Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
File: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft (raw, json)
Hash identifier: 4dvGVFm8WGHYQMAIDrM45GXK670H8GaaHBsQYL9aAZ0=
Subject key identifier: C3:44:0C:FC:0B:05:7C:16:88:E4:E1:B0:6D:87:53:E2:C5:43:67:6B
Authority key identifier: 42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
Certificate issuer: /CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Certificate serial: 019CAC104220F97F8833157EB1E9E5AB2E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
Manifest number: 076A
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl (hash: UUj98rbnpZtVeDd7AEOxM/S4jrnG/ugbHL1526n0o3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:42:20:f9:7f:88:33:15:7e:b1:e9:e5:ab:2e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=c3440cfc0b057c1688e4e1b06d8753e2c543676b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:6c:be:2c:c7:f9:c1:26:ca:d6:30:01:21:
4e:68:9e:9c:de:3f:44:f9:bf:97:e6:95:06:b8:50:
bc:d6:07:c9:93:96:f6:ec:94:75:24:85:2d:88:f6:
93:77:bc:45:85:05:fa:83:b3:2a:0f:4b:ce:97:20:
be:66:b8:b8:43:6d:ca:be:c1:b4:59:34:a6:da:f9:
85:82:a4:b5:48:79:50:7a:a2:f6:57:67:fd:92:91:
bc:0c:29:b1:b4:bc:91:36:cd:c0:7e:2f:d2:11:e6:
70:74:8a:f1:d9:4d:32:25:27:3e:54:d0:d3:33:95:
dc:99:1b:3e:8c:57:53:7b:db:60:7c:fb:d4:1e:76:
5b:7a:92:44:da:0f:ab:b0:b3:e3:0a:6a:0a:37:5f:
48:b1:af:bb:38:99:66:fc:2f:f1:cc:ab:00:bf:ee:
57:0b:e1:e0:c7:e7:03:56:9b:cd:1e:de:72:80:f9:
5a:89:47:a2:bd:0b:b1:a3:fd:a6:15:0a:b3:7a:cb:
88:ac:1e:fa:37:5b:22:65:f8:f5:44:90:76:a1:2b:
18:4f:5e:56:29:12:4e:28:69:b8:17:92:a0:ba:0d:
ac:12:1c:56:8a:71:74:5a:35:03:25:86:04:5e:ef:
d3:b4:bf:46:46:42:c0:19:5d:6f:c7:0d:a4:70:e2:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:44:0C:FC:0B:05:7C:16:88:E4:E1:B0:6D:87:53:E2:C5:43:67:6B
X509v3 Authority Key Identifier:
keyid:42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:54:29:e3:b4:1f:a6:58:05:c0:9e:f4:7f:9c:19:63:c2:ab:
74:64:87:c5:b5:43:89:f5:8c:bf:4f:44:b6:48:a8:13:2c:61:
51:0c:14:0e:bd:a5:23:be:43:f7:91:bd:6b:e8:d1:4c:77:66:
05:f7:ea:94:25:3e:44:c0:8a:f5:9e:78:06:08:96:41:62:68:
ec:81:ca:ea:18:0b:ea:6f:a3:66:c9:6b:43:66:ed:32:1a:54:
42:6c:18:8e:6b:77:44:e9:7b:e8:a3:ce:7d:86:70:ce:34:24:
a2:8d:b2:b2:4f:95:93:ca:b0:da:a5:1e:29:1d:f5:95:29:5b:
71:4c:33:d9:7f:45:d6:4b:67:60:6e:87:ff:04:77:b2:f8:17:
2c:e5:7d:1d:fc:92:cb:d6:8d:29:a4:c8:7f:89:09:e7:bc:ba:
88:7b:24:f4:23:62:b8:d4:c1:53:45:fb:c4:c2:09:7e:b7:89:
d6:f3:3d:99:da:bf:e9:12:b2:67:85:57:75:4e:ea:64:ec:9a:
08:ae:0f:79:f6:1d:08:08:a9:71:5c:d4:6a:c2:67:3e:03:c4:
32:f5:06:88:97:b8:d5:38:8f:bd:c9:f0:0e:1a:f8:4e:3c:75:
3f:a9:ad:2e:65:8b:0e:03:6d:86:32:45:29:52:94:bb:77:a6:
46:d0:1f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEEIg+X+IMxV+senlqy4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTNiNTQ3MTk2NmMyNTYxMGQ5NWE1YTJmYTVjYzA2ZmM5
M2ZmNTcwHhcNMjYwMzAyMDEwMTEyWhcNMjYwMzAzMDEwMTEyWjAzMTEwLwYDVQQD
EyhjMzQ0MGNmYzBiMDU3YzE2ODhlNGUxYjA2ZDg3NTNlMmM1NDM2NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr35svizH+cEmytYwASFOaJ6c3j9E
+b+X5pUGuFC81gfJk5b27JR1JIUtiPaTd7xFhQX6g7MqD0vOlyC+Zri4Q23KvsG0
WTSm2vmFgqS1SHlQeqL2V2f9kpG8DCmxtLyRNs3Afi/SEeZwdIrx2U0yJSc+VNDT
M5XcmRs+jFdTe9tgfPvUHnZbepJE2g+rsLPjCmoKN19Isa+7OJlm/C/xzKsAv+5X
C+Hgx+cDVpvNHt5ygPlaiUeivQuxo/2mFQqzesuIrB76N1siZfj1RJB2oSsYT15W
KRJOKGm4F5Kgug2sEhxWinF0WjUDJYYEXu/TtL9GRkLAGV1vxw2kcOLa0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNEDPwLBXwWiOThsG2HU+LFQ2drMB8GA1UdIwQY
MBaAFEITtUcZZsJWENlaWi+lzAb8k/9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhPMVJ4bG13bFlRMlZwYUw2WE1CdnlUXzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wMDA0ODUtNzIxZi00ZDk3LWEwZjIt
NWJkYjJjNjAxMDJkLzEvUWhPMVJ4bG13bFlRMlZwYUw2WE1CdnlUXzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wMDA0ODUtNzIxZi00ZDk3LWEwZjItNWJkYjJjNjAxMDJk
LzEvUWhPMVJ4bG13bFlRMlZwYUw2WE1CdnlUXzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVQp47Qf
plgFwJ70f5wZY8KrdGSHxbVDifWMv09EtkioEyxhUQwUDr2lI75D95G9a+jRTHdm
BffqlCU+RMCK9Z54BgiWQWJo7IHK6hgL6m+jZslrQ2btMhpUQmwYjmt3ROl76KPO
fYZwzjQkoo2ysk+Vk8qw2qUeKR31lSlbcUwz2X9F1ktnYG6H/wR3svgXLOV9HfyS
y9aNKaTIf4kJ57y6iHsk9CNiuNTBU0X7xMIJfreJ1vM9mdq/6RKyZ4VXdU7qZOya
CK4PefYdCAipcVzUasJnPgPEMvUGiJe41TiPvcnwDhr4Tjx1P6mtLmWLDgNthjJF
KVKUu3emRtAfGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:44 2026 by rpki-client