Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
File: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft (raw, json)
Hash identifier: wFmU8Hsl0xcecxhDiiaVyxOKSdnDfRNJK+MWgHh8xSM=
Subject key identifier: F1:2C:98:C3:1A:1B:96:02:72:49:61:EF:6A:C9:FA:4E:90:6F:EE:E6
Authority key identifier: 40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36
Certificate issuer: /CN=4007f1baed066bdbced1cf4355191bf8ac47db36
Certificate serial: 019D3977623AB04EDFC2016F9571096B9777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
Manifest number: 011F
Signing time: Sun 29 Mar 2026 12:00:18 +0000
Manifest this update: Sun 29 Mar 2026 12:00:18 +0000
Manifest next update: Mon 30 Mar 2026 12:00:18 +0000
Files and hashes: 1: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl (hash: RN3+m0HBkoCL2hZf1NzH3nN8yMWuB0KWSqQjZqGURf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:62:3a:b0:4e:df:c2:01:6f:95:71:09:6b:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4007f1baed066bdbced1cf4355191bf8ac47db36
Validity
Not Before: Mar 29 12:00:18 2026 GMT
Not After : Mar 30 12:00:18 2026 GMT
Subject: CN=f12c98c31a1b9602724961ef6ac9fa4e906feee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:60:80:8d:5f:73:91:82:97:f9:4e:88:6a:
31:38:a6:fc:fb:97:f1:d3:9f:0e:66:c6:00:72:2e:
3d:d0:e6:49:3a:9d:ea:a3:14:d1:7b:36:b3:5b:61:
55:4f:9e:cf:76:bb:da:e6:b1:63:7a:4f:ba:ba:36:
47:c0:ea:5e:91:a2:b7:ad:63:0d:e9:01:1d:b1:11:
e7:bc:93:12:96:e8:ba:00:ac:cc:f8:83:13:33:80:
fc:f6:93:4e:8c:34:94:3e:24:ba:21:e9:e0:df:7c:
2a:f9:30:c4:f2:f9:e7:af:14:f4:21:55:65:97:a4:
40:21:ed:47:d0:9c:6d:0e:da:d7:a7:4e:f6:55:8f:
6b:ff:58:88:84:4d:f4:d5:e8:29:cd:da:a4:da:7a:
ae:41:60:88:3e:81:df:32:62:80:d6:4d:be:4f:2b:
0c:fb:2f:fa:fa:60:5e:da:be:81:0c:d2:69:d2:6a:
b7:c7:8b:07:9d:83:24:89:18:bd:3e:c3:0c:f6:95:
78:47:b4:b6:66:20:e5:7e:15:94:96:24:74:a6:93:
22:6c:f6:5e:52:c1:a5:e4:c9:30:fe:e6:60:2f:b6:
fd:83:69:85:df:2a:e7:2d:15:0a:1f:0e:27:db:ca:
c1:bb:f0:70:72:d7:00:a8:95:cd:89:95:a4:a9:6c:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:98:C3:1A:1B:96:02:72:49:61:EF:6A:C9:FA:4E:90:6F:EE:E6
X509v3 Authority Key Identifier:
keyid:40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:16:7f:88:e7:a6:47:ba:71:c0:0a:07:01:04:77:30:c9:d9:
af:45:d5:58:85:04:36:d1:4c:e4:97:f5:41:d7:a9:d5:99:cd:
68:de:35:e9:ab:2d:49:c8:16:0e:b1:34:5c:98:ef:d4:a6:05:
8c:24:e5:9b:29:4e:30:db:ba:b7:cf:c9:da:7a:3b:e9:d6:a2:
8b:0f:c3:b2:c9:1c:c6:cb:16:76:e0:a6:c4:c9:6a:66:9c:e5:
8e:65:ff:40:a5:0a:de:23:bf:9e:5b:c0:49:1c:ae:4f:50:7a:
3b:e0:cd:c7:8b:b8:1e:56:87:da:bb:66:ac:ae:07:46:df:5c:
30:56:20:60:40:f2:b0:b3:6e:87:c1:44:21:ca:c0:d2:71:23:
04:b1:f2:12:93:9c:96:98:0e:61:fb:62:1c:10:3e:21:18:3a:
0d:6d:a8:33:78:70:81:e0:ab:b7:dc:49:63:81:51:5e:bf:7b:
47:3f:e0:f9:61:2b:15:04:c0:a8:af:44:c9:2b:84:08:62:a6:
e7:75:b9:46:bb:fe:d2:41:f0:6d:9f:54:a1:40:ef:a8:4e:56:
17:c5:6c:11:9d:ca:7f:aa:4c:a6:7e:ea:9d:22:56:63:71:2f:
ea:af:2c:93:49:3a:20:38:c8:51:81:0f:e6:97:d1:81:08:fb:
a8:2a:50:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d2I6sE7fwgFvlXEJa5d3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDdmMWJhZWQwNjZiZGJjZWQxY2Y0MzU1MTkxYmY4YWM0
N2RiMzYwHhcNMjYwMzI5MTIwMDE4WhcNMjYwMzMwMTIwMDE4WjAzMTEwLwYDVQQD
EyhmMTJjOThjMzFhMWI5NjAyNzI0OTYxZWY2YWM5ZmE0ZTkwNmZlZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mZggI1fc5GCl/lOiGoxOKb8+5fx
058OZsYAci490OZJOp3qoxTRezazW2FVT57Pdrva5rFjek+6ujZHwOpekaK3rWMN
6QEdsRHnvJMSlui6AKzM+IMTM4D89pNOjDSUPiS6Ieng33wq+TDE8vnnrxT0IVVl
l6RAIe1H0JxtDtrXp072VY9r/1iIhE301egpzdqk2nquQWCIPoHfMmKA1k2+TysM
+y/6+mBe2r6BDNJp0mq3x4sHnYMkiRi9PsMM9pV4R7S2ZiDlfhWUliR0ppMibPZe
UsGl5Mkw/uZgL7b9g2mF3yrnLRUKHw4n28rBu/BwctcAqJXNiZWkqWxRPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEsmMMaG5YCcklh72rJ+k6Qb+7mMB8GA1UdIwQY
MBaAFEAH8brtBmvbztHPQ1UZG/isR9s2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFmeHV1MEdhOXZPMGM5RFZSa2ItS3hIMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYWM0MjYtYmY5ZC00ZTE2LWI0Mzkt
NzYzMWNmOGM0MTQ5LzEvUUFmeHV1MEdhOXZPMGM5RFZSa2ItS3hIMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYWM0MjYtYmY5ZC00ZTE2LWI0MzktNzYzMWNmOGM0MTQ5
LzEvUUFmeHV1MEdhOXZPMGM5RFZSa2ItS3hIMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBZ/iOem
R7pxwAoHAQR3MMnZr0XVWIUENtFM5Jf1Qdep1ZnNaN416astScgWDrE0XJjv1KYF
jCTlmylOMNu6t8/J2no76daiiw/DsskcxssWduCmxMlqZpzljmX/QKUK3iO/nlvA
SRyuT1B6O+DNx4u4HlaH2rtmrK4HRt9cMFYgYEDysLNuh8FEIcrA0nEjBLHyEpOc
lpgOYftiHBA+IRg6DW2oM3hwgeCrt9xJY4FRXr97Rz/g+WErFQTAqK9EySuECGKm
53W5Rrv+0kHwbZ9UoUDvqE5WF8VsEZ3Kf6pMpn7qnSJWY3Ev6q8sk0k6IDjIUYEP
5pfRgQj7qCpQNA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:00 2026 by rpki-client