Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 2Fu7dsj6vVLjRU429JNGMD5Q60VQRkkqGUnzImfIUSE=
Subject key identifier: D5:81:09:45:1E:72:F2:A7:E2:26:DE:F3:13:DF:FF:AE:27:DC:A0:EB
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019CABD96C0646F6AF0BD3F60F53381FEFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1695
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: F1DrbaOfaSz2KD26kVpONLM1KpJiU8M3P6XF2T+2jSY=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6c:06:46:f6:af:0b:d3:f6:0f:53:38:1f:ef:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=d58109451e72f2a7e226def313dfffae27dca0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ed:9f:2f:7b:6a:36:88:1c:ed:a5:23:15:ad:
5e:99:9b:e4:e3:0d:13:71:d7:9a:15:c9:d5:84:3c:
4d:56:9f:de:e4:d3:34:87:21:ba:16:45:d6:37:3a:
b4:0d:c0:2d:d0:58:23:0f:39:1c:7e:b4:d2:96:3e:
33:e1:87:e0:5d:86:2a:24:27:2e:02:66:34:00:b7:
e3:64:04:08:8d:63:1f:ac:91:8a:81:bc:73:fd:cd:
50:95:be:e1:09:66:73:13:aa:e6:9e:d7:a7:9a:e4:
13:78:af:34:b2:d6:eb:dc:ef:28:13:73:eb:71:90:
ce:43:29:63:56:17:8c:be:ab:0a:5a:47:55:35:42:
33:19:ea:1c:b4:6b:a3:2a:00:b0:92:cf:60:b6:44:
bb:58:d5:57:02:ff:7e:e4:f7:fc:dc:89:ae:e8:67:
39:f1:b0:39:a0:e5:ee:dc:b9:7a:c4:05:dc:5f:32:
f8:49:e1:b6:a4:c0:f9:f3:49:75:bc:10:b7:60:17:
5c:ee:87:37:c7:7a:ce:77:31:28:f9:5f:81:3f:2e:
bb:1a:e7:47:25:5a:b7:d9:98:05:1a:b9:b1:b9:e5:
f0:aa:6b:04:97:68:09:43:18:35:46:24:b2:f2:e3:
7f:b5:b9:db:ea:81:cb:f6:d3:ab:dd:2f:92:46:b0:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:09:45:1E:72:F2:A7:E2:26:DE:F3:13:DF:FF:AE:27:DC:A0:EB
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f8:9b:b4:a1:9c:87:81:b3:47:5a:bd:c4:26:e6:0b:e7:dd:
e8:26:08:12:3a:28:25:15:24:fc:41:d5:c4:b3:06:b6:fe:de:
37:d4:e1:15:32:b9:26:d3:d3:1c:06:82:f4:20:d6:da:e8:53:
08:46:ee:9c:e0:e0:c0:39:fc:8b:35:8e:3a:61:af:30:e6:4f:
af:cd:fc:cd:1b:55:c0:e9:f7:3d:da:85:6b:02:92:06:aa:99:
4c:10:9f:f3:38:bf:95:74:67:6e:c5:f9:c3:31:13:22:5e:a8:
aa:9e:f3:08:c0:0d:a7:90:46:2d:c6:3c:65:94:29:9d:85:97:
5f:d9:5c:21:fd:19:10:40:a8:1f:2e:e8:3c:e8:f7:ff:26:f5:
a8:42:10:7c:9e:5e:f2:11:0e:fb:1d:db:21:fe:aa:12:9f:f4:
07:0c:bb:30:35:2a:ff:da:c1:12:0f:6a:5f:e6:3d:43:2b:57:
af:d4:7d:1a:85:9c:dc:9e:2b:a9:b8:5c:8c:1b:75:f8:ce:54:
52:8a:11:5e:1d:f6:c2:fd:bd:0c:90:3d:86:c0:5c:e5:3b:35:
48:42:34:c2:ad:81:2e:d7:66:69:b1:1a:a9:bc:0f:22:47:52:
39:74:60:aa:8e:9b:cf:26:3c:50:02:c4:5d:5e:a7:74:83:2f:
b4:31:da:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2WwGRvavC9P2D1M4H+/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4
NjkxMDgwHhcNMjYwMzAyMDAwMTE4WhcNMjYwMzAzMDAwMTE4WjAzMTEwLwYDVQQD
EyhkNTgxMDk0NTFlNzJmMmE3ZTIyNmRlZjMxM2RmZmZhZTI3ZGNhMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+2fL3tqNogc7aUjFa1emZvk4w0T
cdeaFcnVhDxNVp/e5NM0hyG6FkXWNzq0DcAt0FgjDzkcfrTSlj4z4YfgXYYqJCcu
AmY0ALfjZAQIjWMfrJGKgbxz/c1Qlb7hCWZzE6rmntenmuQTeK80stbr3O8oE3Pr
cZDOQyljVheMvqsKWkdVNUIzGeoctGujKgCwks9gtkS7WNVXAv9+5Pf83Imu6Gc5
8bA5oOXu3Ll6xAXcXzL4SeG2pMD580l1vBC3YBdc7oc3x3rOdzEo+V+BPy67GudH
JVq32ZgFGrmxueXwqmsEl2gJQxg1RiSy8uN/tbnb6oHL9tOr3S+SRrC+fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWBCUUecvKn4ibe8xPf/64n3KDrMB8GA1UdIwQY
MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt
NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3
LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPibtKGc
h4GzR1q9xCbmC+fd6CYIEjooJRUk/EHVxLMGtv7eN9ThFTK5JtPTHAaC9CDW2uhT
CEbunODgwDn8izWOOmGvMOZPr838zRtVwOn3PdqFawKSBqqZTBCf8zi/lXRnbsX5
wzETIl6oqp7zCMANp5BGLcY8ZZQpnYWXX9lcIf0ZEECoHy7oPOj3/yb1qEIQfJ5e
8hEO+x3bIf6qEp/0Bwy7MDUq/9rBEg9qX+Y9QytXr9R9GoWc3J4rqbhcjBt1+M5U
UooRXh32wv29DJA9hsBc5Ts1SEI0wq2BLtdmabEaqbwPIkdSOXRgqo6bzyY8UALE
XV6ndIMvtDHaCA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:30 2026 by rpki-client