Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: AqA8uRxevreDKyo5RMiD1LpeWCS4Fv4aUQBB+99RpH8=
Subject key identifier: 2C:68:EC:A9:84:12:37:11:AE:25:4F:2E:9B:70:36:90:83:75:00:77
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 019CAB6B35954A3CB89B8692A3BFBA20D7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 1340
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: pMUQw+TgWPDvMlAQihSo8MhelSJZZLbXTZPSpnhydeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:35:95:4a:3c:b8:9b:86:92:a3:bf:ba:20:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=2c68eca984123711ae254f2e9b70369083750077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:71:21:6f:eb:ab:04:bf:5d:9b:a4:ef:74:
29:5b:36:55:a2:10:d7:ef:a4:e4:db:73:e5:0c:c6:
f1:0e:f3:eb:95:ba:5b:32:6c:14:a0:c5:bf:1c:2e:
3c:e1:6e:68:63:d6:d0:0a:cf:61:97:12:2f:24:13:
85:72:1b:75:d8:82:37:ec:4e:8f:f7:99:5e:8c:bc:
1e:a9:c1:36:82:59:95:9e:50:99:9c:00:c0:6f:69:
5e:38:ff:1a:2c:42:28:30:a1:29:13:4e:8c:22:81:
e1:86:97:e5:ae:ff:37:42:d1:8a:22:8f:bd:04:02:
b2:7b:ad:cb:2c:c5:48:69:6e:d1:35:96:5f:cc:43:
34:81:01:27:0e:ed:f0:3b:87:a1:5b:f9:6f:98:8a:
f2:d6:69:60:d6:fb:50:b5:7d:af:60:33:1c:bf:80:
c4:e9:f1:29:c8:38:58:05:c1:15:91:bf:bf:8e:30:
80:a3:ed:fd:98:b7:68:59:e0:b3:63:62:5c:29:f0:
ef:eb:d6:95:69:00:44:cd:05:c3:22:3a:7f:07:bb:
4e:80:4c:b5:bb:77:f6:8f:ab:d3:4c:03:db:70:37:
11:2f:d0:b3:11:e5:a4:50:d5:40:c9:43:96:31:92:
99:55:bf:3b:84:e8:11:eb:66:b9:bf:b0:f4:c8:ee:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:68:EC:A9:84:12:37:11:AE:25:4F:2E:9B:70:36:90:83:75:00:77
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:01:57:03:31:8c:95:74:89:70:1f:51:7e:8c:a1:44:d5:54:
19:08:62:07:c2:c8:f3:48:b7:5a:a5:8e:cf:8d:ab:fc:37:e7:
1f:ff:a0:9e:4c:9d:e9:17:b4:8b:ac:46:f5:98:a3:3b:d5:ef:
9a:2c:0f:86:e2:f8:51:cd:42:ed:db:88:65:26:bc:32:b1:18:
7c:44:ca:a2:a7:00:92:d8:7f:0f:5c:41:bb:ed:7e:8e:bc:93:
df:e1:ed:a5:6e:92:fc:73:96:5a:1e:7e:fc:ce:e0:7f:6b:0d:
e5:42:bd:a4:dd:28:b7:81:16:da:3a:a0:2a:bc:06:ae:0a:26:
d6:46:2f:6c:81:1c:e2:37:7e:bf:64:34:1d:4a:4a:7b:d3:07:
fe:06:29:01:7e:0c:4a:71:1f:9a:b1:ea:d2:b7:8a:19:a6:4d:
cb:20:bc:be:c6:0a:c4:96:5e:2c:a8:91:ed:c0:95:2a:76:e5:
1a:61:59:91:5e:de:dd:5b:1a:0d:c6:e4:ff:0c:f3:9f:55:4f:
0a:6e:61:29:f8:41:05:3f:04:66:9b:8d:cb:16:fc:d1:d5:4f:
3c:b3:71:0b:75:50:6b:53:82:ff:21:5e:16:cc:d2:ea:68:ac:
68:81:a1:77:4f:29:a6:1d:4f:af:14:ff:d4:7f:63:4b:99:a4:
52:b3:84:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazWVSjy4m4aSo7+6INfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNWE2MWI1OGMxZDUyZGU1MjJlMDQxMDA5Y2JmY2QxZjdl
NTJiN2MwHhcNMjYwMzAxMjIwMDU1WhcNMjYwMzAyMjIwMDU1WjAzMTEwLwYDVQQD
EygyYzY4ZWNhOTg0MTIzNzExYWUyNTRmMmU5YjcwMzY5MDgzNzUwMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LVxIW/rqwS/XZuk73QpWzZVohDX
76Tk23PlDMbxDvPrlbpbMmwUoMW/HC484W5oY9bQCs9hlxIvJBOFcht12II37E6P
95lejLweqcE2glmVnlCZnADAb2leOP8aLEIoMKEpE06MIoHhhpflrv83QtGKIo+9
BAKye63LLMVIaW7RNZZfzEM0gQEnDu3wO4ehW/lvmIry1mlg1vtQtX2vYDMcv4DE
6fEpyDhYBcEVkb+/jjCAo+39mLdoWeCzY2JcKfDv69aVaQBEzQXDIjp/B7tOgEy1
u3f2j6vTTAPbcDcRL9CzEeWkUNVAyUOWMZKZVb87hOgR62a5v7D0yO6x8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxo7KmEEjcRriVPLptwNpCDdQB3MB8GA1UdIwQY
MBaAFEBaYbWMHVLeUi4EEAnL/NH35St8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MTMwNmEtZjFkZC00MDQwLTgzNTct
ZmUwMTMzY2RhNTM1LzEvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy84MTMwNmEtZjFkZC00MDQwLTgzNTctZmUwMTMzY2RhNTM1
LzEvUUZwaHRZd2RVdDVTTGdRUUNjdjgwZmZsSzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAFXAzGM
lXSJcB9RfoyhRNVUGQhiB8LI80i3WqWOz42r/DfnH/+gnkyd6Re0i6xG9ZijO9Xv
miwPhuL4Uc1C7duIZSa8MrEYfETKoqcAkth/D1xBu+1+jryT3+HtpW6S/HOWWh5+
/M7gf2sN5UK9pN0ot4EW2jqgKrwGrgom1kYvbIEc4jd+v2Q0HUpKe9MH/gYpAX4M
SnEfmrHq0reKGaZNyyC8vsYKxJZeLKiR7cCVKnblGmFZkV7e3VsaDcbk/wzzn1VP
Cm5hKfhBBT8EZpuNyxb80dVPPLNxC3VQa1OC/yFeFszS6misaIGhd08pph1PrxT/
1H9jS5mkUrOEOQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:10 2026 by rpki-client