Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: hf6KN3gVr6CHnBCu6NopdRb6O942JW+cgrtpaC7y/vo=
Subject key identifier: FA:04:B5:B4:1B:9A:B3:64:3B:7A:CB:F3:BB:80:C1:AB:31:A9:B7:07
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 01A0FD58F7A7D666C1C319292CF5A281939D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 036A
Signing time: Fri 02 Oct 2026 16:01:01 +0000
Manifest this update: Fri 02 Oct 2026 16:01:01 +0000
Manifest next update: Sat 03 Oct 2026 16:01:01 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: y0ppWtCmGk8aOJGv7cB81a8OphU0vSno0BNca8menJc=)
2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:58:f7:a7:d6:66:c1:c3:19:29:2c:f5:a2:81:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Oct 2 16:01:01 2026 GMT
Not After : Oct 3 16:01:01 2026 GMT
Subject: CN=fa04b5b41b9ab3643b7acbf3bb80c1ab31a9b707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:41:2b:d4:44:b1:a4:9d:58:89:37:29:76:
31:75:c7:d2:ea:2a:0e:9d:56:9c:3d:b4:a8:36:dd:
62:50:f0:eb:54:02:8f:b1:b2:5a:83:1a:e5:a5:14:
1e:eb:95:f7:43:cd:c3:06:76:3f:b2:46:1e:74:db:
74:9f:5b:66:bf:e0:c5:33:b9:05:0c:9c:91:18:5c:
e6:d9:67:7e:2c:60:31:67:8c:75:78:18:e7:ef:0c:
68:28:d4:e8:77:14:46:ce:f8:8e:ce:b7:25:be:4f:
55:61:b6:47:85:7d:85:71:8d:1c:fa:0c:bc:8f:c1:
65:73:80:56:d4:20:58:93:40:34:8a:cd:7d:d2:e7:
3a:59:be:1b:98:69:1b:13:f6:7a:1d:4c:dc:cc:f3:
3d:ae:62:fc:5d:c8:d9:af:c2:87:ed:ae:35:47:17:
47:54:be:4b:51:21:08:a9:8c:75:a0:5e:22:79:10:
92:f6:8e:e4:44:ef:cd:6e:1e:0d:5e:b8:13:17:82:
61:d6:b2:f6:16:53:da:3c:c6:02:af:1d:95:ba:4a:
e0:13:4d:47:c8:cd:d9:b0:37:72:cc:66:b4:55:6a:
67:20:86:40:67:90:c5:21:cb:0f:07:be:9e:ea:92:
10:eb:d0:1e:59:e4:a3:38:ad:01:a0:c3:bb:1a:cf:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:04:B5:B4:1B:9A:B3:64:3B:7A:CB:F3:BB:80:C1:AB:31:A9:B7:07
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:36:0d:89:b6:e5:af:2c:75:35:e5:b0:44:af:33:a8:35:
60:72:92:a8:1b:da:70:d5:bc:a8:94:4f:9e:d4:19:95:e8:21:
5d:38:4f:7d:3b:f6:ed:f3:bd:c5:d1:12:ac:4f:25:27:61:10:
6a:f6:d4:bc:e1:9f:ce:f4:c0:b5:8e:8d:3d:4b:7c:b8:61:00:
43:80:a4:ff:52:5a:a7:30:b2:81:6e:06:be:0f:21:98:f5:b1:
57:43:7f:02:27:70:1c:9b:eb:34:26:88:3a:12:8e:e8:fe:97:
0f:e7:18:a4:3a:05:13:fb:ea:23:ee:23:af:81:b7:69:86:fd:
c7:42:68:74:00:16:5a:ac:a7:b5:ad:b1:20:f6:0a:d7:fb:74:
ad:7e:f9:07:32:e5:8e:3b:02:87:cd:49:0a:68:45:fc:de:17:
b0:5a:2e:27:1e:70:f3:31:ce:61:83:05:22:46:d6:d2:65:6b:
f7:a5:d2:c1:b2:ac:0e:9b:91:c0:45:89:e8:a3:38:3a:15:9d:
a5:b7:e4:9b:c6:1c:0d:f4:4d:33:3c:cc:b4:66:2c:3b:26:ab:
13:55:58:b6:b9:fc:49:95:82:ea:c1:b7:46:c0:01:ca:fa:62:
55:09:f3:c1:31:9b:e2:a1:f5:39:91:15:cd:b3:82:84:d9:3f:
ad:74:4b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD9WPen1mbBwxkpLPWigZOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMjA2YzNlNTY4ZGI3OGE3NmNiYWIxNDJlMGU1YmY0ZjY4
MmVmZTYwHhcNMjYxMDAyMTYwMTAxWhcNMjYxMDAzMTYwMTAxWjAzMTEwLwYDVQQD
EyhmYTA0YjViNDFiOWFiMzY0M2I3YWNiZjNiYjgwYzFhYjMxYTliNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSdBK9REsaSdWIk3KXYxdcfS6ioO
nVacPbSoNt1iUPDrVAKPsbJagxrlpRQe65X3Q83DBnY/skYedNt0n1tmv+DFM7kF
DJyRGFzm2Wd+LGAxZ4x1eBjn7wxoKNTodxRGzviOzrclvk9VYbZHhX2FcY0c+gy8
j8Flc4BW1CBYk0A0is190uc6Wb4bmGkbE/Z6HUzczPM9rmL8XcjZr8KH7a41RxdH
VL5LUSEIqYx1oF4ieRCS9o7kRO/Nbh4NXrgTF4Jh1rL2FlPaPMYCrx2VukrgE01H
yM3ZsDdyzGa0VWpnIIZAZ5DFIcsPB76e6pIQ69AeWeSjOK0BoMO7Gs/fyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoEtbQbmrNkO3rL87uAwasxqbcHMB8GA1UdIwQY
MBaAFEMgbD5WjbeKdsurFC4OW/T2gu/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQt
YjMyZmRiYTE4ZTFjLzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQtYjMyZmRiYTE4ZTFj
LzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeys2DYm2
5a8sdTXlsESvM6g1YHKSqBvacNW8qJRPntQZleghXThPfTv27fO9xdESrE8lJ2EQ
avbUvOGfzvTAtY6NPUt8uGEAQ4Ck/1JapzCygW4Gvg8hmPWxV0N/AidwHJvrNCaI
OhKO6P6XD+cYpDoFE/vqI+4jr4G3aYb9x0JodAAWWqynta2xIPYK1/t0rX75BzLl
jjsCh81JCmhF/N4XsFouJx5w8zHOYYMFIkbW0mVr96XSwbKsDpuRwEWJ6KM4OhWd
pbfkm8YcDfRNMzzMtGYsOyarE1VYtrn8SZWC6sG3RsAByvpiVQnzwTGb4qH1OZEV
zbOChNk/rXRLMA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 00:25:19 2026 by rpki-client