Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File: QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier: uoMZBOqU0x4LGX3KKlK92IiQIR/e/IBTAi68pkJEha0=
Subject key identifier: DD:22:41:77:66:46:23:C3:0F:59:83:2D:B1:93:19:94:F2:1A:23:5C
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 019CAC1001935A77084990E8D0AA3DF66390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number: 08
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: Yq3PFXCrGmEbV9mmhQLcsUNMqqsEadZ7eqzEOq1pow8=)
2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:01:93:5a:77:08:49:90:e8:d0:aa:3d:f6:63:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=dd224177664623c30f59832db1931994f21a235c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:80:f6:9e:3f:42:77:75:13:24:33:87:80:
e8:36:ba:77:11:b8:ee:45:33:a3:aa:ac:a2:ce:37:
81:3b:b2:59:5b:f7:24:68:66:38:2e:48:11:1e:f0:
6b:61:fa:68:3d:28:5c:8d:c5:05:9e:a3:ec:72:19:
9c:69:a0:3d:f0:6b:0d:e4:60:a3:f7:d8:90:00:d1:
5b:3f:92:4a:5d:f2:7b:84:33:32:1c:74:a6:2b:1b:
54:ff:7a:05:13:9d:d5:1f:52:b9:f7:80:c1:ec:98:
90:38:64:57:1a:83:72:28:44:61:d9:47:57:b2:e8:
e4:9b:b2:9c:0b:d5:67:e6:52:b9:08:95:a0:d1:7b:
c5:72:d4:f8:92:aa:ed:c8:ce:df:3b:4b:2e:cf:21:
94:b9:c5:0a:3c:83:64:38:37:c2:7b:dc:b3:cd:83:
f3:0d:d5:dc:3b:93:5a:bc:0e:9f:a5:f4:91:a9:d8:
9e:fd:67:65:02:37:72:9f:21:13:07:d0:8b:b1:17:
26:88:bc:d8:54:92:33:0b:3b:bc:ca:a1:5e:9b:9e:
83:3e:be:17:da:e8:42:59:ea:c4:a7:cb:9a:fd:d4:
43:50:5c:96:da:60:80:8b:bb:c1:5a:7e:88:b1:7d:
65:ec:82:c6:e7:8c:67:db:e3:db:4b:8f:23:fc:9c:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:41:77:66:46:23:C3:0F:59:83:2D:B1:93:19:94:F2:1A:23:5C
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:57:c1:40:5a:5f:7d:e6:56:92:22:21:3f:bf:ab:ca:3b:
1a:88:b3:ed:ca:88:f1:9c:cf:8a:26:92:07:41:df:ec:ff:7c:
a6:31:0e:e8:e9:bd:5a:84:86:8d:64:2a:dc:5f:56:c8:2c:5e:
0c:aa:fa:69:d6:71:79:3b:40:03:53:07:0b:d1:2c:0a:b8:62:
c5:5e:98:cf:03:26:1b:98:45:35:74:f8:78:c4:8c:24:7f:38:
fa:28:f5:aa:77:31:82:35:f2:39:b1:fb:58:bc:9b:1d:8f:ff:
3e:43:28:eb:bb:d4:91:63:fd:b2:b7:7e:ea:29:4a:63:bd:98:
25:5e:bb:68:d1:71:80:92:5a:fe:95:54:4e:d2:23:16:b5:d9:
1f:21:f1:5a:61:50:39:c9:fb:79:b5:68:c7:c4:bc:40:4a:70:
46:4e:08:c1:22:04:eb:89:e9:e0:41:0d:61:29:97:a3:d8:2c:
12:04:e0:35:1c:9e:ed:30:10:80:e1:a4:ee:60:10:a9:e7:aa:
3d:80:5f:b1:ab:ae:cf:85:3b:5c:0c:08:d4:b5:e7:e1:f5:e6:
40:14:8a:d3:c6:2b:b2:3e:ab:b0:0e:7a:ed:16:03:48:f6:69:
e1:fb:b0:2a:4c:2f:53:a3:6a:fa:34:86:23:8d:80:4f:85:a8:
3c:dc:ad:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEAGTWncISZDo0Ko99mOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmJiM2UyY2FkN2IxMDAyNTZlMWM0YTdmNTU1YjZhMzhk
ODc1MjYwHhcNMjYwMzAyMDEwMDU1WhcNMjYwMzAzMDEwMDU1WjAzMTEwLwYDVQQD
EyhkZDIyNDE3NzY2NDYyM2MzMGY1OTgzMmRiMTkzMTk5NGYyMWEyMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD+A9p4/Qnd1EyQzh4DoNrp3Ebju
RTOjqqyizjeBO7JZW/ckaGY4LkgRHvBrYfpoPShcjcUFnqPschmcaaA98GsN5GCj
99iQANFbP5JKXfJ7hDMyHHSmKxtU/3oFE53VH1K594DB7JiQOGRXGoNyKERh2UdX
sujkm7KcC9Vn5lK5CJWg0XvFctT4kqrtyM7fO0suzyGUucUKPINkODfCe9yzzYPz
DdXcO5NavA6fpfSRqdie/WdlAjdynyETB9CLsRcmiLzYVJIzCzu8yqFem56DPr4X
2uhCWerEp8ua/dRDUFyW2mCAi7vBWn6IsX1l7ILG54xn2+PbS48j/Jz41wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0iQXdmRiPDD1mDLbGTGZTyGiNcMB8GA1UdIwQY
MBaAFEBrs+LK17EAJW4cSn9VW2o42HUmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjBhZGYtNjYzYS00MDJiLWIyNmMt
Y2ZjMDFjOGZmOWVkLzEvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZjBhZGYtNjYzYS00MDJiLWIyNmMtY2ZjMDFjOGZmOWVk
LzEvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfhXwUBa
X33mVpIiIT+/q8o7Goiz7cqI8ZzPiiaSB0Hf7P98pjEO6Om9WoSGjWQq3F9WyCxe
DKr6adZxeTtAA1MHC9EsCrhixV6YzwMmG5hFNXT4eMSMJH84+ij1qncxgjXyObH7
WLybHY//PkMo67vUkWP9srd+6ilKY72YJV67aNFxgJJa/pVUTtIjFrXZHyHxWmFQ
Ocn7ebVox8S8QEpwRk4IwSIE64np4EENYSmXo9gsEgTgNRye7TAQgOGk7mAQqeeq
PYBfsauuz4U7XAwI1LXn4fXmQBSK08Yrsj6rsA567RYDSPZp4fuwKkwvU6Nq+jSG
I42AT4WoPNytuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:12 2026 by rpki-client