Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier: yPEHUfPKXVAdRK0SdOA4D+ImiyAeBtb1vyhi1XyImn0=
Subject key identifier: 4B:DD:E3:3D:AF:A3:7D:82:FE:FD:86:2E:59:9F:FA:13:1A:80:2F:9F
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 019F916D07E59AF2525CB9B25230A2F2B539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number: 150A
Signing time: Fri 24 Jul 2026 00:01:09 +0000
Manifest this update: Fri 24 Jul 2026 00:01:09 +0000
Manifest next update: Sat 25 Jul 2026 00:01:09 +0000
Files and hashes: 1: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: bPbstuqZm1a/0RRQ5M314Os5Y5cPt7Uvq8IHMn9qzh0=)
2: dzhGd3IrijK6XFNXLPo3QbQe60A.roa (hash: DzSQmk0X+ZHEQPIeJMm37I+zInIF580tNRunoudFrPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:07:e5:9a:f2:52:5c:b9:b2:52:30:a2:f2:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Jul 24 00:01:09 2026 GMT
Not After : Jul 25 00:01:09 2026 GMT
Subject: CN=4bdde33dafa37d82fefd862e599ffa131a802f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:88:da:fe:17:e3:21:b1:3e:2d:7d:a5:7f:
bc:5b:68:d1:60:19:cb:36:f3:ae:7e:8a:77:ac:59:
bc:af:08:25:4c:f1:89:53:8f:d3:70:01:90:40:af:
94:13:7a:e1:75:f2:a7:6f:38:ed:3e:24:94:c1:82:
ea:ff:da:c3:c6:08:ef:ab:4d:be:e2:e2:d0:03:66:
1d:ae:c3:28:62:ef:24:17:ed:c8:de:b1:81:5d:42:
94:2b:d2:59:79:0a:0b:fd:1c:6c:f9:af:a6:bf:d5:
8c:57:49:f9:b0:57:24:d8:a5:51:b0:d9:ff:86:3a:
1a:ae:38:6d:50:0d:9a:b6:69:db:2b:58:3b:2a:99:
eb:d1:26:57:ac:26:d0:d2:c0:90:97:a2:8e:4c:2e:
e1:8a:54:4c:eb:b2:5c:65:90:a5:84:fa:03:ad:28:
75:97:1c:b6:e6:f6:e7:52:ee:a4:8d:91:96:25:4f:
98:69:17:b3:a8:5b:5f:82:ee:e7:12:df:f2:07:5d:
e4:d9:a3:7d:c1:eb:2e:ac:3d:7c:87:12:8a:e9:fb:
92:b8:b6:e3:a7:6c:79:e7:d5:fc:39:19:32:f4:61:
b5:28:e7:b1:a8:ad:c1:16:3f:10:36:a0:22:aa:21:
a9:4f:28:c0:59:da:b4:60:8a:fe:f8:1d:11:a5:c5:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:E3:3D:AF:A3:7D:82:FE:FD:86:2E:59:9F:FA:13:1A:80:2F:9F
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6a:4c:f0:5b:f2:0e:2a:67:45:37:85:96:ee:2c:f4:dd:1c:
07:70:a7:5e:ca:70:f4:92:08:34:d2:4f:ef:05:f6:0c:ca:ca:
fb:ad:30:97:27:93:41:9b:6b:04:68:ac:c9:4f:4c:0b:93:c9:
fe:9c:f8:ea:23:d4:63:76:3a:eb:d8:26:4a:b3:cf:8b:05:ba:
ab:c3:21:b9:85:b1:39:4d:8d:1c:9c:e9:58:c3:c2:7c:a7:72:
01:35:1f:5c:65:df:2c:c3:df:b3:87:a9:34:14:77:bb:93:bc:
22:b8:3c:c2:ac:39:11:d8:a0:09:4d:f1:25:04:c4:9f:6f:7f:
23:34:73:bf:3e:65:17:d5:62:b0:46:80:b6:32:50:f5:cc:e4:
74:76:1f:a0:73:fd:45:c3:79:4f:9d:b7:01:3c:41:9f:ec:fe:
6d:86:df:86:24:47:50:41:ac:a1:f2:8f:96:91:e2:14:6b:d8:
d2:26:fe:8f:7b:9f:3e:c2:1a:d7:14:0a:c5:da:16:9b:38:b5:
d5:a5:13:46:cb:52:ba:d2:73:d1:db:85:1d:d0:90:85:d5:94:
ee:67:86:1d:e2:91:57:7b:81:00:ad:d8:5a:af:a0:4c:f2:13:
41:17:36:ce:fa:da:66:54:34:5d:10:b1:5a:43:99:bd:60:a7:
99:c1:b8:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbQflmvJSXLmyUjCi8rU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDBkMDZlMmE2OWEzNjY0YjZhYmNmZTIyYmQyZDA2YjUz
MzY1NjQwHhcNMjYwNzI0MDAwMTA5WhcNMjYwNzI1MDAwMTA5WjAzMTEwLwYDVQQD
Eyg0YmRkZTMzZGFmYTM3ZDgyZmVmZDg2MmU1OTlmZmExMzFhODAyZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38OI2v4X4yGxPi19pX+8W2jRYBnL
NvOufop3rFm8rwglTPGJU4/TcAGQQK+UE3rhdfKnbzjtPiSUwYLq/9rDxgjvq02+
4uLQA2YdrsMoYu8kF+3I3rGBXUKUK9JZeQoL/Rxs+a+mv9WMV0n5sFck2KVRsNn/
hjoarjhtUA2atmnbK1g7Kpnr0SZXrCbQ0sCQl6KOTC7hilRM67JcZZClhPoDrSh1
lxy25vbnUu6kjZGWJU+YaRezqFtfgu7nEt/yB13k2aN9wesurD18hxKK6fuSuLbj
p2x559X8ORky9GG1KOexqK3BFj8QNqAiqiGpTyjAWdq0YIr++B0RpcUAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvd4z2vo32C/v2GLlmf+hMagC+fMB8GA1UdIwQY
MBaAFEMA0G4qaaNmS2q8/iK9LQa1M2VkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYt
MjkwYTNmYzRiYjYwLzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYtMjkwYTNmYzRiYjYw
LzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmpM8Fvy
DipnRTeFlu4s9N0cB3CnXspw9JIINNJP7wX2DMrK+60wlyeTQZtrBGisyU9MC5PJ
/pz46iPUY3Y669gmSrPPiwW6q8MhuYWxOU2NHJzpWMPCfKdyATUfXGXfLMPfs4ep
NBR3u5O8Irg8wqw5EdigCU3xJQTEn29/IzRzvz5lF9VisEaAtjJQ9czkdHYfoHP9
RcN5T523ATxBn+z+bYbfhiRHUEGsofKPlpHiFGvY0ib+j3ufPsIa1xQKxdoWmzi1
1aUTRstSutJz0duFHdCQhdWU7meGHeKRV3uBAK3YWq+gTPITQRc2zvraZlQ0XRCx
WkOZvWCnmcG48w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:44 2026 by rpki-client