Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: aFdyQ/+7ZcqvC31NorFLiOXCpnwhrOqhZ0XDiNJc/Ao=
Subject key identifier: 3F:2B:AA:E6:20:34:FC:2B:0C:29:7C:28:38:A9:3E:76:50:7B:21:97
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 019D9B87B78061D66B2394BBEF9665C4626A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 02CE
Signing time: Fri 17 Apr 2026 13:00:55 +0000
Manifest this update: Fri 17 Apr 2026 13:00:55 +0000
Manifest next update: Sat 18 Apr 2026 13:00:55 +0000
Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=)
2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: KAvwSCvFBlQKFzA3Q9qPFKwoitH0uBAHwkZG1irYk9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b7:80:61:d6:6b:23:94:bb:ef:96:65:c4:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Apr 17 13:00:55 2026 GMT
Not After : Apr 18 13:00:55 2026 GMT
Subject: CN=3f2baae62034fc2b0c297c2838a93e76507b2197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:f7:9c:26:2a:b8:38:7c:c8:93:98:97:b7:
0f:d5:9d:37:b8:db:78:f8:4a:6b:37:b8:b0:70:49:
30:ab:29:1c:86:39:86:b9:85:73:70:aa:7e:38:9d:
1a:1f:46:0a:cb:8d:cd:f5:aa:ed:af:43:f8:1f:85:
0e:17:f8:3c:d0:18:80:13:ed:1f:90:e3:b2:9e:aa:
c1:96:6f:1a:77:a9:d1:53:8a:1e:e9:4b:fc:e3:40:
d4:ef:4e:20:aa:fa:3b:90:56:fc:57:a0:b4:90:93:
3c:e5:08:2b:dc:c5:0a:be:50:11:1b:7a:20:2e:f3:
b8:f2:65:c9:25:ab:58:ea:fc:d0:a6:3f:3e:cf:16:
2a:7f:5d:f3:c8:6d:1a:ff:a9:d9:39:87:f4:c0:29:
d2:32:21:cc:63:68:23:45:69:fd:94:ee:ed:5a:03:
7e:45:1d:7c:a3:41:b4:49:49:15:19:da:56:32:b2:
53:48:d6:64:2a:9b:c2:c6:70:21:cc:7c:98:05:c1:
e6:05:05:58:3e:b5:d6:8e:43:0d:50:7a:76:24:d0:
d0:98:6d:f3:5e:ba:19:2c:30:25:09:78:d7:c0:0b:
98:23:db:41:01:68:90:f5:fb:1e:19:49:55:1c:02:
69:c6:32:73:ec:a4:f8:57:e8:e4:ae:c7:c0:47:c3:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:AA:E6:20:34:FC:2B:0C:29:7C:28:38:A9:3E:76:50:7B:21:97
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:13:2a:f3:2f:56:ca:96:25:3f:cf:30:88:af:87:03:b7:4e:
fa:19:21:c8:6a:cf:f1:cf:1c:7b:c7:96:e3:a3:92:1b:0b:43:
a3:1a:36:f9:df:47:b7:9d:20:e4:7b:d5:6b:ad:50:2c:5f:a8:
f6:f9:59:55:4d:95:b9:cf:98:e9:21:25:d6:a5:6a:5c:99:6c:
d7:7b:df:4b:40:3b:9c:01:3b:ec:92:48:7b:3b:7a:7d:63:f3:
e4:98:d9:22:45:e4:3f:31:8e:de:d8:5f:99:ee:d0:ba:71:36:
df:f6:23:a1:4d:ca:77:7f:7f:e0:b0:bd:57:39:a4:03:a0:ed:
35:52:ec:92:0b:1c:18:61:b8:70:9f:5c:c4:70:92:24:47:62:
40:b8:d5:63:28:cc:bc:32:ac:a2:12:f4:eb:55:fd:51:7b:3b:
76:6e:00:bd:1b:b6:27:c2:71:ef:d7:11:50:94:7d:44:ec:7e:
2f:af:d7:07:9e:7b:04:63:d4:0d:f0:f6:5f:e0:60:37:a0:21:
37:09:62:74:7c:31:7d:00:bb:2e:d3:25:89:fb:c3:26:26:98:
d8:b6:c4:a4:f6:5b:06:56:99:1c:17:c9:24:8d:a9:91:34:26:
a2:e7:a3:af:d5:63:8f:3b:57:a3:9f:24:db:97:bf:49:84:db:
52:b5:78:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh7eAYdZrI5S775ZlxGJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj
MTI2MzcwHhcNMjYwNDE3MTMwMDU1WhcNMjYwNDE4MTMwMDU1WjAzMTEwLwYDVQQD
EygzZjJiYWFlNjIwMzRmYzJiMGMyOTdjMjgzOGE5M2U3NjUwN2IyMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+f3nCYquDh8yJOYl7cP1Z03uNt4
+EprN7iwcEkwqykchjmGuYVzcKp+OJ0aH0YKy43N9artr0P4H4UOF/g80BiAE+0f
kOOynqrBlm8ad6nRU4oe6Uv840DU704gqvo7kFb8V6C0kJM85Qgr3MUKvlARG3og
LvO48mXJJatY6vzQpj8+zxYqf13zyG0a/6nZOYf0wCnSMiHMY2gjRWn9lO7tWgN+
RR18o0G0SUkVGdpWMrJTSNZkKpvCxnAhzHyYBcHmBQVYPrXWjkMNUHp2JNDQmG3z
XroZLDAlCXjXwAuYI9tBAWiQ9fseGUlVHAJpxjJz7KT4V+jkrsfAR8OgxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8rquYgNPwrDCl8KDipPnZQeyGXMB8GA1UdIwQY
MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt
NDIzODU4MjBmOGIzLzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz
LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhMq8y9W
ypYlP88wiK+HA7dO+hkhyGrP8c8ce8eW46OSGwtDoxo2+d9Ht50g5HvVa61QLF+o
9vlZVU2Vuc+Y6SEl1qVqXJls13vfS0A7nAE77JJIezt6fWPz5JjZIkXkPzGO3thf
me7QunE23/YjoU3Kd39/4LC9VzmkA6DtNVLskgscGGG4cJ9cxHCSJEdiQLjVYyjM
vDKsohL061X9UXs7dm4AvRu2J8Jx79cRUJR9ROx+L6/XB557BGPUDfD2X+BgN6Ah
NwlidHwxfQC7LtMlifvDJiaY2LbEpPZbBlaZHBfJJI2pkTQmouejr9VjjztXo58k
25e/SYTbUrV4DA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:01:54 2026 by rpki-client