Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: 2+kyymyEXqPZz/hA+XSRuk+lIp09GMuJKULo6ZsujHA=
Subject key identifier: BC:1C:6E:84:DA:D5:67:B7:53:86:8A:98:FB:BF:F5:7E:7E:16:C2:D5
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 019CABD9F532BDBE10E4B62169CD7D1141B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 0CBC
Signing time: Mon 02 Mar 2026 00:01:53 +0000
Manifest this update: Mon 02 Mar 2026 00:01:53 +0000
Manifest next update: Tue 03 Mar 2026 00:01:53 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: Kgo8sp1QUz1TTOkw7UauTR9nnqPJWc1JD2Ou3bSNgWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f5:32:bd:be:10:e4:b6:21:69:cd:7d:11:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Mar 2 00:01:53 2026 GMT
Not After : Mar 3 00:01:53 2026 GMT
Subject: CN=bc1c6e84dad567b753868a98fbbff57e7e16c2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:f0:36:e8:f8:e1:99:9d:1f:33:d4:53:69:
d7:de:f6:9a:5f:6c:85:60:03:de:2b:43:0a:40:6a:
06:3e:17:9a:bb:0d:fb:00:ac:83:62:b4:7d:d1:e4:
e6:8f:b1:af:91:9f:2a:59:ef:32:a5:2c:35:4e:03:
59:d3:ce:96:75:e7:22:1f:c7:62:00:5b:dd:85:25:
b3:3e:e9:48:40:41:15:fb:ea:66:b5:a7:fe:c6:23:
aa:23:89:05:2a:1b:91:5d:c1:30:d9:3d:c3:a3:33:
19:51:6c:75:ee:ca:b7:d9:a7:16:5f:49:1b:71:b8:
d5:59:d5:34:d5:6d:bb:09:91:cf:79:ff:f3:5b:5c:
67:ec:63:b5:41:38:7c:80:8a:aa:cb:2d:80:c9:f8:
6c:e4:3c:a9:46:06:28:35:c4:c7:aa:5f:e3:c0:5d:
a3:28:77:ed:3a:40:55:c1:21:13:27:12:29:ec:81:
80:4e:b7:0d:47:5d:b0:48:06:33:c3:2e:a6:4e:6e:
2a:4d:f4:78:56:7e:4e:44:98:d8:27:73:ad:d4:13:
e7:f2:b7:2b:aa:5e:a0:ea:17:8e:d9:55:a0:e4:ca:
0a:80:90:c8:06:93:4e:0d:ea:2d:83:f7:01:4e:00:
d4:61:98:ee:89:c7:17:ec:df:de:4a:00:c5:36:60:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:6E:84:DA:D5:67:B7:53:86:8A:98:FB:BF:F5:7E:7E:16:C2:D5
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:59:d7:86:54:ac:91:b9:0b:6e:1c:f4:46:5e:1f:4f:a9:c6:
6d:f8:15:46:c2:66:8a:98:e9:68:88:ed:cc:fe:80:aa:44:3f:
25:af:cf:4c:85:6b:b1:6b:74:b8:43:08:16:a2:ae:49:6e:84:
d5:a2:bc:4a:33:68:ac:42:2f:44:bd:b2:04:b4:ba:49:b9:12:
2c:e9:ee:6f:a5:52:ab:2f:d6:34:9c:5d:fe:41:1b:0a:78:15:
cb:07:fb:e2:f7:da:af:ff:5b:5d:fa:6d:c6:e2:c9:e7:b8:06:
bb:29:b0:01:a1:41:e9:da:e0:9d:10:e0:8c:ef:9f:e5:52:7c:
2d:7f:6c:00:1f:53:a9:52:ed:1b:77:fc:7d:f2:b0:9c:d4:37:
d6:3a:12:64:8a:3b:18:75:89:5e:f5:8d:09:30:c5:24:c5:bd:
aa:7a:96:7a:b6:7b:d9:82:70:b6:b9:30:8f:9e:70:fc:95:38:
0d:dc:dd:3c:bb:f9:f1:83:e4:ea:46:35:0a:23:8c:0b:10:b1:
32:0d:a0:5a:b8:92:7e:2e:45:78:d8:cf:92:0a:2b:9b:3f:0d:
c0:a2:8f:dd:33:35:34:a7:7a:1f:e8:21:b8:32:bb:45:d0:18:
44:ff:b7:39:70:02:18:49:fe:89:c5:d1:a2:57:28:9b:47:56:
db:d8:42:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fUyvb4Q5LYhac19EUG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODIzYWRkZGY2YzM1ZjA1YjdjMWNhZTA3OTA0YmZmOWYy
ZjZhY2IwHhcNMjYwMzAyMDAwMTUzWhcNMjYwMzAzMDAwMTUzWjAzMTEwLwYDVQQD
EyhiYzFjNmU4NGRhZDU2N2I3NTM4NjhhOThmYmJmZjU3ZTdlMTZjMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSDwNuj44ZmdHzPUU2nX3vaaX2yF
YAPeK0MKQGoGPheauw37AKyDYrR90eTmj7GvkZ8qWe8ypSw1TgNZ086WdeciH8di
AFvdhSWzPulIQEEV++pmtaf+xiOqI4kFKhuRXcEw2T3DozMZUWx17sq32acWX0kb
cbjVWdU01W27CZHPef/zW1xn7GO1QTh8gIqqyy2Ayfhs5DypRgYoNcTHql/jwF2j
KHftOkBVwSETJxIp7IGATrcNR12wSAYzwy6mTm4qTfR4Vn5ORJjYJ3Ot1BPn8rcr
ql6g6heO2VWg5MoKgJDIBpNODeotg/cBTgDUYZjuiccX7N/eSgDFNmC5NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwcboTa1We3U4aKmPu/9X5+FsLVMB8GA1UdIwQY
MBaAFKmCOt3fbDXwW3wcrgeQS/+fL2rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAt
MzZkNGQ3ZjA3YzhhLzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAtMzZkNGQ3ZjA3Yzhh
LzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlnXhlSs
kbkLbhz0Rl4fT6nGbfgVRsJmipjpaIjtzP6AqkQ/Ja/PTIVrsWt0uEMIFqKuSW6E
1aK8SjNorEIvRL2yBLS6SbkSLOnub6VSqy/WNJxd/kEbCngVywf74vfar/9bXfpt
xuLJ57gGuymwAaFB6drgnRDgjO+f5VJ8LX9sAB9TqVLtG3f8ffKwnNQ31joSZIo7
GHWJXvWNCTDFJMW9qnqWerZ72YJwtrkwj55w/JU4DdzdPLv58YPk6kY1CiOMCxCx
Mg2gWriSfi5FeNjPkgormz8NwKKP3TM1NKd6H+ghuDK7RdAYRP+3OXACGEn+icXR
olcom0dW29hCCw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:06:35 2026 by rpki-client