Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: 7X9YyJDnWogZp4vYmwGMLRGRfJLyuJZjIPBKu2mpyQ4=
Subject key identifier: 2C:20:4F:E5:84:BC:55:DD:FC:93:CC:B8:F9:31:0D:26:C6:11:A2:B0
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 019D9962FA1B9CF1D6A5CD30696ECF771F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0CCF
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: djRgbhjJA4gNL23AI/0cAsDeO7xY1/5CCCdOhTnGsFs=)
2: nPnN-mV_c2-YF1lYIozKulfXb-I.roa (hash: Vt2SDSHBDDSYSW6xQWsdmfz8p7B5Lt8QbmhuE6bmJeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:fa:1b:9c:f1:d6:a5:cd:30:69:6e:cf:77:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=2c204fe584bc55ddfc93ccb8f9310d26c611a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:0f:ef:da:e1:98:c8:0e:8d:34:85:c1:06:
3a:ff:8c:66:fc:f7:5e:79:81:21:71:a0:2a:f3:06:
99:b2:ac:2a:6a:fb:9e:09:e8:2c:63:69:3b:96:14:
ec:12:7e:af:45:89:ee:8a:78:89:f0:87:6e:f4:35:
d5:5b:51:c7:27:fb:8a:1e:e5:84:6a:a2:59:28:e3:
7a:5e:df:d1:be:bc:c3:03:6e:c1:f0:02:ba:74:a8:
5e:e7:6a:d3:5c:23:21:c7:09:45:e7:25:7c:8e:c5:
24:01:9c:6d:ab:35:4d:da:8b:b6:d6:d0:19:e9:2d:
ff:ce:40:cd:06:37:c0:b8:4a:2b:a5:ad:e9:f3:ea:
e2:16:79:8b:1c:eb:c9:37:f4:41:32:92:25:47:d6:
41:1b:07:f8:46:37:4d:05:bd:d6:67:14:12:ad:89:
75:15:94:ec:9a:6c:40:3a:2e:f6:0a:a1:b0:58:01:
c8:3a:0a:96:e7:65:e5:41:31:51:e7:de:d1:7d:e5:
3b:92:22:4a:ad:4d:bb:7e:88:1d:29:e1:f0:55:d6:
51:5b:dc:13:f6:54:02:b5:ce:7e:78:80:92:2b:c8:
df:1f:1d:85:a0:bd:c3:76:e0:bc:d1:52:9b:6e:71:
68:a6:08:17:30:32:3b:e5:55:0d:f0:91:33:bf:d7:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:20:4F:E5:84:BC:55:DD:FC:93:CC:B8:F9:31:0D:26:C6:11:A2:B0
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:54:76:8b:d3:9a:3a:be:4a:80:cb:a7:4c:20:83:1d:ca:5d:
d9:66:59:fe:73:76:a7:6b:72:b5:da:d3:39:e9:db:76:bb:20:
a7:88:f1:cd:6d:d5:a6:16:3c:0a:3b:35:fb:ab:38:0e:1f:bf:
7f:04:7b:4e:15:91:ed:28:b6:61:63:08:3e:7e:96:fd:63:f2:
78:05:78:ea:74:37:19:6e:f1:70:45:a9:54:d0:b3:e6:b3:0b:
27:6a:cc:98:19:b0:0f:cd:d2:d5:e6:72:32:ff:b9:83:79:0e:
e1:d9:9d:05:ca:52:ac:b2:0f:8f:bc:49:e2:d5:eb:a6:64:5d:
1f:81:a0:09:96:3f:bd:11:80:3a:bd:88:83:74:3f:f2:bf:f2:
60:b7:68:e3:08:41:8b:81:08:a5:ef:9e:e5:75:80:05:ff:b8:
f9:de:36:41:af:20:4d:36:c4:7b:71:1e:8d:22:8d:71:9e:88:
73:5f:c1:44:29:4d:e2:90:29:d7:ff:64:4e:02:24:bf:78:76:
27:39:4c:f4:97:c0:98:31:b4:c1:dc:e9:07:f4:ad:98:01:b8:
83:a6:a2:6c:84:45:0d:6f:0e:61:a1:b8:94:a7:b9:5c:d7:81:
6d:cd:c0:80:10:86:3f:6d:7c:ac:99:c5:b7:6e:03:af:9c:64:
a1:2d:51:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYvobnPHWpc0waW7Pdx8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDA1MTYxM2QzY2M2YjNlYjgxZDViYjQwMGFlMGQ0ZTI0
MTJjODAwHhcNMjYwNDE3MDMwMTMzWhcNMjYwNDE4MDMwMTMzWjAzMTEwLwYDVQQD
EygyYzIwNGZlNTg0YmM1NWRkZmM5M2NjYjhmOTMxMGQyNmM2MTFhMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvgP79rhmMgOjTSFwQY6/4xm/Pde
eYEhcaAq8waZsqwqavueCegsY2k7lhTsEn6vRYnuiniJ8Idu9DXVW1HHJ/uKHuWE
aqJZKON6Xt/RvrzDA27B8AK6dKhe52rTXCMhxwlF5yV8jsUkAZxtqzVN2ou21tAZ
6S3/zkDNBjfAuEorpa3p8+riFnmLHOvJN/RBMpIlR9ZBGwf4RjdNBb3WZxQSrYl1
FZTsmmxAOi72CqGwWAHIOgqW52XlQTFR597RfeU7kiJKrU27fogdKeHwVdZRW9wT
9lQCtc5+eICSK8jfHx2FoL3DduC80VKbbnFopggXMDI75VUN8JEzv9eHVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwgT+WEvFXd/JPMuPkxDSbGEaKwMB8GA1UdIwQY
MBaAFNUAUWE9PMaz64HVu0AK4NTiQSyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTIt
MjI1ZDhhZGZlOGJiLzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTItMjI1ZDhhZGZlOGJi
LzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1R2i9Oa
Or5KgMunTCCDHcpd2WZZ/nN2p2tytdrTOenbdrsgp4jxzW3VphY8Cjs1+6s4Dh+/
fwR7ThWR7Si2YWMIPn6W/WPyeAV46nQ3GW7xcEWpVNCz5rMLJ2rMmBmwD83S1eZy
Mv+5g3kO4dmdBcpSrLIPj7xJ4tXrpmRdH4GgCZY/vRGAOr2Ig3Q/8r/yYLdo4whB
i4EIpe+e5XWABf+4+d42Qa8gTTbEe3EejSKNcZ6Ic1/BRClN4pAp1/9kTgIkv3h2
JzlM9JfAmDG0wdzpB/StmAG4g6aibIRFDW8OYaG4lKe5XNeBbc3AgBCGP218rJnF
t24Dr5xkoS1Rsw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:10 2026 by rpki-client