Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: yCT37fXoXLSjJAqG33XeIfSud1WXkKeNNRlHW5lvmZ4=
Subject key identifier: C5:DC:6E:44:A4:BF:E4:DB:6D:C6:20:D5:7F:A1:5C:B2:C0:D6:9A:B4
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019CABD9E47C4AC110B9DF58839DD4C2D924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0F06
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: gwyQu98k4s0mmg2vPfMQAk6HN2qfKqXxBgzb57hboC8=)
2: pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa (hash: mTXSXjoGjQ2auSz+bUbQx6Ihly9Sl/4nc+Gp/ABHXAA=)
3: qV4gR6WxquLOT56bwfJU7xHJRNM.roa (hash: n0V/wW/NrF8CEjksLZ9W1qLNO23nhbEeWjftcQzvrnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e4:7c:4a:c1:10:b9:df:58:83:9d:d4:c2:d9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=c5dc6e44a4bfe4db6dc620d57fa15cb2c0d69ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:00:90:3a:cf:58:22:d8:d4:be:63:6b:df:
97:48:52:9a:ce:23:55:0d:83:dc:bb:af:85:19:d7:
ee:30:f0:28:46:a6:4b:80:7d:33:d2:c6:af:a2:db:
82:21:3f:b5:49:3e:a6:3a:fc:37:bc:65:e1:a4:e5:
f2:c2:59:55:26:92:b3:0a:16:60:28:fc:99:4f:44:
7d:fe:78:0c:65:31:5a:9c:47:06:53:91:3b:12:d0:
e2:dc:ef:0f:aa:0b:9f:c8:02:71:25:bf:d1:63:f2:
ff:2f:9b:db:60:dd:aa:a7:b7:57:ef:f7:14:8b:d4:
d6:40:8d:54:fb:07:b6:79:ae:1d:13:2a:cd:a5:e6:
0e:47:c2:b8:5e:b3:44:41:0f:c6:1a:c8:1f:fd:c0:
f7:de:0d:ce:76:30:67:d0:47:fc:89:77:c5:ca:f2:
12:ab:1d:fc:47:48:d5:1b:69:d8:30:4a:8b:37:37:
19:7a:75:65:28:a7:c6:ec:85:f1:d7:1c:fb:5f:3e:
c5:ce:32:21:e5:d3:03:0f:e1:da:bd:57:62:34:b1:
4e:27:04:1b:bd:4b:3f:ee:71:60:88:84:67:a3:fd:
0e:72:f3:31:31:5b:69:ac:46:4a:2c:2b:0c:f2:41:
1f:64:b2:b8:b8:0e:39:a3:dc:39:e5:3a:c0:30:15:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:6E:44:A4:BF:E4:DB:6D:C6:20:D5:7F:A1:5C:B2:C0:D6:9A:B4
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3d:13:ed:78:d1:88:26:7a:58:4e:89:a3:98:7b:68:2a:d5:
7a:1d:a3:40:db:3b:33:da:ce:48:66:6e:ec:da:c5:12:4c:81:
49:70:6d:5c:2c:ad:b6:25:9d:a8:28:e4:38:dd:e1:51:0a:10:
50:ad:2f:3d:0a:ec:8f:16:bd:1f:66:78:fe:26:29:60:3c:1f:
9d:c4:28:28:56:70:22:8e:54:cc:99:2c:cd:a8:c4:b3:1f:31:
05:ed:d1:c1:82:2d:be:7a:3f:f6:e4:3c:25:60:a2:73:4c:64:
3f:71:bd:42:9e:dc:71:f4:e8:aa:88:43:ba:25:ee:e7:e5:42:
26:46:c0:36:c6:f7:ff:1b:8c:a8:79:8a:c3:75:f7:86:a8:63:
7f:46:91:c6:62:e6:4a:13:28:d9:d2:64:8a:ce:3b:5e:d4:9a:
f8:17:dc:98:f5:e4:7d:7e:39:51:e4:f9:8e:af:2f:06:4b:4a:
8f:ef:43:37:99:cb:15:b2:80:5d:b3:9d:3d:65:14:20:ed:81:
b8:d6:36:0e:51:b7:2f:57:ad:29:be:84:e0:bd:cf:b0:95:31:
7e:8b:3c:46:3b:fa:ca:40:49:a3:21:7c:b3:14:c1:9d:76:ee:
68:b2:e6:31:2e:88:6c:8e:59:dc:84:0b:5c:34:0c:6f:f9:85:
d7:68:c3:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2eR8SsEQud9Yg53UwtkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTk1MjA0Njc3MGY1NGU4YmUxZmQ3ZDY3MzEzMjI2NWFk
NzBmYTgwHhcNMjYwMzAyMDAwMTQ5WhcNMjYwMzAzMDAwMTQ5WjAzMTEwLwYDVQQD
EyhjNWRjNmU0NGE0YmZlNGRiNmRjNjIwZDU3ZmExNWNiMmMwZDY5YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSIAkDrPWCLY1L5ja9+XSFKaziNV
DYPcu6+FGdfuMPAoRqZLgH0z0savotuCIT+1ST6mOvw3vGXhpOXywllVJpKzChZg
KPyZT0R9/ngMZTFanEcGU5E7EtDi3O8PqgufyAJxJb/RY/L/L5vbYN2qp7dX7/cU
i9TWQI1U+we2ea4dEyrNpeYOR8K4XrNEQQ/GGsgf/cD33g3OdjBn0Ef8iXfFyvIS
qx38R0jVG2nYMEqLNzcZenVlKKfG7IXx1xz7Xz7FzjIh5dMDD+HavVdiNLFOJwQb
vUs/7nFgiIRno/0OcvMxMVtprEZKLCsM8kEfZLK4uA45o9w55TrAMBXp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXcbkSkv+TbbcYg1X+hXLLA1pq0MB8GA1UdIwQY
MBaAFEEZUgRncPVOi+H9fWcxMiZa1w+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUt
OGI5MWJjNjFlN2MzLzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUtOGI5MWJjNjFlN2Mz
LzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuz0T7XjR
iCZ6WE6Jo5h7aCrVeh2jQNs7M9rOSGZu7NrFEkyBSXBtXCyttiWdqCjkON3hUQoQ
UK0vPQrsjxa9H2Z4/iYpYDwfncQoKFZwIo5UzJkszajEsx8xBe3RwYItvno/9uQ8
JWCic0xkP3G9Qp7ccfToqohDuiXu5+VCJkbANsb3/xuMqHmKw3X3hqhjf0aRxmLm
ShMo2dJkis47XtSa+BfcmPXkfX45UeT5jq8vBktKj+9DN5nLFbKAXbOdPWUUIO2B
uNY2DlG3L1etKb6E4L3PsJUxfos8Rjv6ykBJoyF8sxTBnXbuaLLmMS6IbI5Z3IQL
XDQMb/mF12jDQg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:02 2026 by rpki-client