Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: dBHqfFZ9Hbzl+7P5863YKSpjN+axM4iCOZnc4o42TIQ=
Subject key identifier: 4C:EC:04:C5:80:1A:16:70:FF:01:19:52:31:EE:AA:13:74:DE:67:77
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 019D2704104409A4D98E02D4335162C2E5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 1816
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: HxPl6QmTmLGAXUkL3jyUy2K7uGqBmfmj3lIy7lmF5rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:10:44:09:a4:d9:8e:02:d4:33:51:62:c2:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=4cec04c5801a1670ff01195231eeaa1374de6777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:11:cb:e0:0a:16:23:6f:42:56:ff:79:01:
7e:1b:ae:fa:a1:58:da:7d:57:64:c2:11:a4:d5:c6:
bc:56:49:f9:00:e6:61:02:63:b4:86:1f:f9:21:d7:
98:e5:52:c3:30:05:21:53:e0:13:34:79:c1:0f:51:
bb:6f:2f:38:89:da:26:56:a4:be:01:c3:9b:a6:5e:
dd:cb:47:b7:89:92:02:86:aa:42:9f:54:85:56:f4:
fa:88:eb:24:44:3e:83:4c:a1:34:e5:88:e5:ab:93:
bc:3c:b3:b5:67:c7:fe:d2:8d:0e:fd:e8:e0:9c:41:
36:10:ac:b5:25:26:a7:35:9f:db:8b:bc:98:e6:7e:
09:a0:27:7f:28:f1:e1:8f:4b:03:1d:d0:ef:db:9b:
48:39:05:1b:79:a8:6e:2a:b9:f8:95:2d:18:93:f4:
96:cc:14:72:0a:a9:07:29:5a:07:a7:2b:0e:9f:92:
32:30:e7:7a:63:da:86:d7:7f:d5:ca:fd:f3:61:ef:
e3:77:5b:d6:2f:d8:c6:23:27:e2:0c:bf:41:fe:9e:
23:83:ca:82:ea:26:96:29:b4:01:70:81:20:a2:fb:
84:67:8a:d9:ee:5c:1b:42:74:75:e9:01:00:9d:92:
5a:25:ee:4a:27:f7:b2:e8:55:1f:05:e1:a9:1d:29:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:04:C5:80:1A:16:70:FF:01:19:52:31:EE:AA:13:74:DE:67:77
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:30:b5:46:ee:88:1b:e8:c1:52:74:ee:73:f9:0b:02:81:33:
7c:bc:90:f5:5d:86:c4:c6:0f:94:cb:79:cb:5b:41:c0:24:cb:
a0:f1:61:e5:a1:ea:6c:fb:6e:c7:0a:e0:74:35:05:41:ed:cc:
8d:1d:96:69:6c:9b:9d:71:51:27:45:2b:b5:b4:86:83:a6:93:
b5:90:d4:61:2a:0e:e1:2e:d3:64:27:58:c5:bb:c9:5d:0f:18:
8c:dd:83:ed:45:5d:a8:04:07:bd:f3:e7:da:c1:3d:ca:84:0a:
df:76:46:0d:a8:4d:00:76:3a:82:55:77:0d:c6:4f:5c:e4:90:
14:33:82:8b:09:a8:e6:39:ab:c2:ff:92:88:c9:a0:55:69:0e:
87:23:4b:3d:7c:05:7e:bc:cc:bc:8f:23:f8:88:a8:97:21:e3:
23:c3:dd:d8:10:37:3e:27:23:ff:4f:6e:f0:c0:cc:f3:8f:d7:
56:21:10:fb:aa:c5:99:62:c0:6a:6b:cf:6b:26:d0:34:81:59:
6c:05:6d:1e:63:19:02:b7:5a:45:05:da:0e:84:a1:03:7d:35:
4b:ac:85:cc:8e:72:f0:25:fe:16:9b:57:af:22:b8:c2:d0:7f:
b8:db:1a:80:b2:06:16:df:2d:78:bb:6f:2b:ce:46:d2:2f:a2:
31:70:ca:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBBBECaTZjgLUM1FiwuXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4
MWFiM2EwHhcNMjYwMzI1MjIwMTEwWhcNMjYwMzI2MjIwMTEwWjAzMTEwLwYDVQQD
Eyg0Y2VjMDRjNTgwMWExNjcwZmYwMTE5NTIzMWVlYWExMzc0ZGU2Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8IRy+AKFiNvQlb/eQF+G676oVja
fVdkwhGk1ca8Vkn5AOZhAmO0hh/5IdeY5VLDMAUhU+ATNHnBD1G7by84idomVqS+
AcObpl7dy0e3iZIChqpCn1SFVvT6iOskRD6DTKE05Yjlq5O8PLO1Z8f+0o0O/ejg
nEE2EKy1JSanNZ/bi7yY5n4JoCd/KPHhj0sDHdDv25tIOQUbeahuKrn4lS0Yk/SW
zBRyCqkHKVoHpysOn5IyMOd6Y9qG13/Vyv3zYe/jd1vWL9jGIyfiDL9B/p4jg8qC
6iaWKbQBcIEgovuEZ4rZ7lwbQnR16QEAnZJaJe5KJ/ey6FUfBeGpHSmCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzsBMWAGhZw/wEZUjHuqhN03md3MB8GA1UdIwQY
MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt
MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm
LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzC1Ru6I
G+jBUnTuc/kLAoEzfLyQ9V2GxMYPlMt5y1tBwCTLoPFh5aHqbPtuxwrgdDUFQe3M
jR2WaWybnXFRJ0UrtbSGg6aTtZDUYSoO4S7TZCdYxbvJXQ8YjN2D7UVdqAQHvfPn
2sE9yoQK33ZGDahNAHY6glV3DcZPXOSQFDOCiwmo5jmrwv+SiMmgVWkOhyNLPXwF
frzMvI8j+IiolyHjI8Pd2BA3Picj/09u8MDM84/XViEQ+6rFmWLAamvPaybQNIFZ
bAVtHmMZArdaRQXaDoShA301S6yFzI5y8CX+FptXryK4wtB/uNsagLIGFt8teLtv
K85G0i+iMXDK3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:18 2026 by rpki-client