Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: I508GYHyn/J/KL7jINPN8wGd4//b1rRkz+/hd9uow0o=
Subject key identifier: 59:87:81:3C:95:8A:18:AB:69:25:3F:D0:CE:8C:8C:92:AB:BE:97:E9
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 019CB0918A6EFBF4EDCE8945DFC4B5196E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 0130
Signing time: Mon 02 Mar 2026 22:00:54 +0000
Manifest this update: Mon 02 Mar 2026 22:00:54 +0000
Manifest next update: Tue 03 Mar 2026 22:00:54 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: 7F9WHLwNnNLzbmxqL+gvsRWb7IVyNAV4SbXQaMaQc1o=)
2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:8a:6e:fb:f4:ed:ce:89:45:df:c4:b5:19:6e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Mar 2 22:00:54 2026 GMT
Not After : Mar 3 22:00:54 2026 GMT
Subject: CN=5987813c958a18ab69253fd0ce8c8c92abbe97e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:69:63:82:ff:aa:dc:c4:6d:5a:3d:18:ad:
5c:75:b7:6f:95:75:04:b0:71:d5:91:20:7f:5c:d3:
f7:d6:48:85:15:d8:82:da:c6:5d:be:5d:7c:94:d9:
40:2c:bc:28:45:85:19:74:b1:d8:8f:d6:44:dc:11:
7e:48:9b:bd:7a:7b:4f:00:99:df:7d:cd:f6:16:58:
db:3a:0a:f9:4c:73:81:c5:6a:5e:b8:12:ba:c8:d5:
19:53:3c:3f:e7:dc:02:27:c6:8f:f3:ad:da:0d:d0:
0b:10:cc:53:13:4a:19:55:0c:75:d2:ce:61:f5:00:
58:87:60:72:2a:ad:9c:de:8c:cc:d9:d9:e7:4a:b5:
a0:fc:51:7f:3b:61:f8:5a:c3:57:10:b7:56:df:0a:
5b:80:2a:88:1a:e5:e2:cd:f2:c0:34:72:9e:0e:48:
a1:b4:40:a1:1d:ca:e9:60:f0:2a:08:46:93:a0:19:
d1:be:55:90:7e:4a:c5:8b:9a:63:01:10:af:df:02:
f0:c5:1b:2d:c2:b2:05:5b:cf:f6:f3:07:ab:0f:c8:
70:27:eb:21:af:6e:cb:b8:56:29:d5:cc:3b:73:a5:
27:40:75:30:2c:be:fb:f1:f8:62:8d:e7:ad:49:df:
91:f6:c0:90:41:36:73:81:a5:7d:ec:9d:f5:7f:0b:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:81:3C:95:8A:18:AB:69:25:3F:D0:CE:8C:8C:92:AB:BE:97:E9
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b3:76:c3:a8:0e:68:4b:27:86:4d:a4:0c:24:67:1e:1a:89:
1b:be:cd:9d:8e:41:0e:a0:65:a9:7c:f4:48:23:27:8e:15:10:
bc:7b:10:b6:7d:cc:a2:5e:60:5a:a5:34:1e:44:8c:a9:8b:66:
a6:a1:23:a5:74:8f:8f:27:fd:ab:c3:32:7e:4a:0f:cf:a4:64:
88:89:6d:6a:f7:ea:2f:bd:47:a2:98:cd:96:d8:73:7e:e8:45:
2f:4d:83:91:15:3b:8e:d5:d6:4a:b1:1f:91:c4:b3:5c:03:26:
02:f8:07:f6:a2:4d:50:36:69:40:3a:15:42:52:c4:a8:f4:1e:
91:fd:8a:96:2a:d4:21:39:2a:c5:a6:a4:3e:21:ec:15:df:ff:
63:67:c7:78:18:49:15:a1:f8:85:77:62:6f:0c:0a:24:fa:4a:
6a:b3:49:6a:25:64:4e:f8:7e:8f:b8:9d:bd:c7:f9:e7:53:41:
25:e1:2b:c4:54:0c:8d:58:d4:de:b4:fe:9d:91:11:6a:0c:e2:
82:98:21:19:e7:82:b4:96:a2:d3:e0:60:06:6a:0b:29:5e:84:
b5:7c:a6:e2:21:80:d7:fa:b0:bf:da:73:87:af:e8:a1:63:37:
09:8a:e2:bb:2b:09:0f:d5:d5:46:40:85:82:af:7c:98:8b:51:
40:9b:99:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:16:00 2026 by rpki-client