Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: ZHnqAYtvrTRYF1e7TSAKHJb+zxQCfVHGzWYqly0p1VU=
Subject key identifier: 55:72:EF:77:BB:3E:1C:53:89:EF:5A:E6:C7:9B:C2:DE:1B:46:64:B2
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019CAC476E3C138C446CA180F5E2B800D9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 185B
Signing time: Mon 02 Mar 2026 02:01:28 +0000
Manifest this update: Mon 02 Mar 2026 02:01:28 +0000
Manifest next update: Tue 03 Mar 2026 02:01:28 +0000
Files and hashes: 1: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: RwDtLmM04IkiDqqYPGHE6vvquXWMltpYs+hj4tG/3YI=)
2: SzUYKWffDLzD3KfG-tHUGCGVR50.roa (hash: HYko2OtpzwVD1bQm6/aHErTnPd1yFyteka+/4h0Bbfo=)
3: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
4: zrlAYru86sKNfdp41yXXW-vHWVA.roa (hash: OeRsLdUmyVY56D+kTeE010Uoy9wfuuFNR8ruGwb2Hwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6e:3c:13:8c:44:6c:a1:80:f5:e2:b8:00:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Mar 2 02:01:28 2026 GMT
Not After : Mar 3 02:01:28 2026 GMT
Subject: CN=5572ef77bb3e1c5389ef5ae6c79bc2de1b4664b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:fb:2b:17:e1:a4:28:ac:65:94:3c:87:b9:
d7:f3:d2:a1:21:63:33:3c:44:9c:a0:5f:f4:fd:e0:
e4:3f:60:ba:9c:8f:e8:5b:c4:03:be:2a:ac:2b:3a:
0e:8c:0d:02:8c:2e:77:c6:93:58:f9:9e:9e:15:ef:
9b:ec:54:bc:08:68:81:aa:3b:c1:dd:c4:01:44:5c:
74:0a:6e:e8:29:b4:96:81:6e:9b:3a:0e:e0:76:87:
23:a1:8c:41:9e:d9:fa:3b:77:30:ab:dc:2d:18:36:
b4:7e:7c:43:a8:99:a6:30:f9:3f:81:30:e7:30:9b:
29:62:84:84:7f:1b:62:4b:9c:5b:99:56:5e:0d:d3:
4e:9e:2e:de:53:06:99:0d:82:33:bd:18:10:14:d6:
37:b8:23:1a:6d:58:43:35:3d:2a:f0:fb:28:99:60:
39:4d:b2:08:74:d9:3f:91:27:c6:e9:7b:ae:bb:52:
be:d3:71:ba:5e:f4:35:80:a6:67:37:18:aa:10:c3:
21:2d:a8:df:9b:e5:ef:f1:ff:da:6d:63:78:6c:ac:
df:7e:8d:b1:55:89:74:53:92:9f:77:5a:c6:21:8f:
28:e3:f0:fc:ab:14:d6:33:9c:e3:c0:17:fe:bd:75:
5e:30:12:79:dd:fa:91:e2:be:ff:a9:d5:9f:65:c6:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:EF:77:BB:3E:1C:53:89:EF:5A:E6:C7:9B:C2:DE:1B:46:64:B2
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2c:2b:aa:d9:02:2a:9e:37:8a:bb:0c:dd:98:9c:48:26:dd:
e9:a6:e3:7a:b4:d1:25:ee:34:c2:25:9e:78:66:97:95:ba:20:
60:5c:9f:7f:f2:e2:06:39:dc:8c:44:b2:1e:40:5e:15:46:54:
62:f4:44:1c:3b:f1:ba:ce:d2:45:07:f7:aa:00:38:e9:55:16:
b9:b4:d6:64:e3:49:6b:0f:a2:b8:64:b6:b9:c1:80:ba:7a:45:
56:5a:3f:70:08:c4:3b:ef:0c:68:d3:cd:5e:42:e0:5b:34:12:
72:ed:97:c2:76:6c:b7:08:59:c6:ff:12:69:74:39:d6:1d:f9:
c6:b1:9f:b8:f7:2a:1e:71:b6:b0:b0:a3:c9:77:2a:14:3a:65:
8f:58:17:a2:b4:32:0e:db:c9:28:00:42:f0:7e:3a:7f:83:dd:
92:97:3b:ba:4f:10:8d:83:cd:85:ca:1f:2c:dd:b5:b2:7e:a1:
f5:df:77:4c:8b:3b:3d:7b:57:dd:0c:33:08:3b:f1:20:bc:0a:
f4:94:fc:2f:90:17:46:75:f4:80:b6:80:c5:f5:59:ba:ce:3c:
47:a0:1a:be:4d:96:87:e0:2d:f4:5d:3f:86:40:c9:99:c1:b8:
03:ee:47:40:85:7a:f4:8d:95:1a:00:9f:81:b7:05:ff:21:c1:
3d:e4:a5:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR248E4xEbKGA9eK4ANmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk
ZDFiZmIwHhcNMjYwMzAyMDIwMTI4WhcNMjYwMzAzMDIwMTI4WjAzMTEwLwYDVQQD
Eyg1NTcyZWY3N2JiM2UxYzUzODllZjVhZTZjNzliYzJkZTFiNDY2NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR77KxfhpCisZZQ8h7nX89KhIWMz
PEScoF/0/eDkP2C6nI/oW8QDviqsKzoOjA0CjC53xpNY+Z6eFe+b7FS8CGiBqjvB
3cQBRFx0Cm7oKbSWgW6bOg7gdocjoYxBntn6O3cwq9wtGDa0fnxDqJmmMPk/gTDn
MJspYoSEfxtiS5xbmVZeDdNOni7eUwaZDYIzvRgQFNY3uCMabVhDNT0q8PsomWA5
TbIIdNk/kSfG6Xuuu1K+03G6XvQ1gKZnNxiqEMMhLajfm+Xv8f/abWN4bKzffo2x
VYl0U5Kfd1rGIY8o4/D8qxTWM5zjwBf+vXVeMBJ53fqR4r7/qdWfZcaY8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVy73e7PhxTie9a5sebwt4bRmSyMB8GA1UdIwQY
MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt
MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl
LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSwrqtkC
Kp43irsM3ZicSCbd6abjerTRJe40wiWeeGaXlbogYFyff/LiBjncjESyHkBeFUZU
YvREHDvxus7SRQf3qgA46VUWubTWZONJaw+iuGS2ucGAunpFVlo/cAjEO+8MaNPN
XkLgWzQScu2XwnZstwhZxv8SaXQ51h35xrGfuPcqHnG2sLCjyXcqFDplj1gXorQy
DtvJKABC8H46f4Pdkpc7uk8QjYPNhcofLN21sn6h9d93TIs7PXtX3QwzCDvxILwK
9JT8L5AXRnX0gLaAxfVZus48R6Aavk2Wh+At9F0/hkDJmcG4A+5HQIV69I2VGgCf
gbcF/yHBPeSl2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:54 2026 by rpki-client