Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: FgiuqzYacN3ej2SmHTuOQ7m1niN25zN2+t5AfmplA94=
Subject key identifier: 79:1C:08:E4:E7:7B:78:F8:1A:A2:75:C0:AA:11:7D:2A:89:1B:F2:94
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019D9850578E9D5BA831E62BB8FF027ABE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 1241
Signing time: Thu 16 Apr 2026 22:01:35 +0000
Manifest this update: Thu 16 Apr 2026 22:01:35 +0000
Manifest next update: Fri 17 Apr 2026 22:01:35 +0000
Files and hashes: 1: OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa (hash: aK0mESa/pTNFNbE9AYjmY5ObclP62vz5mDsyUcql268=)
2: PKIsDHUR7jxFAsus-wdsRMLiSqA.roa (hash: gaSVKfmjUGAGycTPbk7kLy1z07Kh829WcikSnbJ29nU=)
3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: DzMsEiHtVZamdMymWfecidZUAzj/78AigpNhLkH0ZKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:57:8e:9d:5b:a8:31:e6:2b:b8:ff:02:7a:be:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Apr 16 22:01:35 2026 GMT
Not After : Apr 17 22:01:35 2026 GMT
Subject: CN=791c08e4e77b78f81aa275c0aa117d2a891bf294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:4d:86:6a:bb:12:e9:be:d8:a0:3b:8a:89:
a8:bf:d0:01:de:10:38:05:5c:24:1b:ea:c2:39:7c:
5a:b8:fd:4f:83:2e:12:f4:10:0c:db:54:44:60:4a:
5a:d4:f9:50:56:2a:a3:69:13:59:cb:64:02:7b:77:
ee:2c:05:1c:0f:46:13:72:f4:23:0f:c9:49:9d:05:
bf:d4:1c:5f:e5:95:4f:ea:4b:6a:c7:b8:8c:a1:ac:
97:3a:d5:dd:0f:07:0f:59:90:77:b1:31:9c:e5:fb:
8f:56:4e:d0:ee:9b:5e:5b:3d:bf:90:fd:d5:6f:2d:
3e:a5:7d:0b:61:14:4d:a4:bd:aa:a2:22:4e:c3:35:
11:c5:43:c3:03:9b:48:b0:ef:20:3f:c3:2b:8e:9e:
ba:fa:fb:28:4e:be:0b:0d:65:69:6d:62:ee:83:60:
20:e9:b5:cc:8e:fe:b2:c1:5a:02:59:fa:a7:d1:69:
c4:66:17:1f:43:8c:10:44:29:18:15:3a:bd:3f:aa:
d4:f7:6a:84:69:53:9b:ce:9d:f8:b7:53:b2:c9:90:
60:bf:1e:ba:1e:5b:c4:d7:57:d0:ae:e9:fc:2d:e2:
c3:ae:a3:69:c6:3c:f7:fa:d4:58:72:cc:be:d5:07:
37:bd:79:a4:e7:26:c3:68:41:1a:a7:89:cc:cb:14:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:08:E4:E7:7B:78:F8:1A:A2:75:C0:AA:11:7D:2A:89:1B:F2:94
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:93:e2:f5:b4:4f:46:c0:bd:65:55:4b:e2:71:e1:75:fb:78:
e6:0f:35:67:db:ca:2f:01:e6:1a:d7:53:3e:f0:f6:14:58:80:
c3:d3:dc:eb:48:03:56:d9:46:f6:81:cc:70:7f:1b:ed:55:20:
23:4b:3a:9d:02:23:47:44:37:70:ea:1f:98:fe:81:ff:c9:d7:
d1:99:56:1f:82:cc:33:93:1a:8a:ff:95:fe:14:93:f0:0a:5b:
d8:02:47:37:2b:54:d5:fb:5a:54:e3:46:55:fd:67:d0:98:bf:
62:e2:89:00:2a:9a:b9:c8:28:92:24:06:34:d8:e7:dc:f8:f3:
5d:00:77:b6:a9:3e:98:c7:e8:91:f8:25:c2:7e:56:32:23:9b:
92:4b:0e:04:e2:6f:64:89:7a:db:66:fd:25:3a:13:ef:05:67:
1f:f0:9c:39:c4:1f:5f:41:47:74:c3:72:36:ed:d1:40:12:ad:
5f:b8:d5:df:69:b0:09:6b:07:d0:e6:b0:10:33:f2:cf:76:c9:
5d:81:ca:ca:29:ee:f7:16:b3:f3:86:7a:b6:4c:71:85:72:df:
be:eb:e7:e7:3c:43:e9:a2:18:14:e8:6a:b6:ce:9a:4d:79:19:
78:63:3b:d8:ef:45:cb:2b:19:50:4b:61:d6:8d:31:c3:ab:89:
d6:97:db:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUFeOnVuoMeYruP8Cer4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjYwNDE2MjIwMTM1WhcNMjYwNDE3MjIwMTM1WjAzMTEwLwYDVQQD
Eyg3OTFjMDhlNGU3N2I3OGY4MWFhMjc1YzBhYTExN2QyYTg5MWJmMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl31Nhmq7Eum+2KA7iomov9AB3hA4
BVwkG+rCOXxauP1Pgy4S9BAM21REYEpa1PlQViqjaRNZy2QCe3fuLAUcD0YTcvQj
D8lJnQW/1Bxf5ZVP6ktqx7iMoayXOtXdDwcPWZB3sTGc5fuPVk7Q7pteWz2/kP3V
by0+pX0LYRRNpL2qoiJOwzURxUPDA5tIsO8gP8Mrjp66+vsoTr4LDWVpbWLug2Ag
6bXMjv6ywVoCWfqn0WnEZhcfQ4wQRCkYFTq9P6rU92qEaVObzp34t1OyyZBgvx66
HlvE11fQrun8LeLDrqNpxjz3+tRYcsy+1Qc3vXmk5ybDaEEap4nMyxRwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkcCOTne3j4GqJ1wKoRfSqJG/KUMB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpPi9bRP
RsC9ZVVL4nHhdft45g81Z9vKLwHmGtdTPvD2FFiAw9Pc60gDVtlG9oHMcH8b7VUg
I0s6nQIjR0Q3cOofmP6B/8nX0ZlWH4LMM5Maiv+V/hST8Apb2AJHNytU1ftaVONG
Vf1n0Ji/YuKJACqaucgokiQGNNjn3PjzXQB3tqk+mMfokfglwn5WMiObkksOBOJv
ZIl622b9JToT7wVnH/CcOcQfX0FHdMNyNu3RQBKtX7jV32mwCWsH0OawEDPyz3bJ
XYHKyinu9xaz84Z6tkxxhXLfvuvn5zxD6aIYFOhqts6aTXkZeGM72O9FyysZUEth
1o0xw6uJ1pfbrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:35 2026 by rpki-client