Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: TyIziWpJgUYkED34EQgYbtNH+ac46r03VFbv9uREIZM=
Subject key identifier: 32:C2:1A:06:0B:87:50:B5:03:5B:29:DE:E3:D7:76:F3:35:82:1D:BB
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 019D2961122A185A104B7AA206A92C387D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:02:00 +0000
Manifest this update: Thu 26 Mar 2026 09:02:00 +0000
Manifest next update: Fri 27 Mar 2026 09:02:00 +0000
Files and hashes: 1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: XG2+/gUx+0X7M1jk5dIi7sGwyCTkbJnjno1nP9U7esg=)
2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:12:2a:18:5a:10:4b:7a:a2:06:a9:2c:38:7d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Mar 26 09:02:00 2026 GMT
Not After : Mar 27 09:02:00 2026 GMT
Subject: CN=32c21a060b8750b5035b29dee3d776f335821dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6e:4a:85:bf:b1:bc:bf:f5:9d:d4:18:5c:9f:
af:bf:29:4c:10:c6:df:13:ba:d2:e7:4a:15:c5:f9:
5d:75:1a:ab:b8:bb:92:3a:ba:99:67:5a:c7:8a:2c:
cc:04:61:1e:94:2b:cf:7c:6b:db:0c:06:54:81:16:
30:ec:75:dc:4e:63:1d:b2:15:e8:cb:04:ab:7c:ba:
44:e5:54:20:6a:bc:c1:23:db:6f:07:de:fa:9b:32:
82:51:a0:83:f9:98:3d:89:17:2e:c3:45:21:e4:34:
e4:92:92:32:d7:12:84:64:fa:2d:47:e6:6e:5b:60:
cf:17:3b:55:70:fe:eb:fe:65:82:61:42:58:7c:ba:
ec:a0:51:7e:87:55:40:d4:e7:65:a6:4e:10:78:92:
c8:03:38:67:e5:ad:89:2d:f2:ce:84:4b:59:46:5c:
4a:19:99:3c:ef:25:a5:a3:53:9d:c2:de:0f:a6:86:
b2:39:7d:3f:11:da:30:19:30:01:10:bc:e6:cc:d8:
7f:af:51:f0:3e:d1:6a:be:db:4b:27:ce:7d:eb:84:
86:e2:e6:db:02:11:91:ef:a8:6e:98:82:6a:cb:20:
1f:96:5a:73:d5:51:6f:6f:0b:da:cc:a2:da:6b:fd:
07:86:8c:92:ec:15:01:d3:30:9e:63:7b:87:40:fc:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:1A:06:0B:87:50:B5:03:5B:29:DE:E3:D7:76:F3:35:82:1D:BB
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f8:2b:ba:bd:7e:a0:bb:09:61:9d:31:8f:1e:f2:00:b9:8e:
24:c8:2e:cb:cd:9a:dc:f4:e3:94:d1:ea:40:b2:8d:7b:58:fc:
e3:f5:dc:64:ad:e0:bc:28:36:f8:a1:1b:94:63:8a:34:bf:00:
1b:d9:79:30:a8:56:8e:6a:9e:33:07:4d:d9:f1:69:63:48:a9:
2b:de:eb:e6:14:81:39:72:d6:de:a9:b8:ed:e3:9a:8b:fa:36:
58:bc:f6:70:69:39:0d:b8:3b:e9:2b:d4:58:05:7b:04:7f:8a:
57:7b:cd:44:5d:a9:bf:89:e8:8e:19:17:71:b1:9c:d4:6f:0d:
69:f8:3d:5c:b0:20:61:9a:d3:00:8c:7b:50:25:5b:c9:9c:6e:
45:12:91:03:c4:af:ad:28:a0:ba:53:70:3b:7c:6e:1d:43:62:
ca:ed:6b:db:91:3a:ba:2f:e3:67:30:6e:f0:11:35:bb:b5:3e:
15:07:f1:69:25:a7:d8:8e:50:2b:05:42:b0:e4:3f:5c:f2:47:
44:16:5b:45:6d:36:45:6b:b4:97:46:cc:d1:b9:33:eb:34:c4:
e5:cf:64:1a:7d:46:67:56:a6:26:b4:44:ef:99:cb:5f:17:d2:
fb:77:ab:c4:25:72:4d:6d:d2:12:69:00:29:0c:e4:78:0a:85:
91:ed:b2:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYRIqGFoQS3qiBqksOH0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjYwMzI2MDkwMjAwWhcNMjYwMzI3MDkwMjAwWjAzMTEwLwYDVQQD
EygzMmMyMWEwNjBiODc1MGI1MDM1YjI5ZGVlM2Q3NzZmMzM1ODIxZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA925Khb+xvL/1ndQYXJ+vvylMEMbf
E7rS50oVxflddRqruLuSOrqZZ1rHiizMBGEelCvPfGvbDAZUgRYw7HXcTmMdshXo
ywSrfLpE5VQgarzBI9tvB976mzKCUaCD+Zg9iRcuw0Uh5DTkkpIy1xKEZPotR+Zu
W2DPFztVcP7r/mWCYUJYfLrsoFF+h1VA1Odlpk4QeJLIAzhn5a2JLfLOhEtZRlxK
GZk87yWlo1Odwt4PpoayOX0/EdowGTABELzmzNh/r1HwPtFqvttLJ85964SG4ubb
AhGR76humIJqyyAfllpz1VFvbwvazKLaa/0HhoyS7BUB0zCeY3uHQPyJoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLCGgYLh1C1A1sp3uPXdvM1gh27MB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/grur1+
oLsJYZ0xjx7yALmOJMguy82a3PTjlNHqQLKNe1j84/XcZK3gvCg2+KEblGOKNL8A
G9l5MKhWjmqeMwdN2fFpY0ipK97r5hSBOXLW3qm47eOai/o2WLz2cGk5Dbg76SvU
WAV7BH+KV3vNRF2pv4nojhkXcbGc1G8Nafg9XLAgYZrTAIx7UCVbyZxuRRKRA8Sv
rSigulNwO3xuHUNiyu1r25E6ui/jZzBu8BE1u7U+FQfxaSWn2I5QKwVCsOQ/XPJH
RBZbRW02RWu0l0bM0bkz6zTE5c9kGn1GZ1amJrRE75nLXxfS+3erxCVyTW3SEmkA
KQzkeAqFke2ynw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:53:21 2026 by rpki-client