Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: 29bVqxTRaWUIOslwJT/56CBELruk6VuCG5+hwcDAK2w=
Subject key identifier: 66:0E:8F:9C:A2:6D:D2:0E:8A:EF:BB:5C:00:AD:B2:3B:74:77:80:8B
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 019CAA58BB00CA27E454AFA648CE0E656914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 035D
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: rOIriU41NbUfZh35Hli+PiDp2UyBijxZbgrBJl7Nbac=)
2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bb:00:ca:27:e4:54:af:a6:48:ce:0e:65:69:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=660e8f9ca26dd20e8aefbb5c00adb23b7477808b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:c5:8d:30:9a:ec:3e:3f:b6:a1:4d:5d:99:
f0:22:01:e3:15:c3:c9:02:a4:34:69:35:7a:f0:52:
b7:44:a6:c9:45:69:2f:45:a4:80:8b:41:ab:81:d3:
40:78:2d:1f:58:31:62:18:da:2a:3c:16:ef:47:70:
c4:dd:8a:b7:88:15:68:0a:c7:0e:50:2f:2f:b6:63:
6f:2b:03:2e:b4:ac:4f:15:45:e6:6f:cb:c6:b2:66:
77:ad:58:e8:fc:f2:eb:29:93:ee:6b:ea:d2:6c:d3:
a8:56:f9:89:4d:c1:90:e7:ba:33:ae:73:cc:7a:9d:
37:fc:c7:e4:12:c8:ef:7a:fe:23:43:44:f9:4c:0b:
e8:73:2b:a6:24:20:02:ea:56:81:1f:c2:e4:ca:6e:
74:3f:07:2a:a5:31:25:48:89:3a:aa:2b:9d:e0:02:
bd:f5:11:3e:b9:47:30:ce:2c:f8:ed:a4:62:c4:7f:
67:1b:38:58:56:22:64:17:68:c9:ee:da:97:ba:a6:
52:0b:a8:ff:e4:db:03:89:2e:e0:db:eb:4e:67:fa:
82:d3:4c:1d:6b:0d:65:15:cf:08:5a:ca:9d:5b:4d:
93:e2:15:2d:38:4d:ce:fb:af:57:ff:56:61:71:c8:
83:8b:df:8d:fa:df:ba:dc:9c:e3:c2:5b:70:f7:5b:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:8F:9C:A2:6D:D2:0E:8A:EF:BB:5C:00:AD:B2:3B:74:77:80:8B
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1f:a8:d3:59:53:65:ea:ce:05:42:0a:cb:33:8b:ed:bf:e1:
2c:8f:45:df:3e:5f:e4:c0:72:22:11:20:d9:02:2c:de:e0:bc:
8c:d5:d2:0c:b4:2b:e4:54:fb:e2:83:b9:20:8c:a3:a1:d7:0d:
66:30:af:15:7e:0a:09:b4:06:2f:ba:d3:4e:cf:34:c5:3a:ad:
0d:7b:b2:8d:1c:f0:96:12:28:9e:eb:c8:da:60:ed:0f:5b:3e:
05:ca:00:6f:52:db:b9:c6:ef:3b:0d:b8:89:d3:7c:f0:b8:63:
c2:db:da:a4:c6:2d:b5:ac:3c:ec:8c:cf:16:68:84:6b:28:68:
98:d3:77:47:68:44:98:db:ce:16:5e:42:b1:9f:e4:60:ca:a1:
f3:ce:3e:a6:ae:48:80:8e:ae:13:f1:43:d7:e7:3b:bd:5d:45:
65:17:e3:a2:f8:5b:49:06:f4:84:5d:b6:1c:99:f6:eb:0f:42:
44:35:eb:e2:25:fd:70:f8:69:a0:72:1c:b6:00:56:09:e3:05:
ba:70:fa:21:bf:35:ec:74:2f:91:ba:4c:a7:7b:fc:8c:c1:a6:
25:e2:3e:fc:9f:1a:5e:ee:10:e1:7b:b5:90:8b:18:0b:50:b5:
c8:65:05:6f:d2:8b:35:2a:7d:92:c1:0c:e4:79:23:60:db:55:
11:7f:78:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLsAyifkVK+mSM4OZWkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj
N2RjZjQwHhcNMjYwMzAxMTcwMTA3WhcNMjYwMzAyMTcwMTA3WjAzMTEwLwYDVQQD
Eyg2NjBlOGY5Y2EyNmRkMjBlOGFlZmJiNWMwMGFkYjIzYjc0Nzc4MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9rFjTCa7D4/tqFNXZnwIgHjFcPJ
AqQ0aTV68FK3RKbJRWkvRaSAi0GrgdNAeC0fWDFiGNoqPBbvR3DE3Yq3iBVoCscO
UC8vtmNvKwMutKxPFUXmb8vGsmZ3rVjo/PLrKZPua+rSbNOoVvmJTcGQ57ozrnPM
ep03/MfkEsjvev4jQ0T5TAvocyumJCAC6laBH8Lkym50PwcqpTElSIk6qiud4AK9
9RE+uUcwziz47aRixH9nGzhYViJkF2jJ7tqXuqZSC6j/5NsDiS7g2+tOZ/qC00wd
aw1lFc8IWsqdW02T4hUtOE3O+69X/1ZhcciDi9+N+t+63Jzjwltw91tPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYOj5yibdIOiu+7XACtsjt0d4CLMB8GA1UdIwQY
MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt
N2Y1ZWMyNzVjYWE0LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0
LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAER+o01lT
ZerOBUIKyzOL7b/hLI9F3z5f5MByIhEg2QIs3uC8jNXSDLQr5FT74oO5IIyjodcN
ZjCvFX4KCbQGL7rTTs80xTqtDXuyjRzwlhIonuvI2mDtD1s+BcoAb1LbucbvOw24
idN88LhjwtvapMYttaw87IzPFmiEayhomNN3R2hEmNvOFl5CsZ/kYMqh884+pq5I
gI6uE/FD1+c7vV1FZRfjovhbSQb0hF22HJn26w9CRDXr4iX9cPhpoHIctgBWCeMF
unD6Ib817HQvkbpMp3v8jMGmJeI+/J8aXu4Q4Xu1kIsYC1C1yGUFb9KLNSp9ksEM
5HkjYNtVEX946g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:10 2026 by rpki-client