Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: NeIsZV4NS/0FSfheK5TVmVK6q33Fh5G0kblSwAzlMJs=
Subject key identifier: BE:15:36:D9:E9:5A:8D:73:24:9C:D9:19:14:60:47:BD:C2:BC:18:27
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 019CAC4685BF054D7A5E98E021F39669AC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: 32
Signing time: Mon 02 Mar 2026 02:00:28 +0000
Manifest this update: Mon 02 Mar 2026 02:00:28 +0000
Manifest next update: Tue 03 Mar 2026 02:00:28 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: n0C9thhfiVkGLLouNJGZxJ2o00R+KkMkqiO7FPmC92U=)
2: wH_MfDJl_h2tECJc3oCb2Qz0pi4.roa (hash: 8pIUEql8CBNNXltIona5AYLJWg9u6/3eIQY5XVZR3ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:85:bf:05:4d:7a:5e:98:e0:21:f3:96:69:ac:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Mar 2 02:00:28 2026 GMT
Not After : Mar 3 02:00:28 2026 GMT
Subject: CN=be1536d9e95a8d73249cd919146047bdc2bc1827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:9a:60:fb:3e:ab:a2:b3:0d:ab:f1:cc:65:
b5:a0:01:4d:4a:2b:c9:46:07:53:f7:ac:10:cf:8a:
74:15:8d:32:45:48:cb:f0:21:35:a6:d2:25:bb:37:
ab:4f:2b:a6:53:ce:71:4e:3a:d4:a9:4e:b2:0e:66:
4f:fe:c7:40:c3:59:d2:44:d6:66:f7:49:0c:7f:c1:
aa:a0:9c:5e:19:5f:0c:50:7a:c8:8b:fa:14:39:1d:
41:a4:0e:82:7a:0e:00:0f:31:1d:a4:5d:2b:ce:09:
38:ef:70:4f:4c:8f:a4:28:77:79:e7:79:33:33:69:
22:db:f5:65:ba:07:ae:96:53:88:48:58:40:86:64:
de:86:a2:9d:04:ef:b7:e1:0c:7d:45:45:8e:69:91:
50:46:bf:a6:56:e1:a8:53:68:d2:13:fc:c7:ed:fe:
3c:76:87:ab:ed:f5:03:fd:7f:30:a8:d1:fd:cc:27:
07:e5:c6:c0:a4:ac:ab:42:31:76:fc:14:c3:e3:8e:
4c:0f:b1:1e:fb:30:41:d9:80:5c:12:c9:e4:e7:f4:
47:d1:51:54:9b:19:6d:64:8f:b4:7f:92:27:5d:65:
48:6c:c3:f5:9e:7c:b7:65:91:bb:56:7a:4e:8e:f9:
99:dc:dd:05:07:b6:4f:2f:de:a4:13:38:12:a2:5f:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:36:D9:E9:5A:8D:73:24:9C:D9:19:14:60:47:BD:C2:BC:18:27
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:2c:97:5a:e8:db:d2:b1:02:b7:95:52:c8:78:5d:9d:7c:
a4:4f:2c:75:ac:f6:74:3b:86:43:20:97:fc:3e:ac:cb:fb:9b:
b7:d5:f4:d3:ba:ff:31:f2:11:20:3e:57:b8:1e:4a:88:fb:ae:
4e:f0:21:0d:2e:82:b6:17:59:f4:88:fd:26:ce:0d:e1:b1:22:
f2:9d:5b:c8:9a:5b:0d:a9:4a:76:d6:7c:24:5a:ea:57:4a:e3:
2b:a6:af:31:d4:e8:e7:69:fd:ae:ce:e2:ba:0f:fe:cb:6e:18:
38:81:23:43:a8:d9:d3:7a:23:39:4d:c0:87:f9:46:95:52:51:
42:69:ab:e1:1b:2e:88:f9:a9:ef:8e:07:41:d1:be:d0:9e:65:
f3:13:4b:62:4a:94:b3:3e:04:ef:3e:06:30:68:72:63:8f:f5:
26:84:93:a4:65:36:76:01:08:8c:ae:1d:3f:d4:d4:dc:66:c8:
61:36:2f:6a:27:12:3b:46:fe:0a:72:37:68:ba:ee:1d:39:fe:
3b:7f:85:b5:7e:29:0c:a0:be:71:59:9b:a6:66:98:6f:8c:88:
36:03:8e:c3:98:80:4a:9c:c6:90:83:42:4f:06:8c:db:0e:a2:
d5:b0:08:11:89:db:b9:55:3c:5f:00:55:c5:45:90:97:83:ae:
b3:83:68:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRoW/BU16XpjgIfOWaaxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmE2ZmEwMDg5OGFkMzVlZTY3ZmI1YTVhMTkxMDVkYjZj
MWQxZWIwHhcNMjYwMzAyMDIwMDI4WhcNMjYwMzAzMDIwMDI4WjAzMTEwLwYDVQQD
EyhiZTE1MzZkOWU5NWE4ZDczMjQ5Y2Q5MTkxNDYwNDdiZGMyYmMxODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfeaYPs+q6KzDavxzGW1oAFNSivJ
RgdT96wQz4p0FY0yRUjL8CE1ptIluzerTyumU85xTjrUqU6yDmZP/sdAw1nSRNZm
90kMf8GqoJxeGV8MUHrIi/oUOR1BpA6Ceg4ADzEdpF0rzgk473BPTI+kKHd553kz
M2ki2/VlugeullOISFhAhmTehqKdBO+34Qx9RUWOaZFQRr+mVuGoU2jSE/zH7f48
doer7fUD/X8wqNH9zCcH5cbApKyrQjF2/BTD445MD7Ee+zBB2YBcEsnk5/RH0VFU
mxltZI+0f5InXWVIbMP1nny3ZZG7VnpOjvmZ3N0FB7ZPL96kEzgSol9P4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4VNtnpWo1zJJzZGRRgR73CvBgnMB8GA1UdIwQY
MBaAFEH6b6AImK017mf7WloZEF22wdHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMt
YWQ3YTAyZjE5NDZhLzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMtYWQ3YTAyZjE5NDZh
LzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1Esl1ro
29KxAreVUsh4XZ18pE8sdaz2dDuGQyCX/D6sy/ubt9X007r/MfIRID5XuB5KiPuu
TvAhDS6CthdZ9Ij9Js4N4bEi8p1byJpbDalKdtZ8JFrqV0rjK6avMdTo52n9rs7i
ug/+y24YOIEjQ6jZ03ojOU3Ah/lGlVJRQmmr4RsuiPmp744HQdG+0J5l8xNLYkqU
sz4E7z4GMGhyY4/1JoSTpGU2dgEIjK4dP9TU3GbIYTYvaicSO0b+CnI3aLruHTn+
O3+FtX4pDKC+cVmbpmaYb4yINgOOw5iASpzGkINCTwaM2w6i1bAIEYnbuVU8XwBV
xUWQl4Ous4NoYw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:41:07 2026 by rpki-client