Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: vY14IzBvxhm7kf6azWgWAujKtoZlW0QQTxhIj3rShhM=
Subject key identifier: 4B:B4:6F:7F:64:02:01:D0:0B:91:00:D4:67:A2:CA:2A:94:64:5E:A2
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 019D265F81A2228A2885973D7AF24FEC7CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 1388
Signing time: Wed 25 Mar 2026 19:01:26 +0000
Manifest this update: Wed 25 Mar 2026 19:01:26 +0000
Manifest next update: Thu 26 Mar 2026 19:01:26 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: hc0Yn8VGtT8ZNceC2Apetzr8Kg8thSuYygiL1z1bVis=)
2: nHM0DFEdkMMw68BfCu8SxI-WKpo.roa (hash: lV1ZePN72sIOtMuPDcQdRq/kQ5D5g83a0m3tXbtpunw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:81:a2:22:8a:28:85:97:3d:7a:f2:4f:ec:7c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Mar 25 19:01:26 2026 GMT
Not After : Mar 26 19:01:26 2026 GMT
Subject: CN=4bb46f7f640201d00b9100d467a2ca2a94645ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:54:87:83:b4:5d:e3:a4:5a:1a:9b:07:c1:
97:e4:e3:30:0a:d4:41:61:e5:13:fd:2c:4d:58:e1:
86:77:14:68:44:ab:be:76:8d:57:c8:5f:e7:49:81:
2b:a0:38:06:8d:96:a3:bd:c8:72:c3:e0:e6:8f:de:
1a:b6:f8:b8:f5:79:70:3b:92:db:35:bc:5c:82:96:
ca:b5:a2:2e:7f:d9:76:60:19:c2:d5:28:e5:23:dc:
cd:e7:21:43:13:9d:1a:dc:d0:8b:a1:21:a9:63:36:
73:b2:13:a9:01:e0:15:53:4e:bf:54:75:31:96:4f:
c4:65:50:75:1d:4a:5a:e2:16:b3:26:19:24:ab:36:
b6:08:3a:f6:78:d3:6d:6b:77:18:ea:b5:ab:00:88:
51:71:00:76:9b:48:2d:10:de:e5:df:45:52:6c:dd:
34:b4:b3:19:0c:ff:89:28:91:b0:fe:97:6b:c0:d3:
41:b2:49:94:70:2c:cf:b6:b0:4c:96:28:a3:47:78:
51:cd:3a:89:17:e8:51:e3:3f:ca:d2:04:dd:b2:a2:
10:c2:28:7b:8f:b5:11:a1:9a:70:d8:b1:59:d7:10:
f2:d6:3a:3a:16:b7:96:ec:4e:90:6e:91:3c:51:c5:
63:c7:d9:3f:3b:fa:3e:26:1e:87:a2:42:06:5e:89:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B4:6F:7F:64:02:01:D0:0B:91:00:D4:67:A2:CA:2A:94:64:5E:A2
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7e:11:ab:7c:ba:60:9c:90:1b:4d:7d:b6:90:6a:ef:12:57:
7d:15:ac:64:57:48:cb:ef:bb:91:67:d0:68:90:6c:37:6a:2c:
70:6f:70:c9:53:86:b6:ed:1d:0b:b8:94:b5:83:ab:12:14:04:
c6:ad:a6:f4:f2:06:1d:1b:1c:86:23:42:8a:65:d0:63:d5:27:
65:c3:1a:04:c8:a9:40:01:48:3f:5e:7a:1a:b9:53:a6:e3:ba:
51:de:3a:35:98:05:20:6d:4b:6e:3e:32:25:56:7e:e4:89:32:
59:8c:9e:3e:cc:24:06:50:04:0c:a1:8c:6e:e7:82:e4:5c:05:
d5:d4:75:b7:f4:cc:97:57:24:06:65:b1:01:7d:27:df:de:e6:
20:23:1f:7b:68:8b:16:45:bb:2a:c9:a7:9a:2b:c2:64:49:43:
f0:4b:8a:92:0b:fc:ca:07:9a:d2:9d:57:d0:e1:b9:71:4f:49:
33:14:5b:60:87:aa:62:e3:b7:b7:7a:0f:47:61:f8:92:41:77:
7f:ec:8b:5d:37:ee:9e:a7:17:89:c4:5a:b0:d9:a1:81:42:92:
d5:ea:88:da:11:c0:f3:66:89:61:90:d9:7c:52:05:cb:af:af:
11:20:ad:1f:6c:0f:54:df:21:77:1c:a5:a5:90:95:bf:e8:45:
58:5e:23:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX4GiIooohZc9evJP7HyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmZhZDk3YTU4Y2I1MGNiZmM4NGVjODY1YWYzZDcxYzhi
MTg1YWYwHhcNMjYwMzI1MTkwMTI2WhcNMjYwMzI2MTkwMTI2WjAzMTEwLwYDVQQD
Eyg0YmI0NmY3ZjY0MDIwMWQwMGI5MTAwZDQ2N2EyY2EyYTk0NjQ1ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaNUh4O0XeOkWhqbB8GX5OMwCtRB
YeUT/SxNWOGGdxRoRKu+do1XyF/nSYEroDgGjZajvchyw+Dmj94atvi49XlwO5Lb
NbxcgpbKtaIuf9l2YBnC1SjlI9zN5yFDE50a3NCLoSGpYzZzshOpAeAVU06/VHUx
lk/EZVB1HUpa4hazJhkkqza2CDr2eNNta3cY6rWrAIhRcQB2m0gtEN7l30VSbN00
tLMZDP+JKJGw/pdrwNNBskmUcCzPtrBMliijR3hRzTqJF+hR4z/K0gTdsqIQwih7
j7URoZpw2LFZ1xDy1jo6FreW7E6QbpE8UcVjx9k/O/o+Jh6HokIGXokfswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu0b39kAgHQC5EA1GeiyiqUZF6iMB8GA1UdIwQY
MBaAFEG/rZeljLUMv8hOyGWvPXHIsYWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAt
YmY3OGJiODVhNjllLzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAtYmY3OGJiODVhNjll
LzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH4Rq3y6
YJyQG019tpBq7xJXfRWsZFdIy++7kWfQaJBsN2oscG9wyVOGtu0dC7iUtYOrEhQE
xq2m9PIGHRschiNCimXQY9UnZcMaBMipQAFIP156GrlTpuO6Ud46NZgFIG1Lbj4y
JVZ+5IkyWYyePswkBlAEDKGMbueC5FwF1dR1t/TMl1ckBmWxAX0n397mICMfe2iL
FkW7KsmnmivCZElD8EuKkgv8ygea0p1X0OG5cU9JMxRbYIeqYuO3t3oPR2H4kkF3
f+yLXTfunqcXicRasNmhgUKS1eqI2hHA82aJYZDZfFIFy6+vESCtH2wPVN8hdxyl
pZCVv+hFWF4jeg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:30 2026 by rpki-client