Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
File: Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft (raw, json)
Hash identifier: T2ynE0u4TWRmObZjYqwQYWnj0kpY4tk7BjO07CJk6JI=
Subject key identifier: EA:6D:F8:9D:BA:95:88:B6:6D:49:17:BE:83:69:2E:CA:AF:08:CC:CF
Authority key identifier: 43:54:FB:F8:B0:23:38:CD:62:DF:CA:91:0F:7C:85:10:6D:2A:1E:FB
Certificate issuer: /CN=4354fbf8b02338cd62dfca910f7c85106d2a1efb
Certificate serial: 019D2816502D458ED185E2105E65EA5E8FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1T7-LAjOM1i38qRD3yFEG0qHvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
Manifest number: 35
Signing time: Thu 26 Mar 2026 03:00:44 +0000
Manifest this update: Thu 26 Mar 2026 03:00:44 +0000
Manifest next update: Fri 27 Mar 2026 03:00:44 +0000
Files and hashes: 1: Q1T7-LAjOM1i38qRD3yFEG0qHvs.crl (hash: nHRaDsSWD7khmjcAZSzBJXdUmzr22XloVW2Z115z1n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1T7-LAjOM1i38qRD3yFEG0qHvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:50:2d:45:8e:d1:85:e2:10:5e:65:ea:5e:8f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354fbf8b02338cd62dfca910f7c85106d2a1efb
Validity
Not Before: Mar 26 03:00:44 2026 GMT
Not After : Mar 27 03:00:44 2026 GMT
Subject: CN=ea6df89dba9588b66d4917be83692ecaaf08cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:96:ec:a2:43:94:cc:af:cc:8d:ac:f9:fd:
4c:f0:8e:58:0f:8a:2d:24:ad:ab:cc:1c:68:57:1a:
a9:f1:57:03:67:77:12:62:0b:6a:62:d0:aa:4c:84:
46:60:59:b5:61:86:65:e7:2e:59:5f:24:69:1c:87:
c1:d1:4c:b5:5f:73:70:9f:72:1a:d6:9f:9d:be:b3:
3f:e0:03:a9:98:16:ac:36:82:41:2f:b3:47:b9:92:
37:f4:78:ef:1c:de:b5:86:0b:40:ab:91:5a:06:6e:
3d:59:a5:30:47:6c:4f:06:06:c9:75:78:c3:ce:e3:
9b:05:3d:ce:65:c9:62:72:9b:26:53:8e:23:44:95:
40:cc:73:6d:4c:87:ed:89:9c:87:ef:9f:57:cb:40:
16:77:fd:69:9e:01:75:73:27:f4:f5:9b:83:8d:ce:
b4:ee:83:bc:39:1e:73:3f:63:be:c3:bb:8e:69:ce:
4a:a2:2f:d1:20:c7:4d:c1:15:97:60:06:58:14:a8:
4d:86:3b:63:ba:9f:a6:d5:72:30:96:61:b3:55:c0:
c6:07:9a:6f:40:ea:47:c2:7d:1f:56:f8:a3:9a:d7:
a9:c5:8d:6d:6f:62:88:3b:e6:c9:27:3a:b0:1f:08:
87:39:f2:cd:01:7a:53:09:73:56:3e:b3:b6:d1:d9:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:F8:9D:BA:95:88:B6:6D:49:17:BE:83:69:2E:CA:AF:08:CC:CF
X509v3 Authority Key Identifier:
keyid:43:54:FB:F8:B0:23:38:CD:62:DF:CA:91:0F:7C:85:10:6D:2A:1E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1T7-LAjOM1i38qRD3yFEG0qHvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2bfda2-9531-47ef-9325-f3ccf8c7373e/1/Q1T7-LAjOM1i38qRD3yFEG0qHvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:f5:91:f8:8e:cb:e7:16:25:75:a7:79:1f:d8:5d:36:c6:
ee:1c:16:c2:fa:c2:8e:6c:86:88:ad:34:62:b4:8b:26:63:0c:
50:f1:f1:46:e3:c4:32:cb:87:b1:3c:bf:13:70:4a:95:02:79:
24:82:6f:ac:a9:2a:5e:68:6e:3e:3e:2c:fa:42:85:35:bc:e1:
50:26:22:52:34:c0:02:39:80:2f:eb:1c:f1:47:bf:98:5c:0c:
0d:be:b3:8c:31:a1:32:9d:dd:ac:af:33:7a:7f:91:d0:fe:55:
ba:38:09:c3:b1:bc:dd:66:46:10:51:8b:72:ee:f4:10:19:c8:
cf:60:f0:27:b6:6c:1e:e9:c2:a8:4d:e0:e5:a6:9d:48:75:64:
0f:53:85:d9:3e:d7:fb:ba:bd:54:6c:60:4e:e7:cd:17:75:71:
f0:38:4a:c6:2a:f6:46:4c:27:cb:b7:d4:d2:ea:d5:28:0e:4b:
71:9e:9f:85:8f:9b:b9:8f:09:b8:3f:07:8e:14:af:b9:e2:85:
77:0c:6f:73:64:42:30:c9:e1:00:ad:40:ee:81:92:f4:ec:0d:
c5:4a:dd:b7:92:e8:57:ba:b4:4f:32:36:11:9d:71:fa:90:e0:
07:5c:46:66:4d:4a:64:6b:9f:72:10:40:fd:94:6e:dc:38:ff:
ee:64:a8:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFlAtRY7RheIQXmXqXo/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTRmYmY4YjAyMzM4Y2Q2MmRmY2E5MTBmN2M4NTEwNmQy
YTFlZmIwHhcNMjYwMzI2MDMwMDQ0WhcNMjYwMzI3MDMwMDQ0WjAzMTEwLwYDVQQD
EyhlYTZkZjg5ZGJhOTU4OGI2NmQ0OTE3YmU4MzY5MmVjYWFmMDhjY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04aW7KJDlMyvzI2s+f1M8I5YD4ot
JK2rzBxoVxqp8VcDZ3cSYgtqYtCqTIRGYFm1YYZl5y5ZXyRpHIfB0Uy1X3Nwn3Ia
1p+dvrM/4AOpmBasNoJBL7NHuZI39HjvHN61hgtAq5FaBm49WaUwR2xPBgbJdXjD
zuObBT3OZclicpsmU44jRJVAzHNtTIftiZyH759Xy0AWd/1pngF1cyf09ZuDjc60
7oO8OR5zP2O+w7uOac5Koi/RIMdNwRWXYAZYFKhNhjtjup+m1XIwlmGzVcDGB5pv
QOpHwn0fVvijmtepxY1tb2KIO+bJJzqwHwiHOfLNAXpTCXNWPrO20dm49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpt+J26lYi2bUkXvoNpLsqvCMzPMB8GA1UdIwQY
MBaAFENU+/iwIzjNYt/KkQ98hRBtKh77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFUNy1MQWpPTTFpMzhxUkQzeUZFRzBxSHZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYmZkYTItOTUzMS00N2VmLTkzMjUt
ZjNjY2Y4YzczNzNlLzEvUTFUNy1MQWpPTTFpMzhxUkQzeUZFRzBxSHZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yYmZkYTItOTUzMS00N2VmLTkzMjUtZjNjY2Y4YzczNzNl
LzEvUTFUNy1MQWpPTTFpMzhxUkQzeUZFRzBxSHZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTL1kfiO
y+cWJXWneR/YXTbG7hwWwvrCjmyGiK00YrSLJmMMUPHxRuPEMsuHsTy/E3BKlQJ5
JIJvrKkqXmhuPj4s+kKFNbzhUCYiUjTAAjmAL+sc8Ue/mFwMDb6zjDGhMp3drK8z
en+R0P5VujgJw7G83WZGEFGLcu70EBnIz2DwJ7ZsHunCqE3g5aadSHVkD1OF2T7X
+7q9VGxgTufNF3Vx8DhKxir2Rkwny7fU0urVKA5LcZ6fhY+buY8JuD8HjhSvueKF
dwxvc2RCMMnhAK1A7oGS9OwNxUrdt5LoV7q0TzI2EZ1x+pDgB1xGZk1KZGufchBA
/ZRu3Dj/7mSonQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:48 2026 by rpki-client