Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: alQLNYJU2kia6mc2xv2FRHof/OCt63l7ZPjA+ojvZHE=
Subject key identifier: 61:BE:F0:83:68:3F:BB:E1:27:42:A1:E1:D8:76:CC:E4:3C:B2:F5:DE
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019D37C0C18CA38326F15E4FC3F90AD96FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 057B
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: glMl/menkEsWgjEXvKvzGCEmCdg/ookAPEggqi5LyTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c1:8c:a3:83:26:f1:5e:4f:c3:f9:0a:d9:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=61bef083683fbbe12742a1e1d876cce43cb2f5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:32:45:34:20:e5:67:55:94:14:55:30:1a:
ae:29:97:2d:26:23:24:ff:c1:71:e2:98:83:6d:90:
37:a5:da:a6:ac:c5:da:e7:e9:3f:86:49:76:bf:6c:
7f:25:3e:d0:3f:91:d7:18:cf:db:ee:51:12:66:ff:
c5:de:80:d3:d7:80:da:3d:1c:cc:fd:16:55:fd:0e:
32:27:62:eb:a7:ca:d4:81:6d:fc:ec:51:52:ff:5b:
76:09:20:54:30:3c:60:28:bc:91:69:03:f8:02:7f:
9f:59:3c:fe:82:9f:d5:10:6b:32:10:6a:21:74:ef:
56:b4:b7:1f:56:c8:02:4f:5b:4c:a6:a0:10:37:bd:
ea:f0:29:f0:2b:95:55:ac:ea:43:36:b0:dd:b1:98:
a7:5f:f5:73:44:12:de:76:d9:7e:5d:95:e5:18:9d:
03:5c:97:34:cf:08:4f:af:f3:68:e1:cd:f9:2b:d9:
32:c9:ad:66:25:44:69:5d:51:67:8f:4e:85:fb:2d:
a3:b2:12:6f:20:de:42:e8:d8:7d:31:88:3b:db:ab:
76:95:93:7f:45:08:be:e1:ab:53:05:fb:a5:8e:03:
41:00:99:82:08:9e:12:a5:fd:af:74:d0:da:b9:cc:
54:d8:1b:90:bd:19:fb:d0:c6:7f:bc:4a:20:ae:05:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BE:F0:83:68:3F:BB:E1:27:42:A1:E1:D8:76:CC:E4:3C:B2:F5:DE
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:dd:bb:e3:47:08:b1:e0:48:55:3e:0e:9d:c7:47:e3:74:
93:76:6f:a0:6f:62:32:20:6a:d9:6e:0f:a1:ab:5c:17:37:d8:
d6:1f:a5:90:99:93:39:d6:7b:11:c8:15:a5:b3:90:7f:1a:6e:
43:4c:87:c1:80:f6:bf:bb:85:83:1a:f8:23:95:29:bf:5a:e2:
24:8d:07:09:37:4d:e0:33:66:9f:12:b7:2b:bf:7d:c4:dc:30:
26:aa:70:50:52:a3:7a:66:67:12:2e:bf:c1:51:77:f7:03:38:
8d:8e:45:d1:cb:f6:b7:21:7b:08:6d:e9:f6:0a:36:a3:48:8e:
89:8c:d0:b8:47:f5:78:14:c5:2b:2e:65:f9:37:fc:c9:9c:35:
13:bf:43:c2:ed:06:7c:a3:30:d3:6c:7f:77:7e:2a:3b:59:f6:
42:32:ac:c6:3a:45:2e:72:2a:b4:46:d1:f8:f8:17:12:07:08:
a9:f3:91:fd:36:de:d7:4b:e4:f3:95:bd:76:c1:12:cd:13:1f:
41:6b:e0:03:b0:a1:4e:66:97:55:a1:a0:37:e8:80:a6:72:9d:
e1:c5:11:91:48:4d:ef:6f:2c:31:97:f4:27:6b:d1:f3:1f:f0:
90:ae:89:d3:d1:7a:0e:e5:10:b2:61:fe:42:fb:97:af:1b:84:
7c:ec:e5:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMGMo4Mm8V5Pw/kK2W/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5
ZDRkOWEwHhcNMjYwMzI5MDQwMTEyWhcNMjYwMzMwMDQwMTEyWjAzMTEwLwYDVQQD
Eyg2MWJlZjA4MzY4M2ZiYmUxMjc0MmExZTFkODc2Y2NlNDNjYjJmNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFwyRTQg5WdVlBRVMBquKZctJiMk
/8Fx4piDbZA3pdqmrMXa5+k/hkl2v2x/JT7QP5HXGM/b7lESZv/F3oDT14DaPRzM
/RZV/Q4yJ2Lrp8rUgW387FFS/1t2CSBUMDxgKLyRaQP4An+fWTz+gp/VEGsyEGoh
dO9WtLcfVsgCT1tMpqAQN73q8CnwK5VVrOpDNrDdsZinX/VzRBLedtl+XZXlGJ0D
XJc0zwhPr/No4c35K9kyya1mJURpXVFnj06F+y2jshJvIN5C6Nh9MYg726t2lZN/
RQi+4atTBfuljgNBAJmCCJ4Spf2vdNDaucxU2BuQvRn70MZ/vEogrgWT8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG+8INoP7vhJ0Kh4dh2zOQ8svXeMB8GA1UdIwQY
MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt
YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0
LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7vdu+NH
CLHgSFU+Dp3HR+N0k3ZvoG9iMiBq2W4PoatcFzfY1h+lkJmTOdZ7EcgVpbOQfxpu
Q0yHwYD2v7uFgxr4I5Upv1riJI0HCTdN4DNmnxK3K799xNwwJqpwUFKjemZnEi6/
wVF39wM4jY5F0cv2tyF7CG3p9go2o0iOiYzQuEf1eBTFKy5l+Tf8yZw1E79Dwu0G
fKMw02x/d34qO1n2QjKsxjpFLnIqtEbR+PgXEgcIqfOR/Tbe10vk85W9dsESzRMf
QWvgA7ChTmaXVaGgN+iApnKd4cURkUhN728sMZf0J2vR8x/wkK6J09F6DuUQsmH+
QvuXrxuEfOzlPw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:37 2026 by rpki-client