Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: fcy5CfteOZPZO18NEoo3xw4g+OpjtveMH9PFHq4gVaU=
Subject key identifier: AF:62:E2:00:A4:04:36:2F:43:E2:65:39:2B:09:6B:C2:84:AB:36:D0
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019D9A3EBE71B552D09411790C790DCB3DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 05AE
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: MvFJtDjOYO9GPorafA0ua2i+OiprRSq78WhtOzgz9TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:be:71:b5:52:d0:94:11:79:0c:79:0d:cb:3d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=af62e200a404362f43e265392b096bc284ab36d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:d8:f2:87:12:85:a3:0a:be:8b:13:89:ce:
66:7b:2c:58:30:9d:0d:10:61:c6:1a:47:90:15:92:
01:66:5e:5b:cd:35:2a:c7:2e:e5:e7:6b:0d:c6:63:
85:d1:4c:56:10:c2:80:ae:f0:ab:30:d5:9c:25:5e:
bd:b8:85:7f:39:a3:c9:cf:c9:87:45:96:4b:17:c2:
05:30:1c:c4:87:11:d7:c2:42:77:2b:02:d8:60:22:
87:6e:27:ab:fb:e3:ae:6f:80:e9:dd:31:0c:34:ed:
94:24:aa:6c:77:12:34:51:8f:0a:8b:ce:34:03:82:
23:62:de:89:13:e8:7e:30:13:2d:31:62:5b:f0:44:
f0:84:17:59:15:3a:45:78:5c:9a:af:75:7e:a1:7a:
29:4c:98:81:f0:83:ec:d2:57:93:19:bb:5e:3b:de:
9c:6b:80:fa:b9:51:53:44:85:59:94:a1:1f:9d:39:
f1:7a:80:8a:23:3a:85:f9:a4:1a:ff:e0:2a:c4:fd:
45:1c:75:de:6d:19:5a:69:15:1e:77:9b:49:74:61:
d8:9a:bc:73:d5:5b:3b:2e:80:e0:dc:47:c1:b3:85:
e5:47:86:a0:41:dd:59:61:7b:06:0f:0f:96:b8:83:
6d:af:e5:8b:08:aa:85:03:e7:55:64:61:6f:1c:b9:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:62:E2:00:A4:04:36:2F:43:E2:65:39:2B:09:6B:C2:84:AB:36:D0
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f4:49:a3:bb:1a:bc:3b:e8:58:94:e0:0d:64:d5:70:ff:99:
99:b9:7e:37:d4:0a:66:95:b3:f8:a0:b2:5b:06:92:ce:33:2a:
e4:c7:60:98:2e:4e:2c:7b:0c:8b:cc:c1:93:cf:0f:8d:47:8b:
74:ef:23:15:0c:ad:d5:84:3e:1d:e2:17:84:d9:9b:fe:c0:37:
4e:6c:13:c7:16:3d:9d:2d:bf:b3:51:d7:ff:37:36:9e:51:c6:
e7:20:24:45:bf:99:d9:5e:68:27:38:7f:1c:63:32:90:b2:1e:
6c:4c:8b:18:cf:24:95:bf:d6:2b:40:0e:f2:bf:18:2c:1e:0a:
f1:bb:ea:d2:ca:6a:7f:35:ca:d3:6d:bc:25:a2:1e:2c:21:cb:
94:24:b4:e1:f2:14:b5:04:8e:7b:7b:30:3d:2c:67:c2:ef:91:
3b:8c:d5:3f:98:3c:68:08:6a:88:4d:aa:f2:ce:4d:24:74:c7:
1b:a6:4f:54:d0:b4:d3:d7:c1:b6:e6:f5:8a:76:9e:d4:7b:e4:
f7:59:2d:b5:a0:e1:83:fa:c6:82:3f:5b:9b:ea:4d:86:d6:52:
c5:ad:bf:67:7e:99:9e:b7:61:f0:c2:fb:e6:04:64:6b:fd:e8:
68:75:16:23:dc:84:7a:97:65:ba:ab:49:d7:0e:1a:da:54:8f:
c4:80:50:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPr5xtVLQlBF5DHkNyz3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5
ZDRkOWEwHhcNMjYwNDE3MDcwMTM2WhcNMjYwNDE4MDcwMTM2WjAzMTEwLwYDVQQD
EyhhZjYyZTIwMGE0MDQzNjJmNDNlMjY1MzkyYjA5NmJjMjg0YWIzNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7LY8ocShaMKvosTic5meyxYMJ0N
EGHGGkeQFZIBZl5bzTUqxy7l52sNxmOF0UxWEMKArvCrMNWcJV69uIV/OaPJz8mH
RZZLF8IFMBzEhxHXwkJ3KwLYYCKHbier++Oub4Dp3TEMNO2UJKpsdxI0UY8Ki840
A4IjYt6JE+h+MBMtMWJb8ETwhBdZFTpFeFyar3V+oXopTJiB8IPs0leTGbteO96c
a4D6uVFTRIVZlKEfnTnxeoCKIzqF+aQa/+AqxP1FHHXebRlaaRUed5tJdGHYmrxz
1Vs7LoDg3EfBs4XlR4agQd1ZYXsGDw+WuINtr+WLCKqFA+dVZGFvHLnxuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9i4gCkBDYvQ+JlOSsJa8KEqzbQMB8GA1UdIwQY
MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt
YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0
LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfRJo7sa
vDvoWJTgDWTVcP+Zmbl+N9QKZpWz+KCyWwaSzjMq5MdgmC5OLHsMi8zBk88PjUeL
dO8jFQyt1YQ+HeIXhNmb/sA3TmwTxxY9nS2/s1HX/zc2nlHG5yAkRb+Z2V5oJzh/
HGMykLIebEyLGM8klb/WK0AO8r8YLB4K8bvq0spqfzXK0228JaIeLCHLlCS04fIU
tQSOe3swPSxnwu+RO4zVP5g8aAhqiE2q8s5NJHTHG6ZPVNC009fBtub1inae1Hvk
91kttaDhg/rGgj9bm+pNhtZSxa2/Z36Znrdh8ML75gRka/3oaHUWI9yEepdluqtJ
1w4a2lSPxIBQog==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:29 2026 by rpki-client