Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: z3AFsVU8jPUxoOyJnGuPT2tBuGFtmUfXVZLKi5etXf8=
Subject key identifier: B8:0F:1D:40:C2:27:63:94:4C:02:0F:C2:93:AE:BB:BB:E5:02:CD:BC
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 019CA9B3B71D932D881177BE3C28BBC96F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 1415
Signing time: Sun 01 Mar 2026 14:00:53 +0000
Manifest this update: Sun 01 Mar 2026 14:00:53 +0000
Manifest next update: Mon 02 Mar 2026 14:00:53 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: +Bq4xB9JflYxwQ3Ta7jj9BkGA4B94gjPg1Gtn8NqSAM=)
2: t87-StaNkWoIrvxpm-LKJGpGKeM.roa (hash: r4gMZM/MRHYsjQV9QPuG6dWd9zz5OkmUPJF3gcNO56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:b7:1d:93:2d:88:11:77:be:3c:28:bb:c9:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Mar 1 14:00:53 2026 GMT
Not After : Mar 2 14:00:53 2026 GMT
Subject: CN=b80f1d40c22763944c020fc293aebbbbe502cdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:ee:ca:3d:fa:f9:cd:f4:2b:11:56:dd:b0:
3c:e5:2a:d6:7f:e2:d0:a4:1f:fc:9c:bd:18:15:82:
79:48:76:9a:a0:e3:c8:e2:04:cb:ec:77:70:be:89:
0e:6d:04:ef:29:51:90:eb:2f:ba:b4:d2:ce:4d:3d:
3e:a7:60:2c:24:18:3c:4d:bb:6e:cd:5b:21:cb:ce:
94:ae:ea:8a:cc:5a:eb:a1:53:09:e3:6b:5b:22:7c:
aa:58:72:f1:1b:78:d5:0b:b3:48:ee:bf:41:c4:3b:
21:26:77:fe:e3:dc:52:bf:f4:91:83:bb:05:a6:28:
56:93:2c:9a:44:85:9d:e9:96:bd:2f:e9:c3:56:48:
21:15:ae:d6:6e:71:e5:bd:1c:20:7c:20:a9:8b:53:
12:7a:f0:2c:22:75:93:e1:37:87:37:75:3c:4a:28:
f5:fb:57:f7:f8:ab:51:ca:11:3c:ac:27:8d:af:b2:
da:62:b4:38:13:fd:7b:36:80:c6:3e:ff:57:68:9c:
63:d6:ec:c5:74:be:bd:76:f2:4c:26:51:81:04:f2:
8b:78:7d:ce:9b:4f:97:85:06:32:37:31:a8:da:99:
40:07:2a:35:2c:26:eb:c4:99:85:03:16:ff:cf:82:
bc:e1:99:be:0d:2b:4f:59:d2:b6:ab:df:07:ac:c2:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:1D:40:C2:27:63:94:4C:02:0F:C2:93:AE:BB:BB:E5:02:CD:BC
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:81:b3:15:b0:b8:8d:85:d8:27:9c:42:1a:fa:d3:b1:c9:
37:ba:cc:34:9d:1e:37:49:d9:2a:a3:1d:5a:98:a2:91:28:3d:
ae:e2:ae:bc:cf:31:95:c6:e9:81:35:c0:59:15:5f:00:3f:80:
dd:a9:89:6e:95:a4:ff:e9:09:00:4b:0d:e3:1b:95:46:1a:e6:
22:3b:a4:ef:16:d5:de:79:77:56:07:f3:7e:07:39:9c:42:ae:
59:6d:cc:1d:aa:90:0f:cd:7b:0a:32:80:0a:42:e8:dc:86:1a:
e9:9c:ec:56:90:3a:24:2b:91:bd:05:e6:06:4a:30:6c:1b:ac:
ef:41:da:d6:d8:b9:28:48:0f:71:b9:d0:dc:a4:cf:ff:3a:83:
4c:3e:cc:79:cc:88:37:a8:d0:91:2e:60:16:68:37:6a:09:b8:
cf:b4:62:43:1c:e3:ff:3a:ae:db:09:9d:40:89:f1:a6:94:b1:
85:69:66:7b:d8:85:9b:43:75:24:de:e1:0c:bf:14:bc:35:b6:
b0:8c:f9:3f:82:7c:35:29:e9:28:8f:67:8d:a7:c1:bd:82:ba:
22:87:1c:b4:44:26:76:ad:b1:61:43:2b:ba:d6:80:b7:ba:ff:
ad:15:62:b9:0d:40:66:0f:33:ae:a6:77:47:a1:27:3a:b7:4c:
d3:16:3c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps7cdky2IEXe+PCi7yW8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGM5NmI5MmI2YzY5OGZkMzRmYWM3ZDU4MWQ0YzA5MDhk
Y2NlOTkwHhcNMjYwMzAxMTQwMDUzWhcNMjYwMzAyMTQwMDUzWjAzMTEwLwYDVQQD
EyhiODBmMWQ0MGMyMjc2Mzk0NGMwMjBmYzI5M2FlYmJiYmU1MDJjZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT3uyj36+c30KxFW3bA85SrWf+LQ
pB/8nL0YFYJ5SHaaoOPI4gTL7HdwvokObQTvKVGQ6y+6tNLOTT0+p2AsJBg8Tbtu
zVshy86UruqKzFrroVMJ42tbInyqWHLxG3jVC7NI7r9BxDshJnf+49xSv/SRg7sF
pihWkyyaRIWd6Za9L+nDVkghFa7WbnHlvRwgfCCpi1MSevAsInWT4TeHN3U8Sij1
+1f3+KtRyhE8rCeNr7LaYrQ4E/17NoDGPv9XaJxj1uzFdL69dvJMJlGBBPKLeH3O
m0+XhQYyNzGo2plAByo1LCbrxJmFAxb/z4K84Zm+DStPWdK2q98HrMISCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgPHUDCJ2OUTAIPwpOuu7vlAs28MB8GA1UdIwQY
MBaAFECMlrkrbGmP00+sfVgdTAkI3M6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzct
NTZiYmYwYmVhZjQ3LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzctNTZiYmYwYmVhZjQ3
LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN+BsxWw
uI2F2CecQhr607HJN7rMNJ0eN0nZKqMdWpiikSg9ruKuvM8xlcbpgTXAWRVfAD+A
3amJbpWk/+kJAEsN4xuVRhrmIjuk7xbV3nl3Vgfzfgc5nEKuWW3MHaqQD817CjKA
CkLo3IYa6ZzsVpA6JCuRvQXmBkowbBus70Ha1ti5KEgPcbnQ3KTP/zqDTD7MecyI
N6jQkS5gFmg3agm4z7RiQxzj/zqu2wmdQInxppSxhWlme9iFm0N1JN7hDL8UvDW2
sIz5P4J8NSnpKI9njafBvYK6IocctEQmdq2xYUMrutaAt7r/rRViuQ1AZg8zrqZ3
R6EnOrdM0xY8XA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:45 2026 by rpki-client