Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: xV3QWCI1gspEknZLeNdh0i6rM2+xPw/YwKUf+mTWVVE=
Subject key identifier: A5:39:01:03:29:20:C7:54:B7:58:51:BF:01:42:D8:80:F3:CF:92:36
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 019CAB6B48306DCD9A3159E3FEA23E52302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0C32
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: wjI6xJQpslQI5dQJwzzUIrXUAR0eFYz3zzwZYDSXqjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:48:30:6d:cd:9a:31:59:e3:fe:a2:3e:52:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=a53901032920c754b75851bf0142d880f3cf9236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:8f:4c:74:b3:d0:ea:71:fd:f7:69:38:49:
f7:17:1b:3c:7e:73:c4:ae:89:3a:7b:1c:a1:b3:f0:
93:ad:37:79:13:d9:ee:4d:48:1e:f5:cc:0c:c5:a9:
05:99:ef:20:f5:13:83:1d:6c:34:5a:bc:14:50:5a:
9e:54:f7:a1:06:f3:2e:3c:87:b7:6d:fe:66:77:20:
54:b8:b4:91:d6:bf:7e:99:79:c5:3d:cb:5f:00:47:
3a:56:bc:3b:16:7b:31:07:f0:91:db:f5:c6:28:7c:
7e:a4:b7:36:18:e9:d7:c7:16:32:9b:77:90:41:ed:
62:db:7c:ae:fb:a9:5d:6f:59:8f:0d:96:81:3b:0c:
27:d8:e1:22:1b:32:50:47:c6:3f:bf:26:66:24:cd:
35:8b:52:b4:fc:c9:0b:82:eb:7f:ef:a1:f9:d7:73:
e0:a9:9a:7c:5b:7e:d2:7f:ee:e2:dd:1e:bf:54:2b:
91:0e:f6:10:d4:88:d5:1c:e9:fb:09:7e:f4:6d:0c:
96:34:4a:8d:b5:ae:68:94:a2:32:fa:42:b7:c1:13:
f0:2a:a7:c9:a3:ed:ff:27:76:0c:be:6b:fe:0d:a5:
5b:4b:e1:91:64:cd:e3:c6:e0:32:66:d7:47:d3:97:
40:11:ae:a4:21:19:23:b9:5a:39:38:49:a6:ec:57:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:01:03:29:20:C7:54:B7:58:51:BF:01:42:D8:80:F3:CF:92:36
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:c0:47:0c:1b:53:eb:04:ce:18:69:7c:0c:a5:77:74:69:
53:bc:ac:de:c1:ee:0f:23:21:84:18:da:7e:01:14:ab:09:b3:
ea:11:df:db:9a:89:61:b0:94:70:bc:cb:db:c0:2c:c1:2d:9d:
1b:45:2f:b7:b2:b7:18:ee:f6:ae:44:2f:b8:86:fb:88:b4:45:
55:a5:86:0a:7d:04:5c:55:4a:84:3d:47:31:bc:4c:9b:cc:8f:
4e:18:f6:90:dc:36:c4:7e:1a:82:df:b8:6e:66:a2:98:57:08:
e1:b5:9d:2a:7d:83:d6:ce:f4:b4:99:87:4d:ca:de:8c:02:d2:
4a:ae:7f:7f:71:0c:d2:c7:3e:72:15:31:ed:e7:2a:ed:d2:ac:
22:45:7f:a7:0b:69:37:fa:3b:02:d9:26:91:15:19:10:2f:df:
21:f1:40:06:12:9b:ec:d5:75:76:9d:18:d1:eb:ae:ed:25:1a:
85:8e:54:d6:ac:68:2e:a5:0a:fa:8d:b8:be:db:16:25:75:af:
57:14:38:3d:c1:b5:31:07:21:6a:7a:f3:1d:78:eb:1c:bf:1c:
05:2e:3d:3d:9d:22:de:dd:9c:78:a8:0e:88:2a:22:34:1d:12:
e7:b9:b6:d6:4f:62:bc:1f:ed:fe:c9:8f:f8:57:7a:a8:7b:bf:
60:08:f3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra0gwbc2aMVnj/qI+UjAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0
MjJlOGIwHhcNMjYwMzAxMjIwMTAwWhcNMjYwMzAyMjIwMTAwWjAzMTEwLwYDVQQD
EyhhNTM5MDEwMzI5MjBjNzU0Yjc1ODUxYmYwMTQyZDg4MGYzY2Y5MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42iPTHSz0Opx/fdpOEn3Fxs8fnPE
rok6exyhs/CTrTd5E9nuTUge9cwMxakFme8g9RODHWw0WrwUUFqeVPehBvMuPIe3
bf5mdyBUuLSR1r9+mXnFPctfAEc6Vrw7FnsxB/CR2/XGKHx+pLc2GOnXxxYym3eQ
Qe1i23yu+6ldb1mPDZaBOwwn2OEiGzJQR8Y/vyZmJM01i1K0/MkLgut/76H513Pg
qZp8W37Sf+7i3R6/VCuRDvYQ1IjVHOn7CX70bQyWNEqNta5olKIy+kK3wRPwKqfJ
o+3/J3YMvmv+DaVbS+GRZM3jxuAyZtdH05dAEa6kIRkjuVo5OEmm7FcJwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU5AQMpIMdUt1hRvwFC2IDzz5I2MB8GA1UdIwQY
MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt
OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw
LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCLARwwb
U+sEzhhpfAyld3RpU7ys3sHuDyMhhBjafgEUqwmz6hHf25qJYbCUcLzL28AswS2d
G0Uvt7K3GO72rkQvuIb7iLRFVaWGCn0EXFVKhD1HMbxMm8yPThj2kNw2xH4agt+4
bmaimFcI4bWdKn2D1s70tJmHTcrejALSSq5/f3EM0sc+chUx7ecq7dKsIkV/pwtp
N/o7AtkmkRUZEC/fIfFABhKb7NV1dp0Y0euu7SUahY5U1qxoLqUK+o24vtsWJXWv
VxQ4PcG1MQchanrzHXjrHL8cBS49PZ0i3t2ceKgOiCoiNB0S57m21k9ivB/t/smP
+Fd6qHu/YAjzFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:12 2026 by rpki-client