Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: Vz/v62QpewIQZeU741mYzJdcjWj5S61hkPVTL91T1Dc=
Subject key identifier: 64:1F:21:06:86:B9:3D:1C:8C:48:FB:C2:1A:46:B6:A8:3F:6B:00:4F
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 019D29CE6E7EA8CCF55B507279E58C5377BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0C95
Signing time: Thu 26 Mar 2026 11:01:27 +0000
Manifest this update: Thu 26 Mar 2026 11:01:27 +0000
Manifest next update: Fri 27 Mar 2026 11:01:27 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: Tv5QPmODnHxu9hM91veAr13wX07EE9Jsq28ZkT7ClTc=)
2: y8jTWT9EJ8pkTtgwIGRTqM5h54U.roa (hash: K3I6cMPL0u+o1+6/3zyPMYD1BTrTNGIZvyZgHqN7zYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6e:7e:a8:cc:f5:5b:50:72:79:e5:8c:53:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Mar 26 11:01:27 2026 GMT
Not After : Mar 27 11:01:27 2026 GMT
Subject: CN=641f210686b93d1c8c48fbc21a46b6a83f6b004f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:f7:20:00:a2:e5:1f:81:60:fb:63:33:ca:
22:63:95:e3:95:e9:39:18:13:4a:de:cc:d1:8d:b6:
3e:65:ee:25:d5:c2:8e:a7:84:c1:32:14:59:78:6c:
82:b0:fb:4b:72:4b:9e:e5:76:08:e3:96:8e:ef:29:
a0:fd:ca:24:99:53:e0:97:34:8e:5c:15:d0:ec:30:
61:64:49:eb:95:8f:92:22:e6:35:06:2a:3f:1b:d0:
86:1e:9f:76:96:b3:d6:76:2c:99:44:09:a3:47:e3:
f0:dd:a1:f5:2b:f4:6b:3b:0e:0e:a0:bb:f8:32:ba:
21:a5:08:f1:34:6a:ba:af:6e:70:8f:bd:14:ec:b0:
e8:af:16:be:1f:7c:02:c2:68:f2:99:88:b4:2b:7a:
be:ab:84:ec:b6:11:4c:28:35:b6:b1:7d:ca:a6:03:
ab:3f:11:84:1f:24:ca:51:79:cf:b9:78:b0:f2:0f:
e1:2e:22:82:c2:e0:51:74:b4:50:b0:db:1f:67:da:
1f:b6:18:44:25:d1:a7:5c:50:63:e6:ea:bc:a1:46:
82:05:4b:73:63:97:6a:b3:ef:72:4a:9e:b4:46:9e:
0f:c9:5d:6e:04:ed:55:45:03:8f:6a:c3:e9:8d:1d:
64:79:ef:af:9d:f0:7f:6f:df:bd:f5:97:ae:bd:16:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1F:21:06:86:B9:3D:1C:8C:48:FB:C2:1A:46:B6:A8:3F:6B:00:4F
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:72:2f:df:9b:12:15:e3:3a:54:be:51:4d:a9:30:3d:3e:e9:
85:63:7d:2d:6c:71:d0:a4:8f:c6:f3:3f:70:3b:bb:7c:b9:f8:
08:64:19:fd:6a:11:83:26:7b:19:ad:6d:b7:70:32:79:20:8b:
e0:10:18:43:af:e7:76:fc:1a:23:5e:40:49:cc:8a:bf:df:ec:
7b:8d:34:37:6e:f5:4a:7d:4b:dc:2d:42:6e:01:a8:18:51:7e:
96:00:ed:78:52:f9:33:60:72:d3:f1:d4:5a:aa:56:b4:5b:8d:
c3:0c:f4:69:9a:f3:e1:16:c3:fc:f0:25:7e:42:5d:26:a3:ec:
2a:4e:0c:7c:7f:bc:ae:dc:0d:80:cd:e5:eb:59:ef:d8:27:32:
e0:13:59:33:2a:71:28:6b:78:6d:92:10:2c:47:e8:ac:80:48:
9f:d7:6f:70:cb:ab:93:64:0a:71:4e:b0:be:56:eb:6b:94:55:
fc:36:79:de:1a:d2:de:d0:cd:9e:b0:f8:62:88:5b:7c:71:6d:
f6:e3:b5:ea:ac:da:73:00:c1:8f:71:d2:67:4b:19:83:ed:7f:
bd:2a:de:36:f6:74:15:11:cf:e4:97:60:4c:52:55:54:e1:c9:
96:ed:3e:fe:2b:48:fb:d4:40:65:6e:b2:93:ce:15:cb:4a:b0:
f5:5c:38:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzm5+qMz1W1ByeeWMU3e9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm
OWY1ODAwHhcNMjYwMzI2MTEwMTI3WhcNMjYwMzI3MTEwMTI3WjAzMTEwLwYDVQQD
Eyg2NDFmMjEwNjg2YjkzZDFjOGM0OGZiYzIxYTQ2YjZhODNmNmIwMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl33IACi5R+BYPtjM8oiY5Xjlek5
GBNK3szRjbY+Ze4l1cKOp4TBMhRZeGyCsPtLckue5XYI45aO7ymg/cokmVPglzSO
XBXQ7DBhZEnrlY+SIuY1Bio/G9CGHp92lrPWdiyZRAmjR+Pw3aH1K/RrOw4OoLv4
MrohpQjxNGq6r25wj70U7LDorxa+H3wCwmjymYi0K3q+q4TsthFMKDW2sX3KpgOr
PxGEHyTKUXnPuXiw8g/hLiKCwuBRdLRQsNsfZ9ofthhEJdGnXFBj5uq8oUaCBUtz
Y5dqs+9ySp60Rp4PyV1uBO1VRQOPasPpjR1kee+vnfB/b9+99ZeuvRZt1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQfIQaGuT0cjEj7whpGtqg/awBPMB8GA1UdIwQY
MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt
MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi
LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3Iv35sS
FeM6VL5RTakwPT7phWN9LWxx0KSPxvM/cDu7fLn4CGQZ/WoRgyZ7Ga1tt3AyeSCL
4BAYQ6/ndvwaI15AScyKv9/se400N271Sn1L3C1CbgGoGFF+lgDteFL5M2By0/HU
WqpWtFuNwwz0aZrz4RbD/PAlfkJdJqPsKk4MfH+8rtwNgM3l61nv2Ccy4BNZMypx
KGt4bZIQLEforIBIn9dvcMurk2QKcU6wvlbra5RV/DZ53hrS3tDNnrD4YohbfHFt
9uO16qzacwDBj3HSZ0sZg+1/vSreNvZ0FRHP5JdgTFJVVOHJlu0+/itI+9RAZW6y
k84Vy0qw9Vw42w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:35 2026 by rpki-client