Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: GAGa0NZscb2FAnSHc8yDIEygcK1d3bUnMpjK4mJ3lC8=
Subject key identifier: 50:43:82:21:95:B6:EE:A3:6C:A8:D6:A5:C3:D6:76:0A:8E:D6:E9:33
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019CABA20F2EA783038A53FEBDB24A0A5856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 0727
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: 1-sDuDT5PyDWTrrUoYprkpEdUV2I.roa (hash: eAjODYNfh7Im2wLs/xUeEWebYtl3ElP2ajyZCTGNlyc=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: 8haK6TIFhipokm0IrLmSPpCEhoSUxY25FOC4YeL9DM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0f:2e:a7:83:03:8a:53:fe:bd:b2:4a:0a:58:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=5043822195b6eea36ca8d6a5c3d6760a8ed6e933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:19:3b:21:c9:e1:0f:24:96:34:54:05:99:
3b:01:e6:05:aa:13:87:68:c3:45:b7:1f:62:9d:d7:
2d:95:b8:b7:3e:d7:01:18:0f:3c:a4:ed:28:ed:79:
c7:d6:88:26:18:f6:69:f9:9d:f6:10:b9:2d:d8:0c:
1a:67:df:6b:6f:07:54:e8:37:87:18:1e:ee:1c:45:
30:6e:aa:20:cf:39:6f:48:9e:3a:0c:ec:ca:f9:e8:
43:6a:71:07:53:bd:4d:4a:9b:fa:8c:d7:f1:c1:b4:
5d:3f:57:26:48:4d:b7:65:fd:de:a5:3f:95:75:a8:
ea:f6:6f:1f:16:5a:5c:c4:de:7a:ee:5f:48:7c:1d:
da:6e:ac:f9:7a:e2:e0:4a:6e:ea:d6:30:0f:c6:47:
08:d2:1a:72:5f:d2:55:d6:19:f8:09:62:cd:7c:f9:
4b:4c:f7:9a:1c:56:be:47:33:c5:11:57:7b:cc:f3:
fd:b3:89:12:4a:02:62:33:cc:42:1a:a9:2b:8e:7a:
43:e1:2d:6b:c2:f3:23:53:fb:35:ce:d1:a1:1b:69:
04:32:7b:44:f6:25:c6:32:11:be:9c:12:18:88:95:
69:aa:28:e2:37:c8:1a:44:28:4b:1d:50:30:65:5d:
0c:cd:76:4c:05:07:24:be:29:dc:54:4e:67:51:19:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:82:21:95:B6:EE:A3:6C:A8:D6:A5:C3:D6:76:0A:8E:D6:E9:33
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e2:39:c5:a7:dd:51:ad:25:6e:8e:81:87:0b:c4:ac:c9:e0:
ba:d8:b1:6e:41:77:2e:2a:ec:e2:79:47:5c:23:d3:0c:0d:07:
84:78:1e:fc:b4:8b:af:d8:e6:0a:22:69:49:38:9f:f6:bd:be:
c6:25:61:6a:b3:b4:7a:86:91:ad:b4:4f:43:f9:b3:fa:02:c8:
95:9a:c8:6b:27:2c:c3:90:0f:bc:b5:8c:b5:67:a7:36:45:d2:
f9:32:7d:ae:ce:ec:a2:4f:9f:fb:8d:96:a3:61:7c:db:a9:40:
1f:f4:1d:a0:62:b8:46:16:fc:f0:1b:33:97:b7:e9:e5:d5:7f:
1a:ce:e1:51:23:40:71:03:77:77:34:65:f9:70:41:e5:99:9c:
27:a7:40:16:24:4d:ca:31:e6:e3:e5:37:3d:a4:3e:b7:5a:c9:
ad:60:22:73:c1:55:10:55:a0:e8:8f:5d:0a:ba:1f:42:2e:1b:
83:2b:8f:8e:38:95:9b:e1:81:82:ee:54:d3:66:de:79:23:e5:
43:88:45:f5:8f:9f:82:49:e6:b6:ef:ce:84:3a:61:80:c2:a6:
c1:d1:7c:05:59:47:3b:27:01:26:d6:d5:9c:75:0c:36:f2:12:
8a:fd:29:11:cf:a6:5e:a6:96:a4:41:2b:73:75:fb:d0:a5:23:
bd:f5:bc:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrog8up4MDilP+vbJKClhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMWYxNDgwNjUxZjFiMzM4YmUyNjM0MWUyZGIzYTBhYTNi
MzQ0ZWIwHhcNMjYwMzAxMjMwMDUwWhcNMjYwMzAyMjMwMDUwWjAzMTEwLwYDVQQD
Eyg1MDQzODIyMTk1YjZlZWEzNmNhOGQ2YTVjM2Q2NzYwYThlZDZlOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGQZOyHJ4Q8kljRUBZk7AeYFqhOH
aMNFtx9indctlbi3PtcBGA88pO0o7XnH1ogmGPZp+Z32ELkt2AwaZ99rbwdU6DeH
GB7uHEUwbqogzzlvSJ46DOzK+ehDanEHU71NSpv6jNfxwbRdP1cmSE23Zf3epT+V
dajq9m8fFlpcxN567l9IfB3abqz5euLgSm7q1jAPxkcI0hpyX9JV1hn4CWLNfPlL
TPeaHFa+RzPFEVd7zPP9s4kSSgJiM8xCGqkrjnpD4S1rwvMjU/s1ztGhG2kEMntE
9iXGMhG+nBIYiJVpqijiN8gaRChLHVAwZV0MzXZMBQckvincVE5nURkCRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBDgiGVtu6jbKjWpcPWdgqO1ukzMB8GA1UdIwQY
MBaAFEMfFIBlHxszi+JjQeLbOgqjs0TrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYt
NGUwMDA5NDMxNDlmLzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYtNGUwMDA5NDMxNDlm
LzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOI5xafd
Ua0lbo6BhwvErMngutixbkF3Lirs4nlHXCPTDA0HhHge/LSLr9jmCiJpSTif9r2+
xiVharO0eoaRrbRPQ/mz+gLIlZrIaycsw5APvLWMtWenNkXS+TJ9rs7sok+f+42W
o2F826lAH/QdoGK4Rhb88Bszl7fp5dV/Gs7hUSNAcQN3dzRl+XBB5ZmcJ6dAFiRN
yjHm4+U3PaQ+t1rJrWAic8FVEFWg6I9dCrofQi4bgyuPjjiVm+GBgu5U02beeSPl
Q4hF9Y+fgknmtu/OhDphgMKmwdF8BVlHOycBJtbVnHUMNvISiv0pEc+mXqaWpEEr
c3X70KUjvfW8rw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:12 2026 by rpki-client