
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier: cedjKCfs1owWVyw8NVASWB6SjG/pUZPoqXn9Miy8ED0=
Subject key identifier: C5:30:D1:FA:07:36:BE:C2:A3:D0:33:D0:A7:DE:77:73:94:02:5D:3B
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial: 019CA7C509B2AA5C9B54B96C19E8C89A38A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number: F1
Signing time: Sun 01 Mar 2026 05:00:34 +0000
Manifest this update: Sun 01 Mar 2026 05:00:34 +0000
Manifest next update: Mon 02 Mar 2026 05:00:34 +0000
Files and hashes: 1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: FWXLQoF0VGwjb2aETs4MgqX7N2aLqscVShYaampig/8=)
2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:c5:09:b2:aa:5c:9b:54:b9:6c:19:e8:c8:9a:38:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Validity
Not Before: Mar 1 05:00:34 2026 GMT
Not After : Mar 2 05:00:34 2026 GMT
Subject: CN=c530d1fa0736bec2a3d033d0a7de777394025d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:6b:92:bf:14:e2:98:65:ac:69:2d:37:42:
db:f0:c9:ad:79:df:e0:0f:7e:ba:ea:8b:a1:ce:52:
58:fe:6d:26:76:62:48:a4:3a:a0:8a:55:61:c1:83:
b2:ba:b7:b9:24:02:80:11:38:f9:0c:98:db:19:77:
c9:e6:16:22:51:8c:e2:0b:59:68:31:d6:2d:0f:76:
ad:38:10:05:19:e3:20:8c:72:b1:0b:93:c7:08:d8:
3d:49:c4:4b:bc:40:87:bc:e2:0d:fb:e7:37:f5:01:
27:49:e9:4b:06:cc:f4:fa:b1:78:dc:3c:18:b4:84:
2d:32:c9:9d:53:b6:1d:aa:8e:06:cc:d0:4e:f0:5b:
30:ab:02:0c:4a:bd:e5:1c:2f:a9:34:3f:10:b6:8d:
67:a3:fc:c2:1b:63:9d:02:37:6e:fc:ef:33:41:98:
be:26:9c:20:8b:fa:0a:0a:52:59:45:63:14:70:a6:
4c:19:65:95:fa:b7:3b:52:27:b5:51:7c:d7:b1:69:
66:3d:7c:8e:3a:fb:d4:40:d2:82:f9:74:fc:dd:c7:
0d:ac:83:b3:80:17:5e:30:64:a7:f3:ac:0c:05:23:
93:10:33:23:31:86:bb:5b:ff:03:21:9b:bb:06:c4:
ad:79:7b:ae:65:9c:02:bc:b7:f9:c4:43:ce:07:6c:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:D1:FA:07:36:BE:C2:A3:D0:33:D0:A7:DE:77:73:94:02:5D:3B
X509v3 Authority Key Identifier:
keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a2:e6:a7:5d:c2:f6:20:83:d2:81:09:e9:58:15:00:de:c3:
c3:cc:29:ba:67:eb:fe:ad:f7:ab:dd:80:bc:42:dc:31:92:93:
fb:a9:44:d8:51:65:fa:5c:97:66:0f:da:60:07:b5:aa:7d:a2:
d4:64:f3:5a:7f:46:12:53:74:92:14:52:10:3c:1d:03:f3:c0:
18:2e:24:d7:a3:8e:24:cb:88:1d:c2:2d:92:bd:1e:6e:dc:6b:
0c:77:b2:85:de:e6:e8:d9:69:ae:da:09:97:0f:c0:8c:13:8a:
a8:2d:c7:5e:9a:4e:47:0c:40:63:da:9a:f3:7b:a4:cc:ae:3f:
03:6f:dc:5a:24:dc:df:45:fe:e9:d0:21:7d:26:7b:2b:af:c9:
00:b4:3e:dd:97:4d:96:e6:4f:c7:d6:b4:43:a2:81:2d:a1:f6:
29:bb:30:19:76:30:c0:5f:8b:b4:b2:81:c7:82:e0:0f:b3:f3:
b4:d1:4c:4f:35:d5:a0:2f:92:72:94:6e:52:bc:6c:75:64:4b:
95:6a:82:3f:59:7d:9d:45:0a:a1:82:81:48:53:9d:47:8f:ff:
47:34:09:84:8b:b9:9a:2c:d1:e8:85:28:e8:f4:a9:26:41:9c:
fa:c4:bf:ba:24:30:58:c5:a2:f5:4f:eb:ad:75:99:a3:90:69:
73:63:c5:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZynxQmyqlybVLlsGejImjipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNWI0NjNiMTdhMjVlYjY4ZGVhYjc5Y2IwZjk4OWVmZDdl
NDhhMTUwHhcNMjYwMzAxMDUwMDM0WhcNMjYwMzAyMDUwMDM0WjAzMTEwLwYDVQQD
EyhjNTMwZDFmYTA3MzZiZWMyYTNkMDMzZDBhN2RlNzc3Mzk0MDI1ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IZrkr8U4phlrGktN0Lb8Mmted/g
D3666ouhzlJY/m0mdmJIpDqgilVhwYOyure5JAKAETj5DJjbGXfJ5hYiUYziC1lo
MdYtD3atOBAFGeMgjHKxC5PHCNg9ScRLvECHvOIN++c39QEnSelLBsz0+rF43DwY
tIQtMsmdU7Ydqo4GzNBO8FswqwIMSr3lHC+pND8Qto1no/zCG2OdAjdu/O8zQZi+
Jpwgi/oKClJZRWMUcKZMGWWV+rc7Uie1UXzXsWlmPXyOOvvUQNKC+XT83ccNrIOz
gBdeMGSn86wMBSOTEDMjMYa7W/8DIZu7BsSteXuuZZwCvLf5xEPOB2xZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUw0foHNr7Co9Az0Kfed3OUAl07MB8GA1UdIwQY
MBaAFKpbRjsXol62jeq3nLD5ie/X5IoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmIt
YzdlNzExNWY0YTJlLzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmItYzdlNzExNWY0YTJl
LzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaLmp13C
9iCD0oEJ6VgVAN7Dw8wpumfr/q33q92AvELcMZKT+6lE2FFl+lyXZg/aYAe1qn2i
1GTzWn9GElN0khRSEDwdA/PAGC4k16OOJMuIHcItkr0ebtxrDHeyhd7m6NlprtoJ
lw/AjBOKqC3HXppORwxAY9qa83ukzK4/A2/cWiTc30X+6dAhfSZ7K6/JALQ+3ZdN
luZPx9a0Q6KBLaH2KbswGXYwwF+LtLKBx4LgD7PztNFMTzXVoC+ScpRuUrxsdWRL
lWqCP1l9nUUKoYKBSFOdR4//RzQJhIu5mizR6IUo6PSpJkGc+sS/uiQwWMWi9U/r
rXWZo5Bpc2PFug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:59 2026 by rpki-client