Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: STJbW8RrnvJkqkaYapHzjNekPsL+b+OcsiqqWSH6mds=
Subject key identifier: DC:C4:54:C4:EE:5C:58:F1:CF:61:0A:44:D3:DC:DF:CB:16:0D:5A:A9
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 019D9A3E2563741863C7686726B53BF8759B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: SdKfjqkJkmB4T2HtOCeLivvNva8XdJL5O+BeKhOqOHk=)
2: wt3Ui80OQ2RXah5MDzF8MWqly2Q.roa (hash: J67sJRmcaTP47jMbuSDSqG6+LX3lK8JypZ67sDFFc/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:25:63:74:18:63:c7:68:67:26:b5:3b:f8:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=dcc454c4ee5c58f1cf610a44d3dcdfcb160d5aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:5c:ff:78:ed:aa:17:97:cc:4e:82:53:97:
25:d7:63:ac:9c:95:49:4c:15:67:45:da:e1:aa:86:
90:61:75:0d:3d:b4:d6:c1:a2:48:a9:98:ca:8c:cf:
54:50:4f:2f:23:a0:4d:4c:a2:32:2a:d0:e7:77:a1:
37:02:c1:5e:53:79:38:61:57:0f:f9:fc:54:b8:d8:
bc:2d:ff:88:15:64:b4:fa:28:cf:1b:95:38:c2:aa:
50:1e:72:21:81:80:89:5e:bf:44:a2:72:93:f7:66:
f8:29:62:b0:ce:e0:6b:2d:ac:69:0b:cd:b7:d0:5c:
23:f7:d0:46:b1:24:2a:94:24:1c:30:80:29:18:26:
83:e1:f3:65:55:58:ab:2c:96:98:37:af:df:13:a3:
2e:c0:24:1d:e3:0f:8f:7a:c6:a7:6a:03:f5:72:df:
c6:fd:7c:b5:40:1e:79:7e:6b:a3:9b:1e:9b:be:78:
1d:07:22:07:a7:23:a7:d2:47:d9:a1:86:38:b7:f1:
0a:ad:c8:8a:f8:cb:64:bc:25:a6:13:6a:95:a5:8b:
52:9b:e8:77:db:5f:39:91:cc:a2:10:ac:38:4b:16:
d5:fc:9a:1d:33:02:10:27:4f:6e:d6:b8:68:9b:98:
2c:d0:d1:ea:2e:88:43:08:a5:65:05:0b:85:cd:9e:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:54:C4:EE:5C:58:F1:CF:61:0A:44:D3:DC:DF:CB:16:0D:5A:A9
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:21:a7:f6:dc:a3:d4:bc:32:4d:d2:35:32:68:80:d0:33:62:
d1:a5:46:8e:88:bc:db:9e:45:03:31:9f:88:c3:30:3a:91:d5:
2d:32:95:84:c7:5f:f7:cd:ba:d4:a4:6c:30:a2:39:4b:4d:11:
1e:15:ad:7e:c8:65:a1:63:8c:f2:60:9d:f3:15:69:67:37:f7:
c2:46:4d:5f:fa:26:8b:ba:b0:bc:a5:47:b0:24:8a:9a:d2:ef:
71:f6:df:9a:58:40:10:26:76:b7:54:51:d3:5b:ef:d0:da:22:
27:de:88:78:b1:dc:24:2b:46:21:0f:22:a9:0d:0e:f6:02:63:
3b:35:01:04:bb:d1:37:03:73:6b:4f:16:d8:a5:ac:00:8b:9d:
03:3f:c1:93:43:fb:e4:7a:04:aa:e9:fb:3b:e6:34:c0:83:8e:
ec:8b:4e:f5:a1:37:8e:48:e1:07:e4:f0:58:c3:f0:4f:db:56:
a2:e8:a5:00:f5:68:e6:bd:71:a7:b5:ca:ec:f5:fe:0d:60:57:
4e:11:3e:7f:fa:ab:14:8f:48:ab:4c:5d:92:00:fd:62:0e:fe:
bc:72:7b:a9:96:b5:23:ea:43:6e:7e:c5:b7:f4:ad:0f:23:d3:
9f:cc:94:36:eb:4f:fd:12:d0:16:6c:17:8f:96:b0:eb:87:66:
e7:73:a1:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPiVjdBhjx2hnJrU7+HWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1
OTdhMTIwHhcNMjYwNDE3MDcwMDU3WhcNMjYwNDE4MDcwMDU3WjAzMTEwLwYDVQQD
EyhkY2M0NTRjNGVlNWM1OGYxY2Y2MTBhNDRkM2RjZGZjYjE2MGQ1YWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte9c/3jtqheXzE6CU5cl12OsnJVJ
TBVnRdrhqoaQYXUNPbTWwaJIqZjKjM9UUE8vI6BNTKIyKtDnd6E3AsFeU3k4YVcP
+fxUuNi8Lf+IFWS0+ijPG5U4wqpQHnIhgYCJXr9EonKT92b4KWKwzuBrLaxpC823
0Fwj99BGsSQqlCQcMIApGCaD4fNlVVirLJaYN6/fE6MuwCQd4w+PesanagP1ct/G
/Xy1QB55fmujmx6bvngdByIHpyOn0kfZoYY4t/EKrciK+MtkvCWmE2qVpYtSm+h3
2185kcyiEKw4SxbV/JodMwIQJ09u1rhom5gs0NHqLohDCKVlBQuFzZ5XfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzEVMTuXFjxz2EKRNPc38sWDVqpMB8GA1UdIwQY
MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt
NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm
LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyGn9tyj
1LwyTdI1MmiA0DNi0aVGjoi8255FAzGfiMMwOpHVLTKVhMdf98261KRsMKI5S00R
HhWtfshloWOM8mCd8xVpZzf3wkZNX/omi7qwvKVHsCSKmtLvcfbfmlhAECZ2t1RR
01vv0NoiJ96IeLHcJCtGIQ8iqQ0O9gJjOzUBBLvRNwNza08W2KWsAIudAz/Bk0P7
5HoEqun7O+Y0wIOO7ItO9aE3jkjhB+TwWMPwT9tWouilAPVo5r1xp7XK7PX+DWBX
ThE+f/qrFI9Iq0xdkgD9Yg7+vHJ7qZa1I+pDbn7Ft/StDyPTn8yUNutP/RLQFmwX
j5aw64dm53OhLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:48 2026 by rpki-client