Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: 2MVvuqUjtT03hZ0CU51KZcaEOIv9bAaR6yZd1rnyjBg=
Subject key identifier: 40:B9:67:5F:39:6F:89:3B:DC:B3:5F:13:85:8C:EB:06:5C:29:9E:05
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 019CABD979498F99DEB6A8D727B126C9D138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: huwsoXSdrghZt8AO9N/H0DVoKoWLpbsm/DUcjuMfQVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:79:49:8f:99:de:b6:a8:d7:27:b1:26:c9:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=40b9675f396f893bdcb35f13858ceb065c299e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:4f:39:43:c3:3e:3a:47:4e:2b:95:bc:ea:
9e:cd:d4:b0:58:3d:1d:34:73:1a:19:b3:c6:a8:07:
ba:ec:2b:88:dc:9e:2d:1b:94:d4:9d:b7:6e:fd:6d:
b9:6d:3c:17:f8:39:3d:b0:87:1b:4b:10:27:3b:3b:
51:2f:7c:41:e7:55:7e:5a:be:15:0b:cd:9a:33:6d:
8a:e0:e2:bf:f5:d3:d7:7a:d8:45:53:0f:5d:8e:5d:
d4:68:4a:61:7f:a3:bd:c4:d8:f8:64:d9:69:78:24:
48:31:07:8a:44:87:3d:ce:b7:b8:b2:40:66:55:0f:
3c:2a:69:6e:92:a7:c4:93:41:38:91:29:7c:6e:97:
3d:c6:08:85:24:ed:4d:06:55:6b:54:96:97:50:0c:
fd:9a:57:b4:e6:5b:8c:9a:47:71:84:78:0c:ee:60:
6d:f3:46:81:87:65:3e:f9:fa:18:72:68:a8:59:ef:
79:5f:fa:39:4c:7f:46:b1:44:59:71:ca:1a:e9:a2:
50:18:42:0d:a8:f0:5a:8b:7e:52:39:7d:c6:be:c0:
01:66:59:d2:7f:99:f8:dd:a5:9a:3b:a1:b2:f9:48:
59:5d:02:75:29:f7:0a:64:6d:a0:b6:ff:6a:25:60:
96:af:76:10:98:4e:5c:c8:bf:2c:2a:9e:12:2e:30:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:67:5F:39:6F:89:3B:DC:B3:5F:13:85:8C:EB:06:5C:29:9E:05
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:59:b9:29:d3:85:18:bc:8a:ab:09:cb:82:8d:9e:48:9e:5e:
d7:25:02:79:3d:99:4e:e4:86:6a:2f:d2:58:a9:8b:0c:d6:31:
7b:86:7f:be:c8:a2:0a:68:20:6e:e8:d9:22:12:96:49:ef:6f:
39:00:28:eb:79:04:12:d4:88:64:b6:df:23:b2:82:c1:18:52:
02:02:02:22:9a:81:c3:12:f5:91:38:75:bb:6a:ec:ef:5b:73:
ff:b1:5c:53:cc:a4:78:aa:83:3f:f8:e2:1e:25:2d:bb:1e:0a:
eb:e1:c2:31:09:22:03:d7:0a:8e:b8:57:08:6e:0c:ff:bf:cc:
d6:0a:02:6d:49:66:10:a8:87:46:06:41:ec:ed:70:c9:b2:f5:
da:33:71:c5:6f:da:ba:2d:84:21:09:ae:49:ec:0e:74:ac:d1:
62:01:b2:20:58:42:12:98:1e:fe:1b:89:64:43:41:ed:ab:37:
4b:8e:7f:72:20:2f:ca:43:52:ee:61:a2:61:73:10:b4:68:74:
bb:b9:a1:89:82:19:eb:aa:e9:bb:fd:27:09:24:01:64:e8:7a:
21:6e:48:1a:b7:ae:08:f3:38:26:f9:e2:d5:2f:9c:93:1f:40:
17:12:59:61:e2:31:a9:c0:ea:c3:f4:5c:72:68:65:a1:fc:36:
4e:0d:2f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XlJj5netqjXJ7EmydE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzRhNTY0NGYwNDI5NTIxZDFmZGM1YmJiMjMzYTA0MWIy
MDA4ODcwHhcNMjYwMzAyMDAwMTIyWhcNMjYwMzAzMDAwMTIyWjAzMTEwLwYDVQQD
Eyg0MGI5Njc1ZjM5NmY4OTNiZGNiMzVmMTM4NThjZWIwNjVjMjk5ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp9POUPDPjpHTiuVvOqezdSwWD0d
NHMaGbPGqAe67CuI3J4tG5TUnbdu/W25bTwX+Dk9sIcbSxAnOztRL3xB51V+Wr4V
C82aM22K4OK/9dPXethFUw9djl3UaEphf6O9xNj4ZNlpeCRIMQeKRIc9zre4skBm
VQ88KmlukqfEk0E4kSl8bpc9xgiFJO1NBlVrVJaXUAz9mle05luMmkdxhHgM7mBt
80aBh2U++foYcmioWe95X/o5TH9GsURZccoa6aJQGEINqPBai35SOX3GvsABZlnS
f5n43aWaO6Gy+UhZXQJ1KfcKZG2gtv9qJWCWr3YQmE5cyL8sKp4SLjDAjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC5Z185b4k73LNfE4WM6wZcKZ4FMB8GA1UdIwQY
MBaAFEHEpWRPBClSHR/cW7sjOgQbIAiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81Y2M0YjctODY3ZC00NTJhLTg5MDIt
ZTg3OTMyYzU1NWYzLzEvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81Y2M0YjctODY3ZC00NTJhLTg5MDItZTg3OTMyYzU1NWYz
LzEvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVm5KdOF
GLyKqwnLgo2eSJ5e1yUCeT2ZTuSGai/SWKmLDNYxe4Z/vsiiCmggbujZIhKWSe9v
OQAo63kEEtSIZLbfI7KCwRhSAgICIpqBwxL1kTh1u2rs71tz/7FcU8ykeKqDP/ji
HiUtux4K6+HCMQkiA9cKjrhXCG4M/7/M1goCbUlmEKiHRgZB7O1wybL12jNxxW/a
ui2EIQmuSewOdKzRYgGyIFhCEpge/huJZENB7as3S45/ciAvykNS7mGiYXMQtGh0
u7mhiYIZ66rpu/0nCSQBZOh6IW5IGreuCPM4Jvni1S+ckx9AFxJZYeIxqcDqw/Rc
cmhlofw2Tg0vig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:52 2026 by rpki-client