Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: iJDOmBPrKoNLFie27tx62Q+kW4wvOwaiDP4x2mlHT7I=
Subject key identifier: 95:29:34:10:41:8B:26:FC:A1:B7:BF:27:9E:0C:A5:6E:00:A1:82:84
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019CABD9985B38BCA61F976D6084258D816C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:30 +0000
Manifest this update: Mon 02 Mar 2026 00:01:30 +0000
Manifest next update: Tue 03 Mar 2026 00:01:30 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: d+J5kJ9VEO+mUxTWcFl3Uyfry5JnDTp2yhSjxpcNfWU=)
2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:98:5b:38:bc:a6:1f:97:6d:60:84:25:8d:81:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Mar 2 00:01:30 2026 GMT
Not After : Mar 3 00:01:30 2026 GMT
Subject: CN=95293410418b26fca1b7bf279e0ca56e00a18284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:8a:b1:f0:83:4b:f7:81:73:54:a3:72:6c:
f1:19:32:90:3e:f0:58:56:06:09:d9:e4:9e:3b:3b:
e3:06:46:73:1b:14:72:7d:0d:29:5c:4f:82:f8:fa:
aa:99:77:52:fc:c7:61:b9:fb:87:db:ec:9a:c4:4d:
40:b7:85:8c:ac:de:20:e3:2d:d3:fb:9c:b5:9d:f9:
4e:ba:d7:e2:22:2e:9a:11:5f:9c:af:a8:e2:90:47:
f7:e2:eb:c1:6e:8d:a5:8d:d0:57:9c:cf:f7:6e:c3:
fb:22:a1:62:7e:bd:af:01:c1:60:82:8e:e6:2e:69:
4b:bc:fb:5b:d5:e7:15:63:fe:e8:c5:96:3b:8e:14:
50:ab:37:da:d8:51:14:88:36:76:4a:63:3c:56:a6:
6d:cd:42:03:36:cc:09:0b:e5:cb:7a:35:82:fe:ca:
cc:35:e3:cc:f5:3e:f8:fb:06:f2:c5:0f:de:f9:45:
23:9e:be:70:5c:cd:35:82:6b:4e:83:06:56:a1:7b:
6e:3d:0c:17:24:09:d5:8c:39:bf:93:30:9c:c6:ae:
02:67:32:6d:02:88:c7:2d:c7:67:e2:17:67:16:cc:
e0:f7:48:ab:0c:3d:f2:0b:46:dc:44:52:ca:c5:92:
16:a0:dc:c8:00:71:c5:d0:14:9a:92:45:1c:25:73:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:29:34:10:41:8B:26:FC:A1:B7:BF:27:9E:0C:A5:6E:00:A1:82:84
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:81:6b:bf:10:b5:2a:05:54:ec:af:b4:60:06:d7:5f:96:e9:
91:b0:15:eb:13:4f:fc:56:3b:44:76:dc:e9:ef:07:03:95:7b:
dc:12:97:01:7a:e6:d9:78:25:8b:11:59:3c:09:ba:3b:ef:3a:
ba:5a:de:ac:fd:89:c3:b3:8e:2d:53:a2:6f:5c:09:3b:84:b2:
41:19:61:09:f3:8b:28:ad:61:68:27:56:ce:1a:ae:44:3f:7e:
dc:0c:78:fa:e4:3e:b8:64:16:b3:72:d9:76:3b:31:f5:9d:49:
16:91:d0:65:b0:0e:a9:6f:40:3d:1e:f6:f7:2d:c3:0f:89:8a:
bb:cc:3f:4d:f8:33:f8:87:4d:b7:fa:0c:4c:f7:00:cc:40:e1:
89:9d:3d:56:40:9e:ba:3e:1b:b5:dd:21:ad:98:d2:9c:82:03:
03:e1:74:90:11:35:65:9f:6e:bf:3a:6b:d2:e8:59:7c:89:76:
5c:a4:86:21:4f:30:26:91:df:d8:a9:21:21:2b:4f:12:87:1d:
c1:35:04:0d:bf:99:56:ac:12:dc:85:9f:f4:6b:16:26:73:6c:
20:27:47:91:1f:6d:0c:f3:41:05:58:5d:63:1a:9d:fa:bc:56:
76:48:14:64:91:2b:fd:54:13:c2:46:0f:55:ac:88:76:93:32:
0e:09:07:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2ZhbOLymH5dtYIQljYFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0
MjFhNzIwHhcNMjYwMzAyMDAwMTMwWhcNMjYwMzAzMDAwMTMwWjAzMTEwLwYDVQQD
Eyg5NTI5MzQxMDQxOGIyNmZjYTFiN2JmMjc5ZTBjYTU2ZTAwYTE4Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6CKsfCDS/eBc1SjcmzxGTKQPvBY
VgYJ2eSeOzvjBkZzGxRyfQ0pXE+C+PqqmXdS/MdhufuH2+yaxE1At4WMrN4g4y3T
+5y1nflOutfiIi6aEV+cr6jikEf34uvBbo2ljdBXnM/3bsP7IqFifr2vAcFggo7m
LmlLvPtb1ecVY/7oxZY7jhRQqzfa2FEUiDZ2SmM8VqZtzUIDNswJC+XLejWC/srM
NePM9T74+wbyxQ/e+UUjnr5wXM01gmtOgwZWoXtuPQwXJAnVjDm/kzCcxq4CZzJt
AojHLcdn4hdnFszg90irDD3yC0bcRFLKxZIWoNzIAHHF0BSakkUcJXPS3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUpNBBBiyb8obe/J54MpW4AoYKEMB8GA1UdIwQY
MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt
YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy
LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIFrvxC1
KgVU7K+0YAbXX5bpkbAV6xNP/FY7RHbc6e8HA5V73BKXAXrm2XglixFZPAm6O+86
ulrerP2Jw7OOLVOib1wJO4SyQRlhCfOLKK1haCdWzhquRD9+3Ax4+uQ+uGQWs3LZ
djsx9Z1JFpHQZbAOqW9APR729y3DD4mKu8w/Tfgz+IdNt/oMTPcAzEDhiZ09VkCe
uj4btd0hrZjSnIIDA+F0kBE1ZZ9uvzpr0uhZfIl2XKSGIU8wJpHf2KkhIStPEocd
wTUEDb+ZVqwS3IWf9GsWJnNsICdHkR9tDPNBBVhdYxqd+rxWdkgUZJEr/VQTwkYP
VayIdpMyDgkHBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:20 2026 by rpki-client