Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: vx382Si53KnIoffTfRosqj2F2wUiLByGt9JmX9fzr3Q=
Subject key identifier: 4D:7F:CB:F9:AB:56:2A:A7:FF:65:0E:C8:14:70:2B:13:FF:04:23:19
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019CAAC6CEF4A59F1D0A34366CB446211FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: MXi5ufapd6Fz+sriNAcEEf/eRdQd60wCFyYFftTBOno=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ce:f4:a5:9f:1d:0a:34:36:6c:b4:46:21:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=4d7fcbf9ab562aa7ff650ec814702b13ff042319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:c9:38:b4:f6:02:97:79:c1:11:8b:cb:50:
d6:2f:ce:50:a2:bb:38:d2:3b:3b:b7:2a:9d:a1:a8:
17:87:69:e8:e4:22:0f:94:4e:0c:ca:97:40:15:20:
d3:fc:2a:ed:1c:b0:3c:20:dc:09:98:39:57:13:da:
fe:7d:db:6c:d2:76:ca:74:b0:26:df:41:19:77:a6:
3e:ae:89:4f:e0:e8:79:79:b0:01:c3:55:79:da:67:
bf:7e:5f:09:fc:9c:63:65:1a:96:a9:56:e3:50:db:
53:d4:f2:fd:9b:14:e8:f8:d9:65:7a:98:1b:1d:09:
69:ea:f1:a9:3f:30:79:e9:b9:4a:18:00:55:e6:4a:
a9:7e:d7:23:61:94:87:54:75:5f:64:be:b4:68:ee:
4b:b4:64:e8:0c:cf:5e:03:6e:cd:93:b1:2e:3d:99:
84:30:17:b8:77:48:f3:23:a5:61:e2:4c:8b:4a:e3:
54:c7:b8:44:bc:7f:79:12:bb:42:1e:c1:87:40:5f:
5a:7f:ea:3a:8a:3c:16:4f:2f:dc:ee:4f:c7:02:55:
cd:d2:29:3f:c8:d9:b0:89:67:3a:9d:df:ef:b4:21:
71:2b:d8:67:0e:6f:b1:ea:35:0e:48:cf:92:d6:02:
e9:05:f0:24:d2:9a:be:02:37:bb:29:12:f6:cd:b1:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:CB:F9:AB:56:2A:A7:FF:65:0E:C8:14:70:2B:13:FF:04:23:19
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:fd:ca:4d:b3:e9:95:fc:01:00:3f:ac:44:d3:5b:45:7a:
06:cc:65:c7:df:ac:67:4b:d6:3d:b0:3f:01:a0:26:44:28:34:
89:f8:c0:1c:3b:4a:91:9a:6b:47:c4:1f:0c:33:a5:6f:5d:20:
81:a5:e7:26:fc:6b:19:26:bd:88:dd:8f:8f:08:42:db:b8:cb:
1a:5f:69:25:74:4f:72:12:32:a1:2f:a1:3d:9d:68:98:b6:28:
6e:4b:2f:7e:8f:6a:4a:e1:5c:d2:04:65:80:29:aa:6b:8a:56:
4e:3a:5d:a5:31:ba:e9:63:d7:04:ad:8f:f6:ea:40:07:da:1a:
65:9b:e4:8b:00:e9:e4:57:9a:0c:31:9a:30:18:a8:17:52:af:
e6:01:66:9b:1a:06:7f:f2:ff:8f:d9:44:97:22:9e:08:3c:17:
2e:8d:b0:b3:53:70:e7:59:fb:a1:68:74:da:00:79:e6:5f:73:
33:c2:f9:d8:76:07:4a:39:c0:29:b8:91:54:25:12:25:b3:2d:
3d:1b:4e:ba:c0:86:2a:ef:8b:ad:9c:96:e0:4d:a0:69:b8:bc:
9b:45:6b:ee:49:d5:f8:57:1d:59:99:43:cc:cb:4f:fd:6c:6f:
31:26:e9:1c:e9:f4:a6:fa:2b:3b:64:7d:99:69:94:9c:4d:44:
6a:5a:26:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxs70pZ8dCjQ2bLRGIR/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl
M2I0NjIwHhcNMjYwMzAxMTkwMTIxWhcNMjYwMzAyMTkwMTIxWjAzMTEwLwYDVQQD
Eyg0ZDdmY2JmOWFiNTYyYWE3ZmY2NTBlYzgxNDcwMmIxM2ZmMDQyMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSHJOLT2Apd5wRGLy1DWL85Qors4
0js7tyqdoagXh2no5CIPlE4MypdAFSDT/CrtHLA8INwJmDlXE9r+fdts0nbKdLAm
30EZd6Y+rolP4Oh5ebABw1V52me/fl8J/JxjZRqWqVbjUNtT1PL9mxTo+Nllepgb
HQlp6vGpPzB56blKGABV5kqpftcjYZSHVHVfZL60aO5LtGToDM9eA27Nk7EuPZmE
MBe4d0jzI6Vh4kyLSuNUx7hEvH95ErtCHsGHQF9af+o6ijwWTy/c7k/HAlXN0ik/
yNmwiWc6nd/vtCFxK9hnDm+x6jUOSM+S1gLpBfAk0pq+Aje7KRL2zbH/JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1/y/mrViqn/2UOyBRwKxP/BCMZMB8GA1UdIwQY
MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt
MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1
LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWr9yk2z
6ZX8AQA/rETTW0V6Bsxlx9+sZ0vWPbA/AaAmRCg0ifjAHDtKkZprR8QfDDOlb10g
gaXnJvxrGSa9iN2PjwhC27jLGl9pJXRPchIyoS+hPZ1omLYobksvfo9qSuFc0gRl
gCmqa4pWTjpdpTG66WPXBK2P9upAB9oaZZvkiwDp5FeaDDGaMBioF1Kv5gFmmxoG
f/L/j9lElyKeCDwXLo2ws1Nw51n7oWh02gB55l9zM8L52HYHSjnAKbiRVCUSJbMt
PRtOusCGKu+LrZyW4E2gabi8m0Vr7knV+FcdWZlDzMtP/WxvMSbpHOn0pvorO2R9
mWmUnE1EalomkQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:43 2026 by rpki-client