Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: 4cLDDgMZURQznpEbWdZBaxzB0+CDjGP+vBkbep3ijoA=
Subject key identifier: 47:AE:86:59:DA:81:86:6D:59:E0:35:CF:4A:3E:F7:E1:1F:06:EC:40
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019CAC7DF231AC6A55378D9CAA5AE934D8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1778
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: Ome/TAhm73wX2b/KaD7KyoajtBaXTugtyI32seqnv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f2:31:ac:6a:55:37:8d:9c:aa:5a:e9:34:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=47ae8659da81866d59e035cf4a3ef7e11f06ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:45:a0:67:df:55:b9:33:a5:bc:e2:07:1d:
d1:08:cc:42:68:33:8e:76:cf:1b:78:54:38:b5:3f:
ef:6c:81:de:72:1e:d4:c8:b0:64:a2:2d:70:a4:d1:
1f:04:12:12:7c:d9:d3:7e:79:11:c8:a8:dc:c0:71:
0c:a6:8c:77:74:03:24:b8:7b:da:9a:dc:fa:47:20:
d7:6b:99:8e:f7:5a:5e:a2:c7:3e:20:34:8d:af:0a:
35:1c:f8:0a:a1:1a:44:49:62:4d:b6:cd:97:7a:06:
d6:7c:b0:39:ad:11:de:9f:0c:8d:d7:ca:bc:f8:a4:
a1:63:1e:2c:67:56:55:2c:d3:42:80:2c:99:5d:5c:
c7:2e:5d:ef:85:d3:05:7d:2e:88:db:b1:c9:7d:ef:
43:27:49:d0:6d:ed:4c:b9:20:74:0e:74:2d:3e:da:
1b:9c:81:18:6a:a1:57:9c:c2:23:1d:b2:c5:37:8a:
12:6b:a1:56:e0:c7:a4:96:6f:4f:80:aa:2a:ca:9b:
8d:5a:08:8b:57:66:5d:20:a5:27:8c:40:dd:b7:d7:
6f:45:65:9a:ce:81:8f:60:1b:0d:e7:7f:c9:3d:39:
02:62:3b:04:d8:70:07:d8:d9:48:d5:44:03:4b:9e:
c7:99:ce:5c:68:5b:a1:da:35:a4:de:be:a1:95:ab:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:86:59:DA:81:86:6D:59:E0:35:CF:4A:3E:F7:E1:1F:06:EC:40
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a4:51:67:8f:64:d2:35:53:ee:17:d2:78:e9:cd:f6:85:d2:
38:bf:27:50:6f:a7:f2:0d:d3:cc:2b:79:8e:2a:e8:8f:9f:a5:
18:38:32:d8:ec:81:58:14:1c:a0:d4:1a:71:88:e5:d6:0a:3b:
c7:58:f9:ee:1a:a1:f9:59:76:7b:de:08:cd:59:e9:10:e8:08:
4f:42:81:d4:ee:41:50:7d:5e:5c:18:86:32:41:ef:e4:a8:17:
62:1b:53:ac:a1:fb:fe:ed:54:57:02:63:4a:c7:3d:79:81:61:
46:c0:4f:6b:96:83:35:85:f6:d0:94:1d:04:e0:a4:35:f6:ba:
cb:44:19:7f:e2:40:b9:16:ac:47:a7:65:3d:e6:ec:dc:cc:83:
ad:09:d0:67:d0:b4:f1:cb:eb:30:4e:cc:45:42:e6:25:03:c0:
61:c8:89:d7:9d:47:a6:ff:a1:68:fc:7d:76:50:40:72:6b:7e:
7e:03:ae:0d:71:4d:1d:25:91:04:53:4b:01:69:79:c9:ff:71:
8d:2c:8f:f8:84:3f:71:fd:63:29:d1:17:fd:aa:62:36:e7:1f:
4e:d0:01:14:57:66:0f:65:1d:76:ae:45:9a:90:07:3b:b6:35:
38:80:34:4c:93:56:ec:39:34:e6:96:91:8a:03:45:05:84:35:
9a:b4:20:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysffIxrGpVN42cqlrpNNijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjYwMzAyMDMwMTAwWhcNMjYwMzAzMDMwMTAwWjAzMTEwLwYDVQQD
Eyg0N2FlODY1OWRhODE4NjZkNTllMDM1Y2Y0YTNlZjdlMTFmMDZlYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VlFoGffVbkzpbziBx3RCMxCaDOO
ds8beFQ4tT/vbIHech7UyLBkoi1wpNEfBBISfNnTfnkRyKjcwHEMpox3dAMkuHva
mtz6RyDXa5mO91peosc+IDSNrwo1HPgKoRpESWJNts2XegbWfLA5rRHenwyN18q8
+KShYx4sZ1ZVLNNCgCyZXVzHLl3vhdMFfS6I27HJfe9DJ0nQbe1MuSB0DnQtPtob
nIEYaqFXnMIjHbLFN4oSa6FW4Meklm9PgKoqypuNWgiLV2ZdIKUnjEDdt9dvRWWa
zoGPYBsN53/JPTkCYjsE2HAH2NlI1UQDS57Hmc5caFuh2jWk3r6hlatloQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeuhlnagYZtWeA1z0o+9+EfBuxAMB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKRRZ49k
0jVT7hfSeOnN9oXSOL8nUG+n8g3TzCt5jiroj5+lGDgy2OyBWBQcoNQacYjl1go7
x1j57hqh+Vl2e94IzVnpEOgIT0KB1O5BUH1eXBiGMkHv5KgXYhtTrKH7/u1UVwJj
Ssc9eYFhRsBPa5aDNYX20JQdBOCkNfa6y0QZf+JAuRasR6dlPebs3MyDrQnQZ9C0
8cvrME7MRULmJQPAYciJ151Hpv+haPx9dlBAcmt+fgOuDXFNHSWRBFNLAWl5yf9x
jSyP+IQ/cf1jKdEX/apiNucfTtABFFdmD2Uddq5FmpAHO7Y1OIA0TJNW7Dk05paR
igNFBYQ1mrQgGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:16 2026 by rpki-client