Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: dLrucCkhaMKK8FYviNZNtzZ3n5jKqWRWe+IuuBGazt4=
Subject key identifier: 45:DD:20:C2:1E:F7:88:18:CF:BB:BC:B2:E2:B6:CC:9D:D6:A1:9D:21
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 019CAC1026D7AF3C4C64052A94E86F9E79D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 15D3
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: VFwO3BrFsDg5QgtVcQ7/le+U12ttJx/kbX8lIcLO1Ms=)
2: mI_mfOa16c9i2aB5y-5RdFkoQzs.roa (hash: CYTfnzdl53VUc2uYy5eOC2P2ZEG/Uh5nTjGXOTog/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:26:d7:af:3c:4c:64:05:2a:94:e8:6f:9e:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=45dd20c21ef78818cfbbbcb2e2b6cc9dd6a19d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e7:a4:6f:7b:da:75:95:0c:5e:7c:95:a6:82:
eb:7b:be:2c:5c:94:a1:60:55:24:1c:9a:d2:4a:1e:
19:2d:c5:b9:e5:f2:49:c7:2b:0d:78:34:8d:f3:5d:
6c:a8:10:72:96:5a:d7:a6:02:4c:a0:2c:9d:8e:31:
35:2f:82:86:d6:45:1b:e6:0c:df:ea:30:3b:80:04:
04:2b:89:1d:d8:a6:bc:aa:97:9c:d3:52:c0:27:c0:
09:19:65:9d:3d:f2:2c:8d:e9:3d:b0:cd:ee:83:81:
da:cc:02:9e:7a:31:50:91:83:01:84:2c:b0:f9:6f:
5d:d4:5b:55:fe:b7:7c:45:c2:a0:22:b2:88:f4:ba:
27:79:7c:6f:87:90:c5:8b:28:7f:19:7b:16:2a:8e:
84:a5:3d:b8:2c:0d:89:32:41:df:1a:23:06:b3:d9:
b6:d7:aa:e6:3c:92:7d:e8:57:92:60:46:b4:64:c4:
bd:a4:ba:ba:52:3f:9e:70:a4:a4:60:ec:42:d9:4a:
17:c9:f7:1b:70:1c:c8:77:87:73:55:c5:4b:4e:ff:
94:39:5c:8c:78:c6:fc:dd:c1:cb:77:45:f9:a8:f7:
8c:38:89:4b:96:cd:41:84:73:af:3e:7b:5c:6e:10:
c5:60:79:10:7d:7f:78:03:f5:c5:89:c6:9e:41:3e:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:20:C2:1E:F7:88:18:CF:BB:BC:B2:E2:B6:CC:9D:D6:A1:9D:21
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4a:1c:13:ba:7a:16:ee:d5:50:c8:97:f3:44:c2:f6:49:4b:
78:d5:0b:5e:91:2f:de:92:ed:05:64:e3:40:5e:92:18:00:4a:
56:fa:af:f5:13:ae:3f:38:e8:13:d7:89:fc:08:1a:2b:4f:b5:
97:a9:e2:69:87:e6:ce:ea:39:f7:c1:3a:40:b6:6e:e5:4b:78:
c7:ad:ee:64:71:a1:5a:f0:62:af:5e:14:4b:f5:3f:81:31:94:
d0:82:26:8e:c5:00:99:6b:d5:ec:ec:d8:cd:92:9a:67:e5:0e:
5b:f0:83:aa:32:d1:a8:c0:87:10:6f:5b:4a:00:22:ee:dd:3d:
2a:34:b1:ce:ae:66:2f:aa:bf:0d:a8:b9:4d:2f:78:74:7e:b5:
9c:02:1b:9f:6f:8b:6c:9a:6f:a6:0f:65:8c:d4:c0:18:eb:74:
66:78:68:22:2f:83:53:80:44:b9:7b:5d:c8:cc:1a:88:f6:96:
cf:32:0d:d6:01:50:c3:15:05:93:df:3a:54:7f:6f:d9:4e:e5:
f5:da:f9:e7:51:36:ed:80:cb:c2:08:b0:56:a5:33:bd:a4:d1:
9a:33:5e:28:41:1a:3b:bb:5b:06:30:fd:91:db:0b:a3:76:c1:
5e:b7:cb:70:84:b7:b0:de:54:78:50:a0:a3:f1:ef:e9:02:7e:
bf:b1:86:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECbXrzxMZAUqlOhvnnnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx
OTU0ZDUwHhcNMjYwMzAyMDEwMTA1WhcNMjYwMzAzMDEwMTA1WjAzMTEwLwYDVQQD
Eyg0NWRkMjBjMjFlZjc4ODE4Y2ZiYmJjYjJlMmI2Y2M5ZGQ2YTE5ZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Oekb3vadZUMXnyVpoLre74sXJSh
YFUkHJrSSh4ZLcW55fJJxysNeDSN811sqBByllrXpgJMoCydjjE1L4KG1kUb5gzf
6jA7gAQEK4kd2Ka8qpec01LAJ8AJGWWdPfIsjek9sM3ug4HazAKeejFQkYMBhCyw
+W9d1FtV/rd8RcKgIrKI9LoneXxvh5DFiyh/GXsWKo6EpT24LA2JMkHfGiMGs9m2
16rmPJJ96FeSYEa0ZMS9pLq6Uj+ecKSkYOxC2UoXyfcbcBzId4dzVcVLTv+UOVyM
eMb83cHLd0X5qPeMOIlLls1BhHOvPntcbhDFYHkQfX94A/XFicaeQT6EMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXdIMIe94gYz7u8suK2zJ3WoZ0hMB8GA1UdIwQY
MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt
MmMyMDc5ZDkxNmFkLzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk
LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0ocE7p6
Fu7VUMiX80TC9klLeNULXpEv3pLtBWTjQF6SGABKVvqv9ROuPzjoE9eJ/AgaK0+1
l6niaYfmzuo598E6QLZu5Ut4x63uZHGhWvBir14US/U/gTGU0IImjsUAmWvV7OzY
zZKaZ+UOW/CDqjLRqMCHEG9bSgAi7t09KjSxzq5mL6q/Dai5TS94dH61nAIbn2+L
bJpvpg9ljNTAGOt0ZnhoIi+DU4BEuXtdyMwaiPaWzzIN1gFQwxUFk986VH9v2U7l
9dr551E27YDLwgiwVqUzvaTRmjNeKEEaO7tbBjD9kdsLo3bBXrfLcIS3sN5UeFCg
o/Hv6QJ+v7GGLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:11 2026 by rpki-client