Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File: QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier: Om9pz1jq20k8zKXJ+UsWFpQlFMHT9Cj2gYoqzGV0/nI=
Subject key identifier: 2A:BA:F1:99:D8:E0:8F:2A:0F:DD:CF:31:9B:B8:7D:3B:BF:66:B7:D9
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer: /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial: 019CAB6BBA5CCF63BCF2EA6EFB4D0C28B1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number: 0CBB
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: 3ASPiFC0PAEkrtL13bv9J2jm8bxfrptSEl5UDxsksDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ba:5c:cf:63:bc:f2:ea:6e:fb:4d:0c:28:b1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=2abaf199d8e08f2a0fddcf319bb87d3bbf66b7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:2a:80:a0:d0:f5:da:e0:82:cb:76:24:29:
28:13:95:84:35:6a:bc:91:75:21:ee:5a:d3:ac:f6:
b8:28:ae:86:a0:ed:e7:2e:f4:70:c4:47:5f:23:6f:
48:e4:d5:d1:13:7c:0c:06:bb:da:47:11:d1:21:c0:
74:1d:45:7d:51:1a:ac:c6:28:cc:2e:2b:c0:5d:a9:
2a:d7:3a:69:cc:b7:92:75:24:0f:b2:43:54:e4:de:
9e:3d:40:d2:e5:20:60:4f:38:99:a8:e4:4e:c2:ba:
2c:74:d5:55:9e:25:08:2b:42:2d:67:a0:56:85:eb:
c9:76:8f:1b:05:49:44:fb:f6:a5:e0:ec:da:a1:0d:
3c:86:bd:c5:e4:a1:13:5f:ad:c2:1b:dd:86:16:01:
19:ba:df:1a:a0:6b:56:ae:58:45:c0:a6:e4:e1:fe:
b8:68:ff:11:50:59:ab:df:54:63:e2:68:a5:23:62:
34:6a:60:13:ec:8b:26:ef:3f:b9:b6:be:8d:ed:26:
e8:74:5a:a7:4a:bd:58:c1:9a:4f:85:b5:6a:e7:ce:
6b:17:cc:8c:a6:b7:98:8d:c4:b4:23:3a:c9:fe:7c:
40:9c:a3:ea:69:8e:d3:25:38:b0:47:2e:35:a3:27:
50:12:63:0e:ab:82:ac:b7:df:3a:9e:1b:8e:17:4b:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BA:F1:99:D8:E0:8F:2A:0F:DD:CF:31:9B:B8:7D:3B:BF:66:B7:D9
X509v3 Authority Key Identifier:
keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b8:fb:1a:ac:29:df:27:f7:a5:67:9b:47:20:c5:59:b8:4d:
e6:c1:7d:64:c5:3a:80:a4:e9:67:c8:1a:fb:d7:a9:db:5d:8c:
06:28:2b:14:57:b2:15:f5:ec:ac:e1:08:3b:ac:f9:96:7b:45:
58:08:6b:47:6b:6e:1c:8b:dd:90:69:37:be:97:f9:58:94:34:
f4:a5:16:b2:bc:6e:e6:d6:c0:b6:3c:17:68:bd:1d:43:33:c0:
7b:3b:24:78:2d:20:e1:c6:55:7d:c6:ab:00:5b:1d:be:60:5a:
dc:61:9a:80:bc:bf:c1:d0:a3:c7:6d:f5:6c:ff:c7:37:1e:8c:
cc:ed:3c:83:c0:aa:de:a8:86:68:fe:f1:b8:11:1e:f3:f8:9d:
33:b4:0c:69:c5:3b:4b:4e:6c:d2:04:f6:42:0d:46:03:ff:86:
5f:e4:30:c8:3f:a4:1f:9b:7d:8d:7b:8b:5c:dd:a9:70:09:43:
a8:91:cc:18:33:77:03:21:d7:fe:93:94:3e:53:1f:c2:64:e1:
49:c1:46:65:19:07:04:f1:c0:4a:e0:0c:d6:2e:59:9c:d4:32:
9b:4f:e2:c6:46:2b:17:b0:4b:80:c9:e3:11:87:24:42:51:52:
d2:93:6b:fd:d7:62:d1:dd:d8:93:60:0e:82:1a:6e:f7:da:6f:
e3:87:4d:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra7pcz2O88upu+00MKLGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWEwNDdjNDQ2MTdmY2ZiMjljZDU3MmY3YWQ4NzQ3ZDBi
OTMyNmIwHhcNMjYwMzAxMjIwMTI5WhcNMjYwMzAyMjIwMTI5WjAzMTEwLwYDVQQD
EygyYWJhZjE5OWQ4ZTA4ZjJhMGZkZGNmMzE5YmI4N2QzYmJmNjZiN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEQqgKDQ9drggst2JCkoE5WENWq8
kXUh7lrTrPa4KK6GoO3nLvRwxEdfI29I5NXRE3wMBrvaRxHRIcB0HUV9URqsxijM
LivAXakq1zppzLeSdSQPskNU5N6ePUDS5SBgTziZqOROwrosdNVVniUIK0ItZ6BW
hevJdo8bBUlE+/al4OzaoQ08hr3F5KETX63CG92GFgEZut8aoGtWrlhFwKbk4f64
aP8RUFmr31Rj4milI2I0amAT7Ism7z+5tr6N7SbodFqnSr1YwZpPhbVq585rF8yM
preYjcS0IzrJ/nxAnKPqaY7TJTiwRy41oydQEmMOq4Kst986nhuOF0vOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq68ZnY4I8qD93PMZu4fTu/ZrfZMB8GA1UdIwQY
MBaAFEKaBHxEYX/PspzVcveth0fQuTJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMt
NzdlNjFlZWE2YTY0LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMtNzdlNjFlZWE2YTY0
LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrj7Gqwp
3yf3pWebRyDFWbhN5sF9ZMU6gKTpZ8ga+9ep212MBigrFFeyFfXsrOEIO6z5lntF
WAhrR2tuHIvdkGk3vpf5WJQ09KUWsrxu5tbAtjwXaL0dQzPAezskeC0g4cZVfcar
AFsdvmBa3GGagLy/wdCjx231bP/HNx6MzO08g8Cq3qiGaP7xuBEe8/idM7QMacU7
S05s0gT2Qg1GA/+GX+QwyD+kH5t9jXuLXN2pcAlDqJHMGDN3AyHX/pOUPlMfwmTh
ScFGZRkHBPHASuAM1i5ZnNQym0/ixkYrF7BLgMnjEYckQlFS0pNr/ddi0d3Yk2AO
ghpu99pv44dN+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:58 2026 by rpki-client