Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: Uy0vJPl2zhDwm70xs+kyfaJL5UVaznQu8foCpiQrUXs=
Subject key identifier: F1:3B:EF:B2:1E:B3:A5:EC:73:B1:0C:9C:41:5F:B2:02:D2:62:0F:42
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019D265FE054CF2BCF1288F56DF06331B3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 13B5
Signing time: Wed 25 Mar 2026 19:01:50 +0000
Manifest this update: Wed 25 Mar 2026 19:01:50 +0000
Manifest next update: Thu 26 Mar 2026 19:01:50 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: hvnUI/EM0V93n48FkcPmANlZOghVUv864xN0gJ54PBw=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e0:54:cf:2b:cf:12:88:f5:6d:f0:63:31:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Mar 25 19:01:50 2026 GMT
Not After : Mar 26 19:01:50 2026 GMT
Subject: CN=f13befb21eb3a5ec73b10c9c415fb202d2620f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:95:8d:19:b5:0e:0b:c5:10:33:97:0b:be:
83:39:c6:61:59:e3:c9:1e:fd:7b:6d:00:8a:d4:44:
45:18:48:d4:ad:92:4d:95:78:d1:75:56:06:73:f1:
01:f3:1f:91:82:92:61:39:0c:4c:13:78:fa:6c:62:
6b:e9:dc:f3:4b:69:01:e1:f0:ca:ec:0a:63:9e:d8:
b4:89:cf:0d:25:c7:a0:e9:4f:a7:dd:da:76:4a:d7:
a9:dd:22:b9:c2:bd:b9:ef:b4:9a:6f:c2:6d:bb:a9:
02:b2:f1:16:16:1d:cf:91:67:4d:4b:77:c2:90:b1:
58:d6:cb:58:c1:c4:68:27:78:97:ae:d3:5b:a7:0a:
46:2f:ec:31:a9:09:59:56:e6:f9:d9:76:22:ce:cf:
8d:91:82:3f:55:34:85:7c:9c:b9:6a:22:a9:ed:e3:
1e:04:66:f4:70:89:52:b2:74:de:58:80:9a:88:73:
04:09:85:3f:c1:c5:76:27:cd:e9:1e:0e:3e:21:80:
6a:1c:a9:45:f3:a5:a8:2a:09:d5:e4:40:ab:25:aa:
7f:58:6c:16:fa:0a:c6:57:8c:b8:8d:e0:80:1e:f1:
f4:6b:f6:7a:1b:cc:57:f5:d8:19:3d:1b:52:c0:ae:
ae:f0:64:07:b4:ea:85:5f:71:54:67:fb:79:07:69:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:EF:B2:1E:B3:A5:EC:73:B1:0C:9C:41:5F:B2:02:D2:62:0F:42
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6c:fc:e4:69:97:a7:5e:ad:aa:e3:0f:44:b3:32:cf:96:a4:
8b:43:31:81:62:f7:d8:85:b7:e9:a4:3c:64:93:53:db:95:19:
bb:8b:65:08:39:d2:b1:a6:92:f9:40:6e:b6:f5:87:bf:05:d6:
f1:a7:fd:cb:d4:f1:ae:e9:ac:f1:54:01:bd:85:08:b4:f7:bd:
00:65:54:c3:98:88:99:28:08:b4:d2:3e:a3:a9:93:3e:b8:c7:
bf:33:dd:f1:18:2c:b5:a4:3e:f1:3d:e1:82:42:35:88:b6:9a:
2d:f0:50:d1:82:d6:0f:7e:68:5d:2c:42:fc:63:63:18:29:2e:
c0:88:f6:8e:6d:e1:24:7e:2d:47:15:51:48:0b:7a:40:02:be:
dd:ab:9e:b8:da:d6:9c:1b:56:25:d7:2f:57:29:17:29:7d:db:
50:3a:b1:af:89:ed:eb:67:fe:2f:ed:0a:e1:3f:f5:5a:77:66:
f4:5f:c3:6b:e9:86:ad:ec:8e:de:44:f1:83:81:41:7b:2c:a5:
3d:47:d9:bc:c4:66:34:91:37:76:8b:fd:fa:39:21:5d:29:fa:
fb:a5:ad:ad:ff:a1:e6:ef:86:dd:b8:ef:cd:b4:a6:b3:46:c8:
80:1b:1d:65:e6:22:b1:3b:77:0d:13:cb:5b:ec:8a:bb:d3:37:
92:53:9e:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+BUzyvPEoj1bfBjMbP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjYwMzI1MTkwMTUwWhcNMjYwMzI2MTkwMTUwWjAzMTEwLwYDVQQD
EyhmMTNiZWZiMjFlYjNhNWVjNzNiMTBjOWM0MTVmYjIwMmQyNjIwZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL6VjRm1DgvFEDOXC76DOcZhWePJ
Hv17bQCK1ERFGEjUrZJNlXjRdVYGc/EB8x+RgpJhOQxME3j6bGJr6dzzS2kB4fDK
7Apjnti0ic8NJceg6U+n3dp2Step3SK5wr2577Sab8Jtu6kCsvEWFh3PkWdNS3fC
kLFY1stYwcRoJ3iXrtNbpwpGL+wxqQlZVub52XYizs+NkYI/VTSFfJy5aiKp7eMe
BGb0cIlSsnTeWICaiHMECYU/wcV2J83pHg4+IYBqHKlF86WoKgnV5ECrJap/WGwW
+grGV4y4jeCAHvH0a/Z6G8xX9dgZPRtSwK6u8GQHtOqFX3FUZ/t5B2kfgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE777Ies6Xsc7EMnEFfsgLSYg9CMB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGz85GmX
p16tquMPRLMyz5aki0MxgWL32IW36aQ8ZJNT25UZu4tlCDnSsaaS+UButvWHvwXW
8af9y9Txrums8VQBvYUItPe9AGVUw5iImSgItNI+o6mTPrjHvzPd8RgstaQ+8T3h
gkI1iLaaLfBQ0YLWD35oXSxC/GNjGCkuwIj2jm3hJH4tRxVRSAt6QAK+3aueuNrW
nBtWJdcvVykXKX3bUDqxr4nt62f+L+0K4T/1Wndm9F/Da+mGreyO3kTxg4FBeyyl
PUfZvMRmNJE3dov9+jkhXSn6+6Wtrf+h5u+G3bjvzbSms0bIgBsdZeYisTt3DRPL
W+yKu9M3klOe4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:29 2026 by rpki-client