Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
File: QTsVW4BGJkf4WUaogk0in-6q--Y.mft (raw, json)
Hash identifier: AiHPLeKpng6JwqUn8vo8sZb3B3+j1T3d+aUqBXWKIVM=
Subject key identifier: 6D:75:35:B8:0B:13:57:0C:21:AB:49:C8:9A:54:F4:4D:64:D2:59:09
Authority key identifier: 41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6
Certificate issuer: /CN=413b155b80462647f85946a8824d229feeaafbe6
Certificate serial: 019D25F1BA4EFE2E8BEE4DFCFFA92B120DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
Manifest number: 0407
Signing time: Wed 25 Mar 2026 17:01:31 +0000
Manifest this update: Wed 25 Mar 2026 17:01:31 +0000
Manifest next update: Thu 26 Mar 2026 17:01:31 +0000
Files and hashes: 1: QTsVW4BGJkf4WUaogk0in-6q--Y.crl (hash: 7rCcOCt1euOo1j1FPk5OyYCTcK0oDiU7IpQbZ6HPFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ba:4e:fe:2e:8b:ee:4d:fc:ff:a9:2b:12:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413b155b80462647f85946a8824d229feeaafbe6
Validity
Not Before: Mar 25 17:01:31 2026 GMT
Not After : Mar 26 17:01:31 2026 GMT
Subject: CN=6d7535b80b13570c21ab49c89a54f44d64d25909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:4e:2b:57:a0:d1:9b:87:76:3a:b6:d4:3e:
77:70:89:9c:f8:ba:71:61:64:0a:3d:5f:bd:26:62:
f4:9d:84:d1:be:f1:15:5b:87:4f:76:27:51:db:b4:
14:48:f2:4e:eb:9c:59:1c:4e:e8:33:99:d3:de:6c:
eb:91:d3:b7:e6:5b:a8:09:68:a6:5a:e6:68:97:e2:
66:d6:f7:32:be:72:b4:d6:3e:37:c6:f8:11:1b:52:
cc:81:fd:9f:c7:15:60:31:d6:36:cd:10:12:30:c0:
fc:63:cd:9e:38:47:ea:f5:33:84:8e:17:c2:9a:65:
c3:95:08:52:76:23:10:5c:21:09:ff:75:64:6c:88:
c2:16:c3:a4:c7:13:6a:e3:e5:2e:2d:38:0e:7f:27:
55:19:f2:ee:1b:0c:5b:b0:82:9a:68:62:d1:90:f0:
23:37:97:e3:90:d2:f1:2c:63:be:c7:6d:c5:06:73:
05:35:ab:a1:9b:31:50:d1:40:79:e6:a5:9d:31:aa:
93:86:db:1a:b6:5c:47:12:ee:da:ab:cd:90:40:fd:
ac:62:f5:d2:bf:bd:dc:7e:70:95:f3:fe:f5:cb:5f:
e7:36:52:47:3b:d3:8d:4a:1a:5e:98:53:a5:dc:a2:
76:b9:03:a9:fd:c8:3a:d6:d4:dc:43:cc:d2:43:7d:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:35:B8:0B:13:57:0C:21:AB:49:C8:9A:54:F4:4D:64:D2:59:09
X509v3 Authority Key Identifier:
keyid:41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:11:4c:46:25:98:de:07:f4:26:9a:fc:88:5b:92:b6:e0:b0:
74:f0:59:92:11:0a:67:1e:2e:0f:56:77:87:3c:b5:58:ad:b4:
08:4e:ba:34:a6:63:82:a3:2f:18:9b:eb:9e:e3:5e:c2:c0:8f:
b1:2f:71:12:0d:0e:78:31:4a:5e:3f:08:52:d2:8a:be:17:91:
94:1c:cc:ac:9d:87:6a:0c:04:9e:a3:9a:7d:10:10:34:c9:0e:
9e:11:6a:ae:d9:28:a8:b9:da:98:b3:a0:20:e7:66:48:66:32:
b2:26:7e:15:42:bb:d5:9e:83:28:88:70:7f:ca:49:d2:67:11:
06:eb:fe:f2:99:4c:d5:c6:b4:c7:ee:9a:18:53:e9:62:8e:a2:
f9:4d:d9:98:1c:33:bb:9c:f6:a0:fc:79:9d:ce:41:ed:8e:ac:
f8:cf:f5:51:e5:e4:4f:6c:a5:0d:a1:a8:96:be:96:b5:d9:4f:
03:e9:f2:0b:28:af:fb:04:43:cf:08:0c:21:da:08:11:af:50:
f9:bd:bc:a5:6b:2d:04:28:03:fc:67:40:2b:f7:63:c5:dd:fd:
d8:fd:87:11:3a:87:5a:3e:40:5c:8e:ef:cf:6e:48:36:8a:52:
8e:2c:7f:b5:07:ea:fc:f2:36:fd:6a:fa:3e:d9:fd:eb:7b:4e:
25:eb:09:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8bpO/i6L7k38/6krEg36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxM2IxNTViODA0NjI2NDdmODU5NDZhODgyNGQyMjlmZWVh
YWZiZTYwHhcNMjYwMzI1MTcwMTMxWhcNMjYwMzI2MTcwMTMxWjAzMTEwLwYDVQQD
Eyg2ZDc1MzViODBiMTM1NzBjMjFhYjQ5Yzg5YTU0ZjQ0ZDY0ZDI1OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx9OK1eg0ZuHdjq21D53cImc+Lpx
YWQKPV+9JmL0nYTRvvEVW4dPdidR27QUSPJO65xZHE7oM5nT3mzrkdO35luoCWim
WuZol+Jm1vcyvnK01j43xvgRG1LMgf2fxxVgMdY2zRASMMD8Y82eOEfq9TOEjhfC
mmXDlQhSdiMQXCEJ/3VkbIjCFsOkxxNq4+UuLTgOfydVGfLuGwxbsIKaaGLRkPAj
N5fjkNLxLGO+x23FBnMFNauhmzFQ0UB55qWdMaqThtsatlxHEu7aq82QQP2sYvXS
v73cfnCV8/71y1/nNlJHO9ONShpemFOl3KJ2uQOp/cg61tTcQ8zSQ317vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG11NbgLE1cMIatJyJpU9E1k0lkJMB8GA1UdIwQY
MBaAFEE7FVuARiZH+FlGqIJNIp/uqvvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZDYzYmYtMmIwZS00YzliLTk4YjUt
NGEyNTFjYmVjNzkxLzEvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZDYzYmYtMmIwZS00YzliLTk4YjUtNGEyNTFjYmVjNzkx
LzEvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxFMRiWY
3gf0Jpr8iFuStuCwdPBZkhEKZx4uD1Z3hzy1WK20CE66NKZjgqMvGJvrnuNewsCP
sS9xEg0OeDFKXj8IUtKKvheRlBzMrJ2HagwEnqOafRAQNMkOnhFqrtkoqLnamLOg
IOdmSGYysiZ+FUK71Z6DKIhwf8pJ0mcRBuv+8plM1ca0x+6aGFPpYo6i+U3ZmBwz
u5z2oPx5nc5B7Y6s+M/1UeXkT2ylDaGolr6WtdlPA+nyCyiv+wRDzwgMIdoIEa9Q
+b28pWstBCgD/GdAK/djxd392P2HETqHWj5AXI7vz25INopSjix/tQfq/PI2/Wr6
Ptn963tOJesJBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:19 2026 by rpki-client