Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: DmqYPcXV2c6rMEzrM98vMMdhy2vONG/dBeWS0yTas2k=
Subject key identifier: 62:0E:7F:E1:94:E2:91:F5:7E:36:99:B7:6E:10:C1:20:34:C8:D7:0A
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 019CA97CEA1EF9B019B61F0337C31010EB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 13:01:01 +0000
Manifest this update: Sun 01 Mar 2026 13:01:01 +0000
Manifest next update: Mon 02 Mar 2026 13:01:01 +0000
Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: GK7o7W7dCRuEvHFrawWl1fNmEf+JrczemVggADKCevM=)
2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=)
3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=)
4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ea:1e:f9:b0:19:b6:1f:03:37:c3:10:10:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Mar 1 13:01:01 2026 GMT
Not After : Mar 2 13:01:01 2026 GMT
Subject: CN=620e7fe194e291f57e3699b76e10c12034c8d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:b1:1a:45:d4:c6:4d:96:f5:8f:cd:33:eb:
fd:05:f5:01:cf:12:15:cf:2c:44:f7:f2:96:92:56:
88:9a:a4:c1:36:bf:b1:6a:df:a1:b9:48:f5:4f:3e:
b5:15:5c:d8:c9:d0:c5:7e:04:a7:f9:13:00:ed:c3:
d7:95:12:dd:e0:2c:c0:b3:ec:26:df:26:5e:3b:80:
3e:bd:23:2f:b0:55:16:60:23:9c:a7:6d:57:95:9a:
65:e1:4f:64:f0:49:3b:d8:1d:17:c3:fa:eb:8a:d9:
26:ed:8a:54:95:c8:bb:ba:66:a2:0d:7a:c2:e1:05:
1a:37:86:43:4a:c1:c2:a5:e1:4a:3e:89:c3:35:9b:
7d:01:50:77:eb:b4:bd:8a:bf:0e:39:49:78:1a:0d:
f2:9a:0d:ad:3a:6d:d1:d9:92:c0:74:97:ee:0d:65:
ab:cc:90:73:b4:29:7e:7c:b9:d1:66:6a:db:e4:55:
8f:d7:c2:11:71:8e:ba:41:b8:5c:13:38:45:21:73:
15:66:18:a2:96:41:fa:29:8c:37:cf:18:23:c1:18:
7d:11:90:0f:d2:a1:8b:87:fd:72:38:4b:08:86:a8:
0c:54:51:46:86:3a:9b:ec:17:6e:0b:5a:bd:df:c6:
66:2a:bc:10:a5:30:a0:ca:fc:de:c0:84:60:b2:60:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:7F:E1:94:E2:91:F5:7E:36:99:B7:6E:10:C1:20:34:C8:D7:0A
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:85:b7:cf:14:99:e4:a2:d9:0d:e4:af:c3:a9:f4:bd:37:d8:
df:59:6f:7c:8e:6a:e9:8b:01:de:43:c9:db:1c:eb:f2:d0:dd:
24:0e:76:7d:97:76:67:fd:05:10:38:82:74:50:f5:10:af:c5:
d3:21:c4:35:e0:10:88:0d:4b:ce:27:38:d6:04:b7:f8:75:51:
ff:8f:2c:a0:2d:1b:00:4f:4c:19:c9:c4:8f:d4:c4:33:17:b2:
25:49:b3:98:97:b8:45:cb:f1:ae:81:67:c0:19:7d:70:d6:18:
84:cb:e3:12:08:6c:ba:06:eb:d9:4e:f4:6b:ae:25:ac:c3:ac:
66:b0:eb:bc:24:86:d9:32:f8:41:34:d6:28:37:18:8e:a0:e5:
f1:ee:ac:dc:c5:0c:07:55:67:1b:95:43:d4:a0:0a:9b:ec:61:
2e:42:2f:e9:cc:85:48:24:34:f4:df:c4:ef:74:2f:83:85:ee:
72:fb:99:08:ff:fb:4a:0d:c5:38:20:0a:29:83:7e:ef:8f:93:
f7:eb:47:0e:7a:aa:3e:b7:c5:8d:1e:c7:71:3a:c3:7f:ee:7c:
53:5a:38:ff:d4:99:5a:ac:f5:4e:47:5b:77:f4:78:4d:c0:b4:
cd:d7:e5:78:14:5d:e1:c4:a9:37:aa:c8:24:f7:2f:6f:ac:74:
3d:95:ab:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfOoe+bAZth8DN8MQEOtiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi
NTUwMTMwHhcNMjYwMzAxMTMwMTAxWhcNMjYwMzAyMTMwMTAxWjAzMTEwLwYDVQQD
Eyg2MjBlN2ZlMTk0ZTI5MWY1N2UzNjk5Yjc2ZTEwYzEyMDM0YzhkNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlCxGkXUxk2W9Y/NM+v9BfUBzxIV
zyxE9/KWklaImqTBNr+xat+huUj1Tz61FVzYydDFfgSn+RMA7cPXlRLd4CzAs+wm
3yZeO4A+vSMvsFUWYCOcp21XlZpl4U9k8Ek72B0Xw/rritkm7YpUlci7umaiDXrC
4QUaN4ZDSsHCpeFKPonDNZt9AVB367S9ir8OOUl4Gg3ymg2tOm3R2ZLAdJfuDWWr
zJBztCl+fLnRZmrb5FWP18IRcY66QbhcEzhFIXMVZhiilkH6KYw3zxgjwRh9EZAP
0qGLh/1yOEsIhqgMVFFGhjqb7BduC1q938ZmKrwQpTCgyvzewIRgsmCTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIOf+GU4pH1fjaZt24QwSA0yNcKMB8GA1UdIwQY
MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt
ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl
LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYW3zxSZ
5KLZDeSvw6n0vTfY31lvfI5q6YsB3kPJ2xzr8tDdJA52fZd2Z/0FEDiCdFD1EK/F
0yHENeAQiA1Lzic41gS3+HVR/48soC0bAE9MGcnEj9TEMxeyJUmzmJe4RcvxroFn
wBl9cNYYhMvjEghsugbr2U70a64lrMOsZrDrvCSG2TL4QTTWKDcYjqDl8e6s3MUM
B1VnG5VD1KAKm+xhLkIv6cyFSCQ09N/E73Qvg4XucvuZCP/7Sg3FOCAKKYN+74+T
9+tHDnqqPrfFjR7HcTrDf+58U1o4/9SZWqz1Tkdbd/R4TcC0zdfleBRd4cSpN6rI
JPcvb6x0PZWrpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:23 2026 by rpki-client