)
2: jjNhYUO0WkXUvNbvJZNzRwu7bDY.roa (hash: PYUXYUIOFwhoZ+QPr8MK2mvgKDuZumcu7LyDXuRa6e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:50:db:70:d7:30:87:03:10:93:76:6a:96:1f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Apr 16 21:00:23 2026 GMT
Not After : Apr 17 21:00:23 2026 GMT
Subject: CN=bca340caa397b5f277bc04f48c2d2c3fb252a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:eb:a0:4e:d7:bb:0c:5c:ce:3a:f3:df:14:
43:2e:58:4b:63:77:d4:0d:6c:c9:ef:90:bc:cc:e3:
e7:38:e2:e0:aa:fc:13:71:37:3a:db:88:7d:04:eb:
ed:f4:4e:1e:2d:c7:4d:2b:28:e2:77:76:47:c8:a2:
28:61:5f:04:07:49:21:3b:de:d2:52:46:4c:0a:56:
13:8e:a5:ef:5e:5c:e2:71:eb:36:ff:b2:f9:35:97:
e1:e9:61:68:42:49:13:2b:4a:5b:53:22:2e:22:d5:
15:f9:05:ee:10:f5:77:83:53:95:d2:e5:0c:13:a4:
1d:d0:2f:9b:5d:9d:8f:1b:22:a2:b2:16:19:ad:fa:
d2:b9:d1:6c:2b:8e:c8:f4:85:ee:d8:67:55:c2:88:
a8:c0:87:28:74:7d:a7:27:c5:03:c5:0c:9b:8e:ab:
7c:c3:81:fa:36:f3:16:45:e3:2f:44:10:25:6f:9a:
f9:36:f9:63:5f:a1:16:05:e8:b4:a1:17:34:55:06:
78:6c:ba:1a:65:75:15:3c:4c:07:2c:67:c0:bb:cb:
1b:61:4d:a8:85:e6:d5:ab:15:e2:41:66:b4:b0:6f:
df:72:5c:b8:e7:c8:03:28:8b:f9:72:13:f1:ce:48:
fb:3e:3b:c2:aa:53:86:6c:bb:7e:e3:5e:dd:52:42:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:40:CA:A3:97:B5:F2:77:BC:04:F4:8C:2D:2C:3F:B2:52:A5:E1
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c6:f0:7a:48:11:19:d1:3e:60:2c:77:ed:83:36:0d:04:5e:
39:48:51:f3:ae:c2:4b:90:af:ba:0f:e1:8f:36:01:0d:8b:0d:
ab:53:ea:bb:0f:5d:47:9f:ea:27:66:c7:26:48:51:dd:60:1a:
92:b4:c1:ac:0c:a1:78:fd:2f:7c:ad:60:dc:99:b1:c3:40:7b:
c6:c6:83:0c:9d:84:4e:c4:6c:89:45:42:3d:a3:d7:51:cb:71:
bd:16:69:a1:40:95:87:38:d6:aa:c5:66:63:7b:8f:97:17:e4:
75:38:35:8d:0d:aa:1b:74:7b:86:d0:1a:46:22:fc:60:cd:72:
64:25:49:ad:48:eb:03:8f:59:f1:aa:13:f9:2b:6f:ba:fa:1c:
bd:a8:2d:c7:f5:ce:da:0c:9b:30:a0:0f:b3:ac:2a:cc:6e:35:
26:12:e4:1d:a2:d7:09:36:81:6e:a8:d8:d3:d8:15:4a:49:40:
a6:2e:b1:3a:a1:15:42:cb:d0:f0:b6:4a:6e:51:dc:27:3b:b4:
bb:fd:b3:e4:65:b9:0a:6f:6d:64:04:99:6c:de:f9:7b:2a:a2:
f0:f4:33:ac:c4:1b:96:b9:e2:39:15:14:fa:ab:0d:a1:e9:0e:
1c:5d:c6:b3:07:1f:9e:78:21:cf:c2:1f:bd:91:0b:f4:1e:06:
e8:b8:e9:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGFDbcNcwhwMQk3Zqlh8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZGExMGQ2NjVjMTBlMWNiNmVjNmMyMTUwZTNlNjAyNDA0
NWI5ZGEwHhcNMjYwNDE2MjEwMDIzWhcNMjYwNDE3MjEwMDIzWjAzMTEwLwYDVQQD
EyhiY2EzNDBjYWEzOTdiNWYyNzdiYzA0ZjQ4YzJkMmMzZmIyNTJhNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5vroE7Xuwxczjrz3xRDLlhLY3fU
DWzJ75C8zOPnOOLgqvwTcTc624h9BOvt9E4eLcdNKyjid3ZHyKIoYV8EB0khO97S
UkZMClYTjqXvXlzices2/7L5NZfh6WFoQkkTK0pbUyIuItUV+QXuEPV3g1OV0uUM
E6Qd0C+bXZ2PGyKishYZrfrSudFsK47I9IXu2GdVwoiowIcodH2nJ8UDxQybjqt8
w4H6NvMWReMvRBAlb5r5NvljX6EWBei0oRc0VQZ4bLoaZXUVPEwHLGfAu8sbYU2o
hebVqxXiQWa0sG/fcly458gDKIv5chPxzkj7PjvCqlOGbLt+417dUkIW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyjQMqjl7Xyd7wE9IwtLD+yUqXhMB8GA1UdIwQY
MBaAFEHaENZlwQ4ctuxsIVDj5gJARbnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQt
YmIxZmM0NTQ3MDMzLzEvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iYWRlMzQtMGFjMS00MjFmLTg5MzQtYmIxZmM0NTQ3MDMz
LzEvUWRvUTFtWEJEaHkyN0d3aFVPUG1Ba0JGdWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2MbwekgR
GdE+YCx37YM2DQReOUhR867CS5Cvug/hjzYBDYsNq1Pquw9dR5/qJ2bHJkhR3WAa
krTBrAyheP0vfK1g3Jmxw0B7xsaDDJ2ETsRsiUVCPaPXUctxvRZpoUCVhzjWqsVm
Y3uPlxfkdTg1jQ2qG3R7htAaRiL8YM1yZCVJrUjrA49Z8aoT+Stvuvocvagtx/XO
2gybMKAPs6wqzG41JhLkHaLXCTaBbqjY09gVSklApi6xOqEVQsvQ8LZKblHcJzu0
u/2z5GW5Cm9tZASZbN75eyqi8PQzrMQblrniORUU+qsNoekOHF3Gswcfnnghz8If
vZEL9B4G6Ljpbw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:56:17 2026 by rpki-client