Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: x2Aas4/kEoF6dM8HqSgE9410yL/lN/JDoWHRbZtCD7E=
Subject key identifier: 22:D7:CC:9E:D1:2D:47:E4:9E:AF:66:9F:AE:30:59:E4:FA:E0:FE:42
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 019D28F222E11C1A8D818055AFCEB60EFC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: XSvz37AXT2ULpYRPOnTHWdq+YukTx7F8qNnrXSzioGw=)
2: RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa (hash: wPMgtMcsG/KMNrN9/altEtQua2Hm0vaKQpeGiiY5B3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:22:e1:1c:1a:8d:81:80:55:af:ce:b6:0e:fc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=22d7cc9ed12d47e49eaf669fae3059e4fae0fe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:ea:ff:38:54:02:55:f2:9d:30:fa:9f:ad:
91:62:58:60:75:d4:a2:47:42:1d:32:5a:b3:46:5b:
2e:ab:ca:72:7d:f8:77:75:43:92:78:27:ea:89:91:
f4:51:85:ce:6a:d6:bf:e8:55:e1:42:dc:ab:55:05:
19:9d:25:60:7a:ee:0f:9b:e0:ad:fd:2e:7c:b4:71:
07:26:44:52:9f:f8:3c:7b:14:10:a9:32:12:37:75:
c4:3a:e2:c4:78:9b:bc:a5:2d:1a:df:bb:08:c2:ce:
33:ab:cc:80:94:9e:bd:39:c8:f2:ba:90:58:b6:bd:
a2:95:9d:89:70:29:1d:b7:b3:23:52:7d:48:d8:b2:
b2:53:d6:cf:f6:cd:61:6c:ea:96:b0:d9:fb:84:d6:
3d:bd:07:e5:48:ea:5e:c6:93:08:ad:17:92:6c:30:
90:ed:d2:ca:a5:84:dc:9e:38:2f:15:75:9a:43:de:
ea:3c:7f:90:3f:da:bf:1a:cf:5c:44:38:b5:f9:fa:
f2:98:05:49:7d:dc:dd:08:69:4e:d7:f6:6e:5d:80:
5c:2a:00:de:7b:df:69:5a:84:19:fe:66:9f:23:69:
1c:86:90:73:4a:ec:ac:ad:18:2f:f7:55:cf:06:91:
88:d7:f6:76:71:88:93:79:b6:0b:80:b2:11:8a:61:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:CC:9E:D1:2D:47:E4:9E:AF:66:9F:AE:30:59:E4:FA:E0:FE:42
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7a:a6:55:90:1e:5e:e4:93:b7:82:de:75:38:e5:6b:9a:8a:
30:a4:80:4e:17:5d:3e:a1:a7:94:da:39:20:fd:f7:56:b8:81:
1f:c7:68:fc:57:a3:ac:c3:bb:3a:f2:95:6c:42:60:c7:38:27:
bc:08:9f:f5:1e:15:47:51:c8:6d:b4:94:bd:90:95:51:dd:67:
9a:b7:ee:31:77:51:5b:16:fb:c1:b1:cb:22:2d:3a:ca:04:d5:
df:87:85:2b:ce:24:ee:7a:3e:5b:05:43:31:6b:47:eb:a5:17:
4c:c2:d4:5a:4e:2c:2c:75:e6:5e:89:1d:a3:f3:61:22:f8:1a:
f0:6f:bb:7d:15:6e:1a:b1:ab:ad:29:56:04:d0:87:61:f8:1c:
6b:d2:31:bf:b9:70:1b:57:b2:25:c8:2c:77:11:07:56:c0:53:
71:35:13:1d:b8:f1:3b:9f:91:b6:8d:8b:8d:cf:92:84:00:be:
54:b6:eb:57:59:4c:8e:2d:da:86:72:44:4a:93:c8:b2:4e:f4:
e4:58:71:43:ce:bf:50:86:d8:49:57:bd:76:37:17:f0:68:9b:
9e:e5:fb:b6:e3:f8:a5:8e:6c:df:39:a8:c3:11:ef:b2:e6:2c:
0a:00:b3:6d:7a:bc:95:1f:5c:fb:e1:9f:4b:57:b0:fc:a3:73:
6e:61:67:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8iLhHBqNgYBVr862DvyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzA5NTkwMTE2MjdkZGQwZDA1N2Q3MzFlOGZhNWE1MTAy
OTY1OTIwHhcNMjYwMzI2MDcwMDUwWhcNMjYwMzI3MDcwMDUwWjAzMTEwLwYDVQQD
EygyMmQ3Y2M5ZWQxMmQ0N2U0OWVhZjY2OWZhZTMwNTllNGZhZTBmZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrvq/zhUAlXynTD6n62RYlhgddSi
R0IdMlqzRlsuq8pyffh3dUOSeCfqiZH0UYXOata/6FXhQtyrVQUZnSVgeu4Pm+Ct
/S58tHEHJkRSn/g8exQQqTISN3XEOuLEeJu8pS0a37sIws4zq8yAlJ69OcjyupBY
tr2ilZ2JcCkdt7MjUn1I2LKyU9bP9s1hbOqWsNn7hNY9vQflSOpexpMIrReSbDCQ
7dLKpYTcnjgvFXWaQ97qPH+QP9q/Gs9cRDi1+frymAVJfdzdCGlO1/ZuXYBcKgDe
e99pWoQZ/mafI2kchpBzSuysrRgv91XPBpGI1/Z2cYiTebYLgLIRimHpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLXzJ7RLUfknq9mn64wWeT64P5CMB8GA1UdIwQY
MBaAFELAlZARYn3dDQV9cx6PpaUQKWWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgt
MjQ4YjU5YzM2OTZiLzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgtMjQ4YjU5YzM2OTZi
LzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3qmVZAe
XuSTt4LedTjla5qKMKSAThddPqGnlNo5IP33VriBH8do/FejrMO7OvKVbEJgxzgn
vAif9R4VR1HIbbSUvZCVUd1nmrfuMXdRWxb7wbHLIi06ygTV34eFK84k7no+WwVD
MWtH66UXTMLUWk4sLHXmXokdo/NhIvga8G+7fRVuGrGrrSlWBNCHYfgca9Ixv7lw
G1eyJcgsdxEHVsBTcTUTHbjxO5+Rto2Ljc+ShAC+VLbrV1lMji3ahnJESpPIsk70
5FhxQ86/UIbYSVe9djcX8GibnuX7tuP4pY5s3zmowxHvsuYsCgCzbXq8lR9c++Gf
S1ew/KNzbmFngg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:49 2026 by rpki-client