Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: g3+K1HRQGjxGtkkb3rn40F+9Eq3cgEzjpWyjYZnkBEs=
Subject key identifier: 7F:0E:B0:35:F6:EE:B6:AE:0D:07:8F:01:A8:71:A9:96:10:85:3F:EB
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 019DA4F900A2C276B547B3F84A1EC0FA61E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 0127
Signing time: Sun 19 Apr 2026 09:01:15 +0000
Manifest this update: Sun 19 Apr 2026 09:01:15 +0000
Manifest next update: Mon 20 Apr 2026 09:01:15 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: SjmHyU1akAKxiVGM79hNWFXxgBYNRivZlUlndA3+11w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:00:a2:c2:76:b5:47:b3:f8:4a:1e:c0:fa:61:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Apr 19 09:01:15 2026 GMT
Not After : Apr 20 09:01:15 2026 GMT
Subject: CN=7f0eb035f6eeb6ae0d078f01a871a99610853feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:38:1f:ae:4f:80:64:4a:b5:08:29:11:5a:
d0:1b:49:2f:29:97:f8:c6:62:d0:c7:2e:98:56:04:
4d:72:ac:aa:67:b4:31:bb:f8:aa:d9:a8:f7:22:ba:
d8:d9:0b:20:7d:8a:1e:97:00:25:46:73:e7:83:95:
42:71:ee:a4:95:b3:18:66:87:b6:5d:a1:09:83:a6:
70:db:8a:d1:e7:b7:2a:f7:46:5c:5d:2a:a8:68:65:
0d:8d:ac:27:b3:ec:a4:d5:ae:97:e5:d5:c6:0c:2d:
08:13:a8:6c:a5:fa:16:7a:75:97:be:d1:96:0e:62:
f0:a1:a1:95:56:87:67:73:09:cd:93:1f:91:bf:45:
52:c5:28:ad:5c:03:c2:56:80:2b:fd:e6:5d:57:f4:
04:2e:c8:56:b5:65:2d:d5:50:81:0e:64:c9:5f:00:
41:78:1b:bb:37:7b:62:70:b7:5d:53:eb:10:ad:1b:
37:76:23:6e:21:80:8e:7b:98:94:5b:cf:9e:06:ab:
f7:7a:f5:cd:23:e3:26:ad:27:9c:a4:38:38:c3:dd:
f1:65:01:be:9b:49:95:98:ee:b0:c1:f9:ab:a7:ef:
80:25:63:75:6e:92:4b:bd:23:44:be:0a:a1:19:0c:
70:ed:8b:a7:ea:77:9a:8f:b2:32:e6:a5:99:1b:e0:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:B0:35:F6:EE:B6:AE:0D:07:8F:01:A8:71:A9:96:10:85:3F:EB
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ba:cf:82:15:b8:5b:38:21:c2:0d:81:d5:e9:4f:47:d8:0d:
d4:b8:74:18:7f:c0:f8:72:07:b6:41:33:b6:0f:6a:2e:f8:22:
2f:0e:90:46:ef:a0:b6:78:55:97:b6:b7:bd:16:23:ca:78:1f:
05:53:49:7a:a3:67:27:d1:50:5b:d1:db:3e:5a:23:3b:af:d9:
45:ae:3f:39:ef:21:e9:38:aa:76:90:f9:a6:5f:73:30:3e:dd:
03:6d:2f:00:a6:fb:91:25:f1:46:1a:6c:c2:e2:f5:ab:92:95:
51:ee:4f:81:e4:51:11:93:5d:00:d4:9b:74:ba:4e:4d:70:b0:
b6:7b:72:3c:b2:54:44:05:88:ce:a2:32:ba:b6:45:f4:f9:3f:
68:bf:f1:3a:b5:fe:3c:46:e3:66:40:38:db:c6:76:cf:5f:89:
dc:b2:12:7f:1a:14:19:6f:53:d1:f7:28:7f:27:c9:63:36:6f:
3c:e6:48:bc:88:0a:a0:f7:aa:1a:cb:c6:64:72:b7:88:1c:96:
57:30:81:c9:25:76:d0:4f:21:b3:5f:14:62:df:38:06:38:44:
bf:7d:b2:26:ff:89:98:5e:b1:e5:33:0e:c3:23:f9:6d:64:68:
2f:28:0b:b9:09:b5:33:f9:e7:bc:2b:74:13:72:5b:1e:ed:31:
28:e9:96:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+QCiwna1R7P4Sh7A+mHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmI3YmU2MjRhNmYyMzMxOThlMmEzNGYzZDlkOTg0Mjlh
YmE0NjEwHhcNMjYwNDE5MDkwMTE1WhcNMjYwNDIwMDkwMTE1WjAzMTEwLwYDVQQD
Eyg3ZjBlYjAzNWY2ZWViNmFlMGQwNzhmMDFhODcxYTk5NjEwODUzZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fM4H65PgGRKtQgpEVrQG0kvKZf4
xmLQxy6YVgRNcqyqZ7Qxu/iq2aj3IrrY2QsgfYoelwAlRnPng5VCce6klbMYZoe2
XaEJg6Zw24rR57cq90ZcXSqoaGUNjawns+yk1a6X5dXGDC0IE6hspfoWenWXvtGW
DmLwoaGVVodncwnNkx+Rv0VSxSitXAPCVoAr/eZdV/QELshWtWUt1VCBDmTJXwBB
eBu7N3ticLddU+sQrRs3diNuIYCOe5iUW8+eBqv3evXNI+MmrSecpDg4w93xZQG+
m0mVmO6wwfmrp++AJWN1bpJLvSNEvgqhGQxw7Yun6neaj7Iy5qWZG+BOlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8OsDX27rauDQePAahxqZYQhT/rMB8GA1UdIwQY
MBaAFKn7e+YkpvIzGY4qNPPZ2YQpq6RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEt
MGE5N2JiZjVmNDU2LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEtMGE5N2JiZjVmNDU2
LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7rPghW4
Wzghwg2B1elPR9gN1Lh0GH/A+HIHtkEztg9qLvgiLw6QRu+gtnhVl7a3vRYjyngf
BVNJeqNnJ9FQW9HbPlojO6/ZRa4/Oe8h6TiqdpD5pl9zMD7dA20vAKb7kSXxRhps
wuL1q5KVUe5PgeRREZNdANSbdLpOTXCwtntyPLJURAWIzqIyurZF9Pk/aL/xOrX+
PEbjZkA428Z2z1+J3LISfxoUGW9T0fcofyfJYzZvPOZIvIgKoPeqGsvGZHK3iByW
VzCBySV20E8hs18UYt84BjhEv32yJv+JmF6x5TMOwyP5bWRoLygLuQm1M/nnvCt0
E3JbHu0xKOmWsw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:12 2026 by rpki-client