Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: ZS0cLWLYfaS3gQICN8t/KdP1aZ9Y1xYBuv56iCVfCwo=
Subject key identifier: 08:52:1B:C3:DB:DE:0B:D3:E5:90:F0:27:43:BE:3C:D9:80:40:F0:C8
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 019CADC771094CC25CF5DC434D980804B285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: A7
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: jPDNtwEI4OETEWb6lAYmOyGfPhhJJmbLLqdw3oHt4L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:71:09:4c:c2:5c:f5:dc:43:4d:98:08:04:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=08521bc3dbde0bd3e590f02743be3cd98040f0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:cd:6b:9e:96:0c:52:11:38:1a:52:de:32:
24:61:98:88:2c:e9:dd:fb:b3:d7:d1:4a:18:4e:5d:
0b:a3:c0:c8:78:a3:74:a9:ea:87:b2:21:c7:72:4c:
6b:1a:90:7b:86:02:2d:72:f7:2e:de:a0:0f:4c:a0:
17:eb:71:d1:45:c3:87:0c:f6:b0:bd:18:e2:9b:0a:
a7:43:f5:f6:0d:d2:67:c2:46:2d:72:fa:db:25:55:
a1:d4:22:08:65:95:74:79:29:f8:68:08:5d:0e:86:
92:d5:ef:7b:dc:38:40:63:44:ed:92:5b:6b:c3:a9:
8a:8f:39:5c:c7:b7:66:8f:c5:0d:9f:d8:db:12:44:
1e:d3:9c:8a:ec:8d:e9:4a:41:32:97:fc:42:b6:d6:
14:2e:be:d6:76:cf:76:10:26:50:71:d5:f0:fa:be:
32:f9:52:22:02:cf:51:22:50:27:7d:23:9d:85:7e:
c6:ca:02:56:d0:dd:5f:8e:2c:ea:55:e9:e6:4d:a0:
3a:86:0f:5f:c3:58:66:3b:ca:11:20:df:d8:06:eb:
c1:7b:59:1b:f4:78:32:02:4e:70:a3:d4:2a:12:61:
bf:64:3c:c3:b6:2b:a5:6f:64:6c:58:16:1b:aa:74:
bc:a6:f7:39:14:a8:41:f5:0a:45:fc:6a:47:88:ac:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:52:1B:C3:DB:DE:0B:D3:E5:90:F0:27:43:BE:3C:D9:80:40:F0:C8
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:11:59:ac:fc:72:4f:06:54:d8:9c:80:9e:01:f5:7c:60:43:
95:0c:50:0e:25:a4:ff:1b:83:60:3e:c2:a2:3c:6f:9f:40:78:
86:e0:f6:33:10:1d:9e:0d:5e:5d:14:b6:d9:59:4a:f2:68:0f:
ad:df:7a:0b:7d:78:3b:da:ff:5d:e9:ed:d2:73:39:d4:cf:a0:
8e:93:7a:8e:eb:54:56:c2:a3:3b:26:d9:5d:88:61:97:bd:74:
f4:cd:bf:9a:74:25:17:31:da:51:61:5a:da:20:ba:64:cc:14:
51:14:b8:d4:c5:21:76:95:11:4c:31:29:e8:6f:f3:a7:86:21:
ec:98:52:9b:5f:47:e7:2a:04:aa:4b:1a:2e:64:42:80:ee:b7:
d6:aa:1f:62:e1:86:67:bb:4d:09:1a:c3:7e:ac:d6:0b:85:3d:
6a:13:77:c1:27:66:f8:98:38:0d:56:34:8d:ec:ce:a6:34:2f:
58:0c:4d:6f:f0:f9:4d:2c:a0:ed:78:3b:e0:c9:41:1e:14:a5:
b1:7d:05:26:c7:9b:47:9b:4a:06:b6:dc:3c:db:e1:b5:dd:14:
99:39:b8:2a:03:56:ca:34:3c:fd:ec:f5:0d:75:34:91:75:12:
eb:b8:e1:3d:3a:9f:65:1a:c8:0d:4f:c6:e3:25:9c:6a:e4:65:
21:1e:a7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx3EJTMJc9dxDTZgIBLKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmI3YmU2MjRhNmYyMzMxOThlMmEzNGYzZDlkOTg0Mjlh
YmE0NjEwHhcNMjYwMzAyMDkwMDU0WhcNMjYwMzAzMDkwMDU0WjAzMTEwLwYDVQQD
EygwODUyMWJjM2RiZGUwYmQzZTU5MGYwMjc0M2JlM2NkOTgwNDBmMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d3Na56WDFIROBpS3jIkYZiILOnd
+7PX0UoYTl0Lo8DIeKN0qeqHsiHHckxrGpB7hgItcvcu3qAPTKAX63HRRcOHDPaw
vRjimwqnQ/X2DdJnwkYtcvrbJVWh1CIIZZV0eSn4aAhdDoaS1e973DhAY0Ttkltr
w6mKjzlcx7dmj8UNn9jbEkQe05yK7I3pSkEyl/xCttYULr7Wds92ECZQcdXw+r4y
+VIiAs9RIlAnfSOdhX7GygJW0N1fjizqVenmTaA6hg9fw1hmO8oRIN/YBuvBe1kb
9HgyAk5wo9QqEmG/ZDzDtiulb2RsWBYbqnS8pvc5FKhB9QpF/GpHiKw5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhSG8Pb3gvT5ZDwJ0O+PNmAQPDIMB8GA1UdIwQY
MBaAFKn7e+YkpvIzGY4qNPPZ2YQpq6RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEt
MGE5N2JiZjVmNDU2LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEtMGE5N2JiZjVmNDU2
LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThFZrPxy
TwZU2JyAngH1fGBDlQxQDiWk/xuDYD7Cojxvn0B4huD2MxAdng1eXRS22VlK8mgP
rd96C314O9r/Xent0nM51M+gjpN6jutUVsKjOybZXYhhl7109M2/mnQlFzHaUWFa
2iC6ZMwUURS41MUhdpURTDEp6G/zp4Yh7JhSm19H5yoEqksaLmRCgO631qofYuGG
Z7tNCRrDfqzWC4U9ahN3wSdm+Jg4DVY0jezOpjQvWAxNb/D5TSyg7Xg74MlBHhSl
sX0FJsebR5tKBrbcPNvhtd0UmTm4KgNWyjQ8/ez1DXU0kXUS67jhPTqfZRrIDU/G
4yWcauRlIR6n/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:36:33 2026 by rpki-client