Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: S5LHMPhi+27INLe85KTXfbbXAZwbCObxJM+4uMO9etQ=
Subject key identifier: 44:41:7A:D2:82:DF:C0:3F:3E:F3:4F:6F:A1:C7:9F:0B:DC:59:8F:D0
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 019CAC10029ED467239B917447938EDFAA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 13FD
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: Lq9RGwKCyj4Wypl4s2MraH62jJQqmM0mtw8dwupuXDs=)
2: S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa (hash: KcKMRfjEJimpg3wHDTAgPJLLtBV5jQ0bUr2ldkt0t+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:02:9e:d4:67:23:9b:91:74:47:93:8e:df:aa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=44417ad282dfc03f3ef34f6fa1c79f0bdc598fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:62:bb:d0:c6:a6:3b:9b:57:0e:b9:45:40:
bb:31:73:14:17:b6:15:bb:62:0a:6e:1e:39:4e:46:
b4:e3:95:cb:2e:1c:42:81:7d:bf:34:bc:6d:5c:ff:
95:69:05:6f:9e:09:e5:41:79:04:3c:ee:f2:17:86:
75:5e:90:e0:a5:db:5f:1e:82:6b:55:d2:71:fc:da:
32:d9:ad:4e:8a:13:5f:60:4f:8d:06:6c:98:f2:7a:
49:c9:16:79:dc:d6:7b:66:e2:1f:82:af:fe:01:35:
0f:58:e0:2b:72:86:de:93:c1:9c:64:bb:58:6a:d9:
7c:73:ea:73:c0:98:7a:80:39:09:0b:21:5b:87:b8:
39:47:82:a7:be:16:b7:af:71:ba:83:5e:7c:72:31:
05:37:48:fc:82:e0:49:3a:00:17:a3:01:b5:be:23:
5f:f0:74:51:de:5a:ea:16:2b:2d:5a:37:8a:00:25:
91:48:4a:86:e9:46:47:18:84:6c:7c:2d:cb:54:94:
67:14:cc:cb:d8:7e:60:ad:80:40:7f:26:d0:40:26:
e2:82:ab:be:19:23:71:f9:81:bd:db:fb:12:80:7b:
67:98:20:8b:3c:2a:9d:67:a6:03:cf:a8:dd:ef:54:
30:2c:36:27:00:41:37:aa:d9:08:4f:b5:38:e8:10:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:7A:D2:82:DF:C0:3F:3E:F3:4F:6F:A1:C7:9F:0B:DC:59:8F:D0
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ba:94:cd:5f:21:ac:63:a5:15:dd:3a:65:a9:5b:4c:ec:ee:
40:55:9c:5e:f4:7f:82:4e:10:4c:18:68:bb:8c:04:f4:9f:36:
30:db:6f:62:d2:c0:03:8f:88:73:34:e9:b7:d9:8f:c8:0e:04:
06:24:3a:c1:06:f1:cc:92:4a:a7:71:2f:10:a4:51:2b:76:e6:
52:fc:7f:b9:e2:7f:37:8c:ee:96:ce:8c:90:a7:7a:9b:9d:04:
27:f8:36:3c:a0:5d:88:e2:ca:bd:56:d2:6a:c8:d1:9b:28:e6:
b2:f5:f6:7a:b4:83:32:41:48:06:b9:d9:f7:bc:56:52:2e:21:
54:43:33:79:64:3d:0e:68:9d:a8:48:92:99:df:85:6e:0f:74:
ce:c2:90:19:3c:ba:c8:c8:ca:36:42:97:35:1e:bd:90:0b:ec:
fc:99:d8:ba:69:ac:fe:a4:a6:a5:72:ff:9d:8f:32:3c:fe:71:
3f:87:1d:87:aa:d6:bd:07:97:29:7f:20:d5:5a:b7:57:59:2b:
33:50:83:ed:85:6e:18:30:35:37:6e:ab:52:75:8a:81:2b:a0:
5a:d6:b0:8a:99:16:b8:5c:ed:05:85:17:73:2f:31:5c:95:a3:
41:1d:0b:c0:ae:fa:3d:ad:14:a5:2d:f2:d6:75:4b:c1:f5:37:
a9:5a:c5:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEAKe1Gcjm5F0R5OO36qfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3
OTRhYTcwHhcNMjYwMzAyMDEwMDU2WhcNMjYwMzAzMDEwMDU2WjAzMTEwLwYDVQQD
Eyg0NDQxN2FkMjgyZGZjMDNmM2VmMzRmNmZhMWM3OWYwYmRjNTk4ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY9iu9DGpjubVw65RUC7MXMUF7YV
u2IKbh45Tka045XLLhxCgX2/NLxtXP+VaQVvngnlQXkEPO7yF4Z1XpDgpdtfHoJr
VdJx/Noy2a1OihNfYE+NBmyY8npJyRZ53NZ7ZuIfgq/+ATUPWOArcobek8GcZLtY
atl8c+pzwJh6gDkJCyFbh7g5R4Knvha3r3G6g158cjEFN0j8guBJOgAXowG1viNf
8HRR3lrqFistWjeKACWRSEqG6UZHGIRsfC3LVJRnFMzL2H5grYBAfybQQCbigqu+
GSNx+YG92/sSgHtnmCCLPCqdZ6YDz6jd71QwLDYnAEE3qtkIT7U46BB3bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERBetKC38A/PvNPb6HHnwvcWY/QMB8GA1UdIwQY
MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt
MzdhMjRlMDgxZjY4LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4
LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELqUzV8h
rGOlFd06ZalbTOzuQFWcXvR/gk4QTBhou4wE9J82MNtvYtLAA4+IczTpt9mPyA4E
BiQ6wQbxzJJKp3EvEKRRK3bmUvx/ueJ/N4zuls6MkKd6m50EJ/g2PKBdiOLKvVbS
asjRmyjmsvX2erSDMkFIBrnZ97xWUi4hVEMzeWQ9DmidqEiSmd+Fbg90zsKQGTy6
yMjKNkKXNR69kAvs/JnYumms/qSmpXL/nY8yPP5xP4cdh6rWvQeXKX8g1Vq3V1kr
M1CD7YVuGDA1N26rUnWKgSugWtawipkWuFztBYUXcy8xXJWjQR0LwK76Pa0UpS3y
1nVLwfU3qVrFPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:28 2026 by rpki-client