Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: vgVCYuYx75hKyLSYuqTl1SCmPLWMGdV9rjHd1boHyk8=
Subject key identifier: A9:C2:87:03:EA:34:80:FE:47:B8:10:99:97:82:1F:5E:95:E2:75:66
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 019D389BDD99861E2B53794A9A6AE4DFE14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0FCD
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: 7knn6vGw0jT18fC8OZhJ448HTuS+MPb8JDzduylEsZ4=)
2: gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa (hash: UejuYxPlvqYqOEh9OQ46XPeNSYssNDcfHiTgcJb7toI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:dd:99:86:1e:2b:53:79:4a:9a:6a:e4:df:e1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=a9c28703ea3480fe47b8109997821f5e95e27566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:a1:e2:3b:de:f9:e8:81:78:a4:35:79:ec:
6f:57:67:30:57:17:20:e6:b0:ab:b1:d6:ea:20:86:
5c:e6:8b:00:8a:2c:1c:4e:77:9f:db:cb:c6:8f:99:
42:e0:fb:ac:ca:3c:b2:4c:a0:bd:05:a5:b0:32:6f:
69:cb:21:55:d9:b2:df:d2:cf:2d:40:cf:91:f4:54:
ed:40:7f:9b:21:35:ee:7b:ca:b9:fe:67:11:6d:72:
80:df:eb:23:cd:05:36:59:cb:a8:d7:aa:f3:27:29:
bb:b9:cf:95:d8:ee:ac:4d:5e:80:c8:57:92:64:f0:
dc:8a:c0:21:3e:ed:c6:72:5b:c0:e1:20:9c:bf:df:
b5:5c:ee:58:05:d2:8e:26:0e:94:a7:84:64:80:26:
6e:a4:76:6c:c7:4b:69:62:ab:e6:8b:50:cc:34:f8:
5c:02:8b:23:b6:2c:a2:40:bc:3e:e3:d7:1a:a9:4c:
b5:cb:21:93:7d:59:65:bd:fb:f2:2b:d1:3c:c9:8b:
4e:65:8b:59:f7:af:74:63:b9:08:79:e2:4e:60:8d:
40:0d:87:e4:45:2f:c8:31:5f:51:0d:85:b5:69:f7:
2d:a8:9e:72:2f:c8:77:a2:54:fa:94:5a:73:b2:e9:
39:68:47:8a:bd:cd:c4:8a:32:96:48:dc:3d:23:43:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:87:03:EA:34:80:FE:47:B8:10:99:97:82:1F:5E:95:E2:75:66
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:98:23:54:09:4b:b6:39:93:e8:8f:09:28:29:27:8b:31:6f:
de:a3:0a:5f:55:86:0c:9a:9a:fb:71:60:a1:22:38:17:f8:e6:
0c:75:54:7f:b5:e7:88:a6:4a:b1:c3:8d:d1:32:32:62:3e:ad:
aa:6b:3f:3d:0d:2b:c1:01:ed:77:74:de:b4:07:e6:6b:b7:e0:
a7:11:23:e1:3b:2e:7f:6b:62:15:ae:c8:e9:c8:e1:22:75:d6:
90:d7:0b:81:65:46:54:a4:31:17:b8:52:24:24:23:c8:c1:21:
17:77:2b:e9:b2:85:3a:ff:dd:74:d4:07:66:34:b7:e0:5c:c0:
44:ab:57:68:29:39:d7:d2:22:0c:d0:e8:b1:c1:86:8f:c0:0d:
d8:30:e8:6f:10:36:79:3a:fe:27:15:81:63:8a:f9:27:24:fa:
f4:89:b4:e2:6b:38:d3:0e:ac:90:2f:08:de:19:23:e1:46:d4:
e9:75:8a:23:79:19:20:8a:d0:58:cc:d5:23:73:f2:21:56:90:
58:e1:e0:45:2e:a6:e1:39:97:83:5f:37:fe:e9:8b:48:15:dd:
39:8d:39:82:c2:0e:4b:e7:73:50:36:30:55:15:df:bf:8f:ca:
f6:df:bf:ba:59:89:fa:a4:ca:60:99:94:e6:e8:84:a9:0f:9a:
41:be:b3:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m92Zhh4rU3lKmmrk3+FLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMmFiYjExNGYzMjU3MGM1ZGQ1MjA2NjI1OWJkYzgwYzk4
NzY4ZmQwHhcNMjYwMzI5MDgwMDMyWhcNMjYwMzMwMDgwMDMyWjAzMTEwLwYDVQQD
EyhhOWMyODcwM2VhMzQ4MGZlNDdiODEwOTk5NzgyMWY1ZTk1ZTI3NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jWh4jve+eiBeKQ1eexvV2cwVxcg
5rCrsdbqIIZc5osAiiwcTnef28vGj5lC4PusyjyyTKC9BaWwMm9pyyFV2bLf0s8t
QM+R9FTtQH+bITXue8q5/mcRbXKA3+sjzQU2Wcuo16rzJym7uc+V2O6sTV6AyFeS
ZPDcisAhPu3GclvA4SCcv9+1XO5YBdKOJg6Up4RkgCZupHZsx0tpYqvmi1DMNPhc
AosjtiyiQLw+49caqUy1yyGTfVllvfvyK9E8yYtOZYtZ9690Y7kIeeJOYI1ADYfk
RS/IMV9RDYW1afctqJ5yL8h3olT6lFpzsuk5aEeKvc3EijKWSNw9I0Ns/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnChwPqNID+R7gQmZeCH16V4nVmMB8GA1UdIwQY
MBaAFEEquxFPMlcMXdUgZiWb3IDJh2j9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEt
YTM1MDdkYzY3NGMyLzEvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEtYTM1MDdkYzY3NGMy
LzEvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJgjVAlL
tjmT6I8JKCknizFv3qMKX1WGDJqa+3FgoSI4F/jmDHVUf7XniKZKscON0TIyYj6t
qms/PQ0rwQHtd3TetAfma7fgpxEj4Tsuf2tiFa7I6cjhInXWkNcLgWVGVKQxF7hS
JCQjyMEhF3cr6bKFOv/ddNQHZjS34FzARKtXaCk519IiDNDoscGGj8AN2DDobxA2
eTr+JxWBY4r5JyT69Im04ms40w6skC8I3hkj4UbU6XWKI3kZIIrQWMzVI3PyIVaQ
WOHgRS6m4TmXg183/umLSBXdOY05gsIOS+dzUDYwVRXfv4/K9t+/ulmJ+qTKYJmU
5uiEqQ+aQb6zOw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:11 2026 by rpki-client