Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: MVLQmsT1b/vd7eJ38/0nBESLjbstT2HEaYptU3+ryjA=
Subject key identifier: FC:5D:56:A3:22:3E:B7:8C:CE:61:7E:86:46:02:6F:4B:0B:20:3C:B4
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 019D2996D978EB23E61F362509048DB3F558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 115C
Signing time: Thu 26 Mar 2026 10:00:45 +0000
Manifest this update: Thu 26 Mar 2026 10:00:45 +0000
Manifest next update: Fri 27 Mar 2026 10:00:45 +0000
Files and hashes: 1: DDoVbi1hwK810Q3__yAihbTnUzQ.roa (hash: hkNUL3Jk8I6ohEW5lxLRCD9KCBglyppacl/pVvgBeSk=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: DuLO6+l/iYo9OzlUgEjP7wj9X8N9zaNFM+17PVSPryk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d9:78:eb:23:e6:1f:36:25:09:04:8d:b3:f5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: Mar 26 10:00:45 2026 GMT
Not After : Mar 27 10:00:45 2026 GMT
Subject: CN=fc5d56a3223eb78cce617e8646026f4b0b203cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:c7:93:8c:bd:45:dd:62:e3:2d:9f:c1:bb:
24:19:fd:34:8c:17:b1:26:2b:ea:83:a4:48:e7:96:
b4:e7:2c:04:35:b6:f6:e6:24:64:7b:2a:a1:b5:02:
c3:3a:b2:7b:15:82:fc:07:3c:5d:f5:05:42:cd:d1:
d3:61:f1:27:1f:9b:ba:fd:c4:47:97:37:85:d3:3f:
84:58:10:90:1e:47:34:19:09:83:a6:f0:6d:06:b8:
ab:e2:a8:2b:6e:00:8e:59:9c:83:f1:46:55:8b:6b:
ef:4f:1d:4c:14:97:15:65:92:9c:b5:ae:77:fc:1b:
51:dd:de:a0:59:02:27:16:74:02:02:68:33:bd:b3:
ed:7f:1c:85:09:47:e3:42:28:1b:8a:1f:7a:79:ca:
e7:d9:f1:cb:47:f7:b5:e5:6b:1a:db:63:fd:6f:2b:
d9:78:2e:6f:1f:09:19:a1:fc:3f:9e:29:40:7f:c1:
8f:1c:c0:c7:14:38:8a:d3:27:38:c0:57:e6:a7:65:
25:82:49:7c:09:e1:d7:82:a0:67:c1:dd:3b:1f:80:
35:78:0b:b9:ff:f3:e0:7b:a2:f3:f1:3a:93:cf:ee:
d3:08:5a:a1:c4:f5:4b:76:f7:98:5b:cd:8d:d1:68:
bd:6d:88:11:89:3d:f6:80:2e:f5:8b:d0:bb:7f:f6:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5D:56:A3:22:3E:B7:8C:CE:61:7E:86:46:02:6F:4B:0B:20:3C:B4
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:26:46:d8:49:76:bf:d6:8c:27:dd:b0:cb:0e:1c:59:b4:0e:
8e:2e:8a:7e:2c:92:aa:a7:4e:a7:68:f2:81:3b:49:f5:30:19:
04:27:17:96:85:62:88:7d:bb:3f:c6:57:f6:56:bb:ba:a0:3d:
7f:9b:cf:2f:66:c3:9c:15:d6:c4:d1:c2:bc:bc:ef:14:61:49:
0e:e4:23:95:a4:9c:45:86:35:98:18:60:c1:de:7c:60:d1:d4:
d8:37:59:d7:80:73:da:d2:bd:4c:51:ae:69:5f:b3:01:5d:9b:
61:60:41:42:4f:80:5f:a6:fc:e8:87:ee:b1:d0:92:08:55:40:
42:24:69:5e:2e:89:c1:39:a1:26:77:14:82:7e:0a:b6:0b:4a:
54:ec:7b:30:62:66:6a:d1:18:2f:2e:ec:5c:5e:89:84:1d:0c:
27:14:80:f5:d1:36:00:05:db:45:9e:93:98:01:21:4e:3c:dd:
40:52:2b:fe:f3:eb:cf:58:c5:f1:f6:29:a0:9a:11:01:50:91:
46:ea:63:b8:05:38:07:87:8b:8e:ad:0d:77:a6:4d:27:31:8d:
c6:92:b6:64:59:02:85:fe:22:af:b1:d6:66:60:05:14:96:97:
9c:15:cf:be:b8:6b:20:31:c0:64:6c:48:ae:fb:23:8c:2e:06:
88:05:c8:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pltl46yPmHzYlCQSNs/VYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmQ5MzYyZTgzYjg1MmYzZmQzMzExYjA5MDk2ZjYyODlh
NmEwZjgwHhcNMjYwMzI2MTAwMDQ1WhcNMjYwMzI3MTAwMDQ1WjAzMTEwLwYDVQQD
EyhmYzVkNTZhMzIyM2ViNzhjY2U2MTdlODY0NjAyNmY0YjBiMjAzY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JPHk4y9Rd1i4y2fwbskGf00jBex
Jivqg6RI55a05ywENbb25iRkeyqhtQLDOrJ7FYL8Bzxd9QVCzdHTYfEnH5u6/cRH
lzeF0z+EWBCQHkc0GQmDpvBtBrir4qgrbgCOWZyD8UZVi2vvTx1MFJcVZZKcta53
/BtR3d6gWQInFnQCAmgzvbPtfxyFCUfjQigbih96ecrn2fHLR/e15Wsa22P9byvZ
eC5vHwkZofw/nilAf8GPHMDHFDiK0yc4wFfmp2Ulgkl8CeHXgqBnwd07H4A1eAu5
//Pge6Lz8TqTz+7TCFqhxPVLdveYW82N0Wi9bYgRiT32gC71i9C7f/b/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxdVqMiPreMzmF+hkYCb0sLIDy0MB8GA1UdIwQY
MBaAFEP9k2LoO4UvP9MxGwkJb2KJpqD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODkt
NjU0N2JiMWI4MGMyLzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODktNjU0N2JiMWI4MGMy
LzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSZG2El2
v9aMJ92wyw4cWbQOji6KfiySqqdOp2jygTtJ9TAZBCcXloViiH27P8ZX9la7uqA9
f5vPL2bDnBXWxNHCvLzvFGFJDuQjlaScRYY1mBhgwd58YNHU2DdZ14Bz2tK9TFGu
aV+zAV2bYWBBQk+AX6b86IfusdCSCFVAQiRpXi6JwTmhJncUgn4KtgtKVOx7MGJm
atEYLy7sXF6JhB0MJxSA9dE2AAXbRZ6TmAEhTjzdQFIr/vPrz1jF8fYpoJoRAVCR
RupjuAU4B4eLjq0Nd6ZNJzGNxpK2ZFkChf4ir7HWZmAFFJaXnBXPvrhrIDHAZGxI
rvsjjC4GiAXIGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:36 2026 by rpki-client