Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: cyPPDijFAb8rLbMD2r0WluVGY6QjD0qtlUjyI7K4OyM=
Subject key identifier: EE:35:64:2D:DE:5C:19:F9:FA:BD:4A:08:F7:27:4D:8C:91:6D:C3:56
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 019D2703C0B90A268393E52D6E1EBCAA76D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: j86Ae5cqT7Be3BhFShAv1oYXXM7Ztt5meboljM4MjMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c0:b9:0a:26:83:93:e5:2d:6e:1e:bc:aa:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=ee35642dde5c19f9fabd4a08f7274d8c916dc356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:b4:62:aa:50:a5:0c:68:8b:fb:ec:3c:0a:
67:97:7c:ee:02:27:96:81:d9:b2:a4:1c:dc:42:6d:
a1:75:5d:ad:e2:62:94:59:72:a7:7d:d3:de:1b:c3:
26:98:5d:ad:cc:eb:90:09:b2:14:24:57:86:bb:00:
e0:f6:b4:e8:f3:ba:b7:2b:01:3c:31:2f:80:ad:b2:
4f:a8:ce:ed:68:53:e2:ce:19:57:bc:b5:75:a5:94:
50:85:4f:96:5a:52:76:09:67:34:15:65:5a:06:0a:
5d:11:3d:80:f1:98:eb:26:34:06:d1:e4:4f:04:43:
dd:73:e4:2a:d3:6f:d9:c8:54:f0:68:e6:d7:0f:f1:
f1:50:01:6a:8a:5d:17:87:03:31:1b:fc:e0:f3:e6:
65:bb:a4:e4:c5:4a:db:32:7a:fb:2c:5e:d4:c2:eb:
34:96:12:be:ab:94:10:3a:4d:e2:0b:5f:a8:14:cc:
4f:5b:0a:d1:ab:21:93:ee:be:83:c3:68:22:09:55:
83:9b:b6:df:0f:e1:7f:cc:ba:b0:97:d6:37:83:aa:
af:72:54:ed:ed:13:35:6b:9b:07:4d:61:6b:6d:00:
9e:0a:b7:89:4f:97:80:25:01:a0:5c:5e:b8:cc:fb:
b3:b2:da:dd:da:63:1a:85:5f:c0:eb:a4:ec:7e:2b:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:64:2D:DE:5C:19:F9:FA:BD:4A:08:F7:27:4D:8C:91:6D:C3:56
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d3:42:d7:df:45:7f:4f:c3:6e:7c:6f:f1:1e:3a:11:d4:3f:
48:d6:f7:0a:3e:ad:a8:80:e6:73:1f:14:13:dc:00:b8:2f:a5:
ec:b9:f9:8b:43:a6:fd:cf:cc:83:4d:94:68:c8:52:85:43:6e:
93:7b:a9:49:1d:28:49:05:60:31:b9:b8:64:63:bf:da:ed:d0:
9f:f6:14:0f:f1:7b:35:4a:d9:2f:96:1e:d9:52:e0:a3:f7:6c:
b1:1b:22:84:02:54:a2:2e:3c:f6:db:3a:63:17:44:47:4e:32:
14:16:a3:e9:81:b0:c5:ac:39:f9:1b:70:a7:ce:b7:6f:f8:a6:
04:0f:18:bf:f4:34:f0:1d:d5:2c:7f:57:2a:f6:d8:da:76:93:
d4:46:ae:b5:49:e9:a1:08:24:5f:ca:0e:d7:02:33:96:33:84:
6e:e9:1d:78:92:ce:ba:4a:4e:dc:8e:3e:43:f3:6a:58:3e:a6:
be:2c:ab:fa:43:ec:2c:9d:4b:ad:4e:30:d1:77:70:e6:dd:59:
c8:f5:88:1c:31:a6:06:39:c9:c9:5c:a0:70:e6:58:9c:1b:34:
d4:51:93:21:e8:9e:9b:16:2d:c9:10:5c:b5:8b:90:cc:8e:f5:
c6:0f:23:1f:40:ca:b0:dc:d1:03:3e:d2:ef:1b:a8:9d:fe:34:
53:a6:e2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA8C5CiaDk+Utbh68qnbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2
NTlhYjkwHhcNMjYwMzI1MjIwMDUwWhcNMjYwMzI2MjIwMDUwWjAzMTEwLwYDVQQD
EyhlZTM1NjQyZGRlNWMxOWY5ZmFiZDRhMDhmNzI3NGQ4YzkxNmRjMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSa0YqpQpQxoi/vsPApnl3zuAieW
gdmypBzcQm2hdV2t4mKUWXKnfdPeG8MmmF2tzOuQCbIUJFeGuwDg9rTo87q3KwE8
MS+ArbJPqM7taFPizhlXvLV1pZRQhU+WWlJ2CWc0FWVaBgpdET2A8ZjrJjQG0eRP
BEPdc+Qq02/ZyFTwaObXD/HxUAFqil0XhwMxG/zg8+Zlu6TkxUrbMnr7LF7Uwus0
lhK+q5QQOk3iC1+oFMxPWwrRqyGT7r6Dw2giCVWDm7bfD+F/zLqwl9Y3g6qvclTt
7RM1a5sHTWFrbQCeCreJT5eAJQGgXF64zPuzstrd2mMahV/A66TsfisZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO41ZC3eXBn5+r1KCPcnTYyRbcNWMB8GA1UdIwQY
MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It
NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi
LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz9NC199F
f0/Dbnxv8R46EdQ/SNb3Cj6tqIDmcx8UE9wAuC+l7Ln5i0Om/c/Mg02UaMhShUNu
k3upSR0oSQVgMbm4ZGO/2u3Qn/YUD/F7NUrZL5Ye2VLgo/dssRsihAJUoi489ts6
YxdER04yFBaj6YGwxaw5+Rtwp863b/imBA8Yv/Q08B3VLH9XKvbY2naT1EautUnp
oQgkX8oO1wIzljOEbukdeJLOukpO3I4+Q/NqWD6mviyr+kPsLJ1LrU4w0Xdw5t1Z
yPWIHDGmBjnJyVygcOZYnBs01FGTIeiemxYtyRBctYuQzI71xg8jH0DKsNzRAz7S
7xuonf40U6biTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:12 2026 by rpki-client