Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: peIvF9LyFMfPI07BXlfys3TMtfzx6FpoaYYjNCG/CK8=
Subject key identifier: 0D:AE:F3:21:E0:FC:1E:94:84:B6:A4:EB:94:5C:12:93:A9:BB:6C:79
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019CAAC6E0ECD24DB30398B7BC00556AA16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 11C6
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa (hash: aK0mESa/pTNFNbE9AYjmY5ObclP62vz5mDsyUcql268=)
2: PKIsDHUR7jxFAsus-wdsRMLiSqA.roa (hash: gaSVKfmjUGAGycTPbk7kLy1z07Kh829WcikSnbJ29nU=)
3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: XVh3DE7cW7n17ya8wlRovlLm9RBQVZUt8IkYznWfoq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e0:ec:d2:4d:b3:03:98:b7:bc:00:55:6a:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=0daef321e0fc1e9484b6a4eb945c1293a9bb6c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:4c:d1:b0:39:5f:1c:2c:a4:ac:87:db:8f:
3e:ac:c8:98:af:ec:6f:04:97:b3:cd:7e:13:aa:21:
f7:c6:2a:46:f2:5b:ae:77:eb:dc:5a:0c:bf:c6:e8:
95:0b:21:dd:95:fd:a4:3c:38:bc:92:02:2d:ad:11:
15:a6:e4:23:ec:de:b9:09:98:05:bc:de:19:e8:fa:
a0:a2:44:c0:18:4f:3a:95:fb:e9:8e:63:8a:49:87:
e9:d7:e2:38:e8:a8:fe:82:6e:03:73:d6:76:c6:a5:
1d:d1:9b:90:4c:5e:cd:cd:ed:27:48:69:c6:2e:10:
2b:b7:01:38:8a:f1:be:3b:ff:df:1b:67:d7:57:04:
1d:71:c8:7d:fe:9f:8f:c6:62:62:72:cb:07:b9:80:
45:45:2d:e5:61:80:06:d8:8d:e7:a8:8c:6d:3c:1b:
f1:9e:6b:23:2c:de:ac:f0:cf:f1:0d:cf:cf:f6:5e:
de:95:f9:fc:f0:93:db:d6:76:83:b1:8f:5c:84:10:
5c:db:a3:56:7c:9e:53:57:16:ff:a7:09:37:7c:a4:
a0:db:bc:4f:07:29:d8:5b:e0:f1:a6:e6:d3:b6:35:
bf:e5:23:40:02:20:aa:31:d2:c6:ab:80:45:d2:dd:
27:54:5d:52:82:8d:1f:d3:be:a3:09:f0:04:27:2b:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:F3:21:E0:FC:1E:94:84:B6:A4:EB:94:5C:12:93:A9:BB:6C:79
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:43:ae:48:af:9a:34:ad:3a:ad:f7:15:16:80:d3:b2:71:00:
dd:01:19:43:ed:36:fd:4f:f8:56:f0:26:2a:58:6e:fd:2f:f8:
f8:03:43:e5:a1:39:93:26:5b:d7:35:e0:96:80:9a:2b:17:b1:
1a:d0:54:d1:a9:ad:49:93:b9:2d:ba:f9:62:4a:1f:50:9a:b5:
c4:e0:27:0f:9f:b3:af:84:8d:ee:72:dd:0e:be:35:e7:dc:65:
4a:7f:22:ee:57:43:fb:78:cb:72:19:02:4a:f5:0e:5c:6b:44:
4f:46:2d:ff:aa:20:0c:61:0e:70:04:f9:ef:ea:06:44:e7:5b:
49:8d:33:52:50:ac:05:90:09:5b:28:b5:b0:fc:d8:9f:d9:42:
55:e5:9f:2b:3b:e0:d5:9a:12:a9:5a:9f:18:f5:70:60:ed:97:
e4:d0:fc:e7:33:92:0f:bc:8e:f0:33:64:b1:16:b9:65:71:d4:
a0:2f:a9:80:37:85:cd:a1:c4:7a:dd:c0:9b:83:5f:3b:70:22:
fc:47:1f:94:7f:8e:c4:a3:29:1c:a6:ec:93:32:91:df:a6:2f:
ff:8d:5f:ff:dc:4e:f4:61:04:0e:e7:45:45:03:d2:98:30:a3:
ee:63:84:ac:18:6c:43:68:fb:94:e2:0a:16:d0:e8:10:57:52:
ed:0c:8d:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxuDs0k2zA5i3vABVaqFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjYwMzAxMTkwMTI2WhcNMjYwMzAyMTkwMTI2WjAzMTEwLwYDVQQD
EygwZGFlZjMyMWUwZmMxZTk0ODRiNmE0ZWI5NDVjMTI5M2E5YmI2Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTFM0bA5XxwspKyH248+rMiYr+xv
BJezzX4TqiH3xipG8luud+vcWgy/xuiVCyHdlf2kPDi8kgItrREVpuQj7N65CZgF
vN4Z6PqgokTAGE86lfvpjmOKSYfp1+I46Kj+gm4Dc9Z2xqUd0ZuQTF7Nze0nSGnG
LhArtwE4ivG+O//fG2fXVwQdcch9/p+PxmJicssHuYBFRS3lYYAG2I3nqIxtPBvx
nmsjLN6s8M/xDc/P9l7elfn88JPb1naDsY9chBBc26NWfJ5TVxb/pwk3fKSg27xP
BynYW+DxpubTtjW/5SNAAiCqMdLGq4BF0t0nVF1Sgo0f076jCfAEJyvspwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2u8yHg/B6UhLak65RcEpOpu2x5MB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkOuSK+a
NK06rfcVFoDTsnEA3QEZQ+02/U/4VvAmKlhu/S/4+AND5aE5kyZb1zXgloCaKxex
GtBU0amtSZO5Lbr5YkofUJq1xOAnD5+zr4SN7nLdDr4159xlSn8i7ldD+3jLchkC
SvUOXGtET0Yt/6ogDGEOcAT57+oGROdbSY0zUlCsBZAJWyi1sPzYn9lCVeWfKzvg
1ZoSqVqfGPVwYO2X5ND85zOSD7yO8DNksRa5ZXHUoC+pgDeFzaHEet3Am4NfO3Ai
/EcflH+OxKMpHKbskzKR36Yv/41f/9xO9GEEDudFRQPSmDCj7mOErBhsQ2j7lOIK
FtDoEFdS7QyNXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:09 2026 by rpki-client