Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: l+QWr4DM6x4vrKJ2Zy/KoHDthdxWej2LLVK5SKnBVfg=
Subject key identifier: 81:5E:5C:F6:0F:5F:31:96:B5:C8:96:91:2A:DC:74:3C:F1:0E:43:47
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 019DA48B0FD67AEAC95687E57F2317438F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0CB3
Signing time: Sun 19 Apr 2026 07:01:10 +0000
Manifest this update: Sun 19 Apr 2026 07:01:10 +0000
Manifest next update: Mon 20 Apr 2026 07:01:10 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: CUKHs3lVQXnks+r3B5wr0E3V7tmDeaHuHCjtLRImkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:0f:d6:7a:ea:c9:56:87:e5:7f:23:17:43:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Apr 19 07:01:10 2026 GMT
Not After : Apr 20 07:01:10 2026 GMT
Subject: CN=815e5cf60f5f3196b5c896912adc743cf10e4347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:4a:cd:50:c4:d0:f3:4d:39:0e:e1:b9:95:
88:3a:55:9b:c5:32:59:e9:b8:80:6b:54:64:75:5a:
cc:21:79:3a:d7:d0:ed:75:5d:ab:e7:df:ca:ec:35:
03:40:20:3f:da:53:65:aa:ee:18:b1:29:e1:74:48:
ac:6f:d5:6d:1c:f6:ba:51:89:d9:ab:4a:2b:69:c4:
e8:23:3e:21:a1:99:31:36:c3:be:e8:79:04:16:74:
02:1c:21:10:c9:e6:61:27:e7:4b:79:b4:f9:4e:bc:
0f:43:be:44:00:d5:41:df:d4:eb:d8:e6:10:0a:71:
39:d3:af:89:7c:47:c3:3e:2c:35:e4:1a:56:39:92:
3c:89:91:04:7c:5b:85:43:0f:68:e4:e8:d1:a1:57:
ab:4f:15:c0:68:c7:4c:27:79:21:cf:e2:9d:c9:c0:
c5:07:ea:26:da:04:f5:a1:9a:cf:c4:9b:4b:37:c2:
a7:01:a6:16:e8:08:47:d0:89:fe:e9:03:af:16:e8:
ed:41:aa:eb:2a:36:d2:67:2a:d5:68:54:55:39:ce:
b5:41:54:92:da:4f:17:97:d5:0a:93:95:1f:7f:ca:
4e:78:f7:d9:2d:34:f5:47:63:80:0c:3d:97:2d:82:
57:13:f5:8d:94:c3:f4:15:4c:5a:6f:3f:32:b2:04:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:5C:F6:0F:5F:31:96:B5:C8:96:91:2A:DC:74:3C:F1:0E:43:47
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9f:38:98:88:0b:93:63:10:d3:c3:ca:3f:8e:fd:d9:92:e8:
12:7b:b4:84:ac:89:81:9c:fe:82:87:ea:c8:51:cb:4a:fc:03:
64:d4:1e:7a:cb:e6:84:72:04:5c:a7:13:ac:93:c3:14:92:27:
95:f6:29:c1:6f:33:39:54:b3:33:a7:13:db:33:e5:27:27:94:
ef:77:e4:da:5c:e3:59:43:61:80:f0:35:f4:02:cd:0d:d9:00:
5a:a5:4b:85:01:c5:c6:67:28:e3:a0:01:9b:24:f3:fb:01:2f:
ef:e0:bf:3a:48:0e:6a:d2:c6:79:b8:94:bb:e9:66:f1:c7:b2:
ce:06:78:e4:49:ca:02:f7:90:b8:c5:1e:82:be:c7:dd:c5:ae:
7e:50:ae:22:7f:55:bf:4b:34:bd:59:d5:43:52:f8:af:d5:4f:
6f:0a:99:b2:50:d4:60:4b:73:19:19:50:35:71:44:71:f8:85:
e9:a8:eb:a7:1c:77:3d:58:ed:c4:42:5e:c9:f6:6f:8b:92:b9:
8e:dd:9c:b2:d8:0f:4b:63:03:21:e0:19:1f:c6:61:aa:f9:e3:
2b:3d:8b:65:13:b8:d8:f9:ae:40:9a:f6:52:a3:c9:57:f7:a1:
19:b1:bb:34:c9:58:45:f4:c7:3c:f1:c4:79:db:e0:76:34:78:
78:da:55:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiw/WeurJVoflfyMXQ48EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0
MjJlOGIwHhcNMjYwNDE5MDcwMTEwWhcNMjYwNDIwMDcwMTEwWjAzMTEwLwYDVQQD
Eyg4MTVlNWNmNjBmNWYzMTk2YjVjODk2OTEyYWRjNzQzY2YxMGU0MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV9KzVDE0PNNOQ7huZWIOlWbxTJZ
6biAa1RkdVrMIXk619DtdV2r59/K7DUDQCA/2lNlqu4YsSnhdEisb9VtHPa6UYnZ
q0oracToIz4hoZkxNsO+6HkEFnQCHCEQyeZhJ+dLebT5TrwPQ75EANVB39Tr2OYQ
CnE506+JfEfDPiw15BpWOZI8iZEEfFuFQw9o5OjRoVerTxXAaMdMJ3khz+KdycDF
B+om2gT1oZrPxJtLN8KnAaYW6AhH0In+6QOvFujtQarrKjbSZyrVaFRVOc61QVSS
2k8Xl9UKk5Uff8pOePfZLTT1R2OADD2XLYJXE/WNlMP0FUxabz8ysgRDywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFeXPYPXzGWtciWkSrcdDzxDkNHMB8GA1UdIwQY
MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt
OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw
LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ584mIgL
k2MQ08PKP4792ZLoEnu0hKyJgZz+gofqyFHLSvwDZNQeesvmhHIEXKcTrJPDFJIn
lfYpwW8zOVSzM6cT2zPlJyeU73fk2lzjWUNhgPA19ALNDdkAWqVLhQHFxmco46AB
myTz+wEv7+C/OkgOatLGebiUu+lm8ceyzgZ45EnKAveQuMUegr7H3cWuflCuIn9V
v0s0vVnVQ1L4r9VPbwqZslDUYEtzGRlQNXFEcfiF6ajrpxx3PVjtxEJeyfZvi5K5
jt2cstgPS2MDIeAZH8ZhqvnjKz2LZRO42PmuQJr2UqPJV/ehGbG7NMlYRfTHPPHE
edvgdjR4eNpVSw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:28:46 2026 by rpki-client