Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: gp+ZUPQ4NrBf/uamhxOFRTU2C6elPA7J3tuW/t/Qryg=
Subject key identifier: 46:52:FA:22:B1:84:BB:84:F7:D4:9D:F2:D9:F3:93:05:4C:75:13:35
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019D2771B835C26A72F62134D6E2F24982FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0F46
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: 9JPeh9ZjsQBXXIlVSnVQyTfkF3RNdNwPoI0pH4rIjc8=)
2: pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa (hash: mTXSXjoGjQ2auSz+bUbQx6Ihly9Sl/4nc+Gp/ABHXAA=)
3: qV4gR6WxquLOT56bwfJU7xHJRNM.roa (hash: n0V/wW/NrF8CEjksLZ9W1qLNO23nhbEeWjftcQzvrnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b8:35:c2:6a:72:f6:21:34:d6:e2:f2:49:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=4652fa22b184bb84f7d49df2d9f393054c751335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:4d:c8:80:1b:ba:4b:2f:ad:4d:4a:ff:26:
10:75:4d:58:5c:30:1d:63:3c:d7:9d:c6:1d:6a:54:
c0:c4:97:23:a9:41:3a:08:98:62:c8:11:11:cc:8a:
e7:a8:b3:37:36:b3:3e:69:99:1b:7c:8e:5a:9c:07:
f4:2e:2a:9e:4a:3a:4f:e8:08:af:e3:7b:02:b5:b9:
a3:2b:28:a4:28:e1:e5:5a:83:6b:6b:75:11:4d:0d:
1a:02:a4:6b:f6:74:3c:20:49:4d:d0:a6:a5:ac:00:
05:fa:0d:1e:8e:32:59:a5:18:cc:39:48:b1:a4:1e:
26:50:3b:85:d4:33:03:24:d1:17:79:7b:06:5d:dd:
9f:c5:18:ae:96:fa:eb:53:ef:74:89:d4:7d:78:24:
6d:6f:ea:5e:1b:5b:df:0b:fb:c7:71:d1:54:aa:2c:
55:41:a1:f1:c4:08:51:a6:96:92:4a:95:64:8e:5f:
64:93:3d:36:c0:79:74:6b:20:8e:03:84:37:f2:e4:
b0:ef:26:86:fb:2d:bd:dd:09:1f:8f:d6:e6:f0:bc:
d9:1c:33:69:74:8f:96:51:43:6f:d2:8c:fb:0f:c8:
80:7e:64:40:ce:99:f3:31:78:6d:a6:68:25:66:b1:
54:37:24:13:7e:d4:76:b2:26:b4:9c:16:d4:51:86:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:FA:22:B1:84:BB:84:F7:D4:9D:F2:D9:F3:93:05:4C:75:13:35
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:67:7c:c0:9f:38:31:c5:62:99:b4:94:45:97:7f:64:68:
ef:25:d7:28:6f:77:0c:54:d3:30:71:4f:c7:b9:53:51:af:19:
ed:07:c7:40:3d:30:e4:ae:46:4e:c6:ec:25:b0:b5:36:83:10:
8f:21:c1:2c:d7:6b:08:c4:f4:57:8f:4e:f5:90:9e:47:50:a4:
71:a4:9a:5d:1a:0a:ac:cd:ef:9f:a3:8f:a8:2d:50:60:3c:ea:
14:6d:f8:9e:9c:58:ff:fc:25:07:32:d3:a7:b1:ae:ca:29:59:
8c:75:76:75:c5:df:48:d5:cb:d5:30:8d:79:cf:32:84:21:9c:
d3:08:09:36:08:09:31:10:c7:d5:fa:8e:66:42:59:7b:02:9b:
dd:dc:43:93:00:06:eb:04:67:c2:35:dd:7d:e6:7a:3d:14:61:
71:b0:f8:c9:d3:9e:66:be:17:db:cf:bf:a0:da:9d:2b:62:07:
cb:9d:41:c6:af:7e:f0:6f:c3:41:46:e6:2a:c8:b5:94:f5:4c:
33:dc:b6:80:ba:26:2d:6e:f5:da:b4:a5:cb:e7:c6:c2:6f:57:
71:0a:0a:5f:d2:65:ab:c4:1b:67:7f:45:cd:85:6f:a9:fb:5c:
1f:b3:8b:92:b0:f3:3d:81:0a:7d:b3:db:e8:f7:ce:95:31:92:
28:24:f0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncbg1wmpy9iE01uLySYL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTk1MjA0Njc3MGY1NGU4YmUxZmQ3ZDY3MzEzMjI2NWFk
NzBmYTgwHhcNMjYwMzI2MDAwMDU3WhcNMjYwMzI3MDAwMDU3WjAzMTEwLwYDVQQD
Eyg0NjUyZmEyMmIxODRiYjg0ZjdkNDlkZjJkOWYzOTMwNTRjNzUxMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwtNyIAbuksvrU1K/yYQdU1YXDAd
YzzXncYdalTAxJcjqUE6CJhiyBERzIrnqLM3NrM+aZkbfI5anAf0LiqeSjpP6Aiv
43sCtbmjKyikKOHlWoNra3URTQ0aAqRr9nQ8IElN0KalrAAF+g0ejjJZpRjMOUix
pB4mUDuF1DMDJNEXeXsGXd2fxRiulvrrU+90idR9eCRtb+peG1vfC/vHcdFUqixV
QaHxxAhRppaSSpVkjl9kkz02wHl0ayCOA4Q38uSw7yaG+y293Qkfj9bm8LzZHDNp
dI+WUUNv0oz7D8iAfmRAzpnzMXhtpmglZrFUNyQTftR2sia0nBbUUYZGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZS+iKxhLuE99Sd8tnzkwVMdRM1MB8GA1UdIwQY
MBaAFEEZUgRncPVOi+H9fWcxMiZa1w+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUt
OGI5MWJjNjFlN2MzLzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUtOGI5MWJjNjFlN2Mz
LzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn1nfMCf
ODHFYpm0lEWXf2Ro7yXXKG93DFTTMHFPx7lTUa8Z7QfHQD0w5K5GTsbsJbC1NoMQ
jyHBLNdrCMT0V49O9ZCeR1CkcaSaXRoKrM3vn6OPqC1QYDzqFG34npxY//wlBzLT
p7GuyilZjHV2dcXfSNXL1TCNec8yhCGc0wgJNggJMRDH1fqOZkJZewKb3dxDkwAG
6wRnwjXdfeZ6PRRhcbD4ydOeZr4X28+/oNqdK2IHy51Bxq9+8G/DQUbmKsi1lPVM
M9y2gLomLW712rSly+fGwm9XcQoKX9Jlq8QbZ39FzYVvqftcH7OLkrDzPYEKfbPb
6PfOlTGSKCTwVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:35 2026 by rpki-client