Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: kouUKF4mm6uwPdhhYfjWxsIy26kkikQQ/e+kdcjrEL0=
Subject key identifier: 43:85:E0:57:61:CD:17:FC:18:84:D2:BF:E5:A5:9C:43:F8:70:5F:4E
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019D254CE7FC7129653C4D63E22890CC4F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 01FC
Signing time: Wed 25 Mar 2026 14:01:30 +0000
Manifest this update: Wed 25 Mar 2026 14:01:30 +0000
Manifest next update: Thu 26 Mar 2026 14:01:30 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: m15mxC1/8dGM4PN4Bxcnpb4j8wj3WGmdzr2WYazy9Vw=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:e7:fc:71:29:65:3c:4d:63:e2:28:90:cc:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Mar 25 14:01:30 2026 GMT
Not After : Mar 26 14:01:30 2026 GMT
Subject: CN=4385e05761cd17fc1884d2bfe5a59c43f8705f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:cb:ca:9c:49:69:d1:be:56:24:fa:0f:a8:
02:e4:07:d0:18:68:2c:5b:bd:51:3d:cd:30:62:f7:
f9:4e:05:e1:9e:32:11:02:59:2c:1a:0e:12:8a:5e:
56:b3:e2:84:04:c6:8d:f4:51:14:6a:a4:ea:55:4f:
a2:ba:c4:de:43:55:2d:38:a9:45:cf:b3:c3:12:a2:
16:7e:9f:89:33:ff:67:70:e8:b4:4f:9d:3a:c8:96:
e6:9c:6e:86:ce:d1:8f:ef:3d:05:13:94:eb:c7:ee:
52:00:75:e2:ea:a6:80:e7:46:99:70:64:30:35:90:
24:4e:aa:2b:6f:2b:0b:14:f0:fd:fb:8a:66:cc:41:
25:28:05:e3:12:3a:5d:81:5f:d8:c2:85:09:0a:b4:
63:26:07:f7:eb:b9:6a:f0:a4:1d:76:ee:07:57:88:
51:83:ea:03:4a:d5:7f:5f:62:00:8d:ce:3a:dd:dc:
e8:f5:ea:4d:c6:a3:68:ca:fc:a0:c1:7d:c2:d1:9b:
cd:1e:bc:32:b8:96:8f:be:c4:68:e7:d2:72:81:da:
ad:76:d0:79:0c:9b:64:50:ab:ba:69:6f:cc:6e:8c:
c6:f6:9d:f3:46:16:01:db:d5:cc:cb:e6:d2:b0:0b:
f6:ab:3f:28:9e:86:77:c3:7d:01:4e:28:47:74:1f:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:E0:57:61:CD:17:FC:18:84:D2:BF:E5:A5:9C:43:F8:70:5F:4E
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0d:5c:f1:73:2e:e0:b6:16:2b:d0:6d:46:af:2b:bd:b9:6a:
0b:61:63:24:b7:69:d8:10:8e:b0:69:9e:47:73:14:d7:72:6f:
3c:f5:5f:21:7e:99:19:77:38:75:91:06:77:96:2a:9f:30:bf:
c6:84:30:3c:ed:78:e0:47:76:25:9d:23:4d:71:48:3d:ce:76:
2c:b0:b8:74:41:da:18:49:32:04:31:83:8c:9b:19:48:5d:02:
95:5c:88:c7:58:8c:cd:98:13:e7:07:af:00:2a:a7:82:75:c5:
25:4f:b6:81:22:24:4c:a8:26:7d:c6:2b:e3:8a:a2:a0:3d:76:
91:86:d4:31:45:45:3f:8e:4e:ed:d9:35:06:3d:15:f3:85:2b:
e2:fd:6b:a8:75:ca:ea:08:74:00:f5:67:9b:ca:79:9d:c5:5c:
c2:0c:d9:0a:a7:99:df:9f:98:95:c6:a0:1f:a3:75:ae:b9:71:
8b:62:7e:de:3b:74:90:47:9f:fc:78:b7:54:40:1a:23:ad:a9:
b4:b9:39:a2:9f:d1:82:f1:4b:a0:90:a9:70:f7:8f:81:f8:d9:
4f:52:4b:5f:b9:71:2e:0c:c1:66:5f:4e:5b:24:12:82:25:55:
d8:5e:65:a2:69:fb:93:a7:02:c5:c6:49:f6:94:b8:9e:fa:66:
04:7c:3f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTOf8cSllPE1j4iiQzE9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzBkM2I2OTlhYzVhZWZmMmRiODhhNWNiYzFjOWQ4ZDA5
YzcyMzEwHhcNMjYwMzI1MTQwMTMwWhcNMjYwMzI2MTQwMTMwWjAzMTEwLwYDVQQD
Eyg0Mzg1ZTA1NzYxY2QxN2ZjMTg4NGQyYmZlNWE1OWM0M2Y4NzA1ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/3LypxJadG+ViT6D6gC5AfQGGgs
W71RPc0wYvf5TgXhnjIRAlksGg4Sil5Ws+KEBMaN9FEUaqTqVU+iusTeQ1UtOKlF
z7PDEqIWfp+JM/9ncOi0T506yJbmnG6GztGP7z0FE5Trx+5SAHXi6qaA50aZcGQw
NZAkTqorbysLFPD9+4pmzEElKAXjEjpdgV/YwoUJCrRjJgf367lq8KQddu4HV4hR
g+oDStV/X2IAjc463dzo9epNxqNoyvygwX3C0ZvNHrwyuJaPvsRo59JygdqtdtB5
DJtkUKu6aW/MbozG9p3zRhYB29XMy+bSsAv2qz8onoZ3w30BTihHdB+SdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOF4FdhzRf8GITSv+WlnEP4cF9OMB8GA1UdIwQY
MBaAFENw07aZrFrv8tuIpcvBydjQnHIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEt
MTQ1YTAxMjc4OTQ4LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEtMTQ1YTAxMjc4OTQ4
LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUw1c8XMu
4LYWK9BtRq8rvblqC2FjJLdp2BCOsGmeR3MU13JvPPVfIX6ZGXc4dZEGd5YqnzC/
xoQwPO144Ed2JZ0jTXFIPc52LLC4dEHaGEkyBDGDjJsZSF0ClVyIx1iMzZgT5wev
ACqngnXFJU+2gSIkTKgmfcYr44qioD12kYbUMUVFP45O7dk1Bj0V84Ur4v1rqHXK
6gh0APVnm8p5ncVcwgzZCqeZ35+YlcagH6N1rrlxi2J+3jt0kEef/Hi3VEAaI62p
tLk5op/RgvFLoJCpcPePgfjZT1JLX7lxLgzBZl9OWyQSgiVV2F5lomn7k6cCxcZJ
9pS4nvpmBHw/3w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:06 2026 by rpki-client