Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier: stmaTWaR6YZmHOeReM2S8bNqOq33yLKOQOD0IAYdWEA=
Subject key identifier: 8C:50:FA:07:01:2A:24:1C:0B:A2:3B:40:A7:6A:2E:DC:AA:09:F2:AE
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial: 019D3A8B250B7F8C23F2C7D5B5E5D1836496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number: 013D
Signing time: Sun 29 Mar 2026 17:01:30 +0000
Manifest this update: Sun 29 Mar 2026 17:01:30 +0000
Manifest next update: Mon 30 Mar 2026 17:01:30 +0000
Files and hashes: 1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: 4+3D3v/YnkofSq2TEqM6TCuo5b/UPg6LblJs8DMpzNE=)
2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:25:0b:7f:8c:23:f2:c7:d5:b5:e5:d1:83:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Validity
Not Before: Mar 29 17:01:30 2026 GMT
Not After : Mar 30 17:01:30 2026 GMT
Subject: CN=8c50fa07012a241c0ba23b40a76a2edcaa09f2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:ab:79:53:07:8b:14:a7:93:22:cb:8f:a4:
eb:cf:28:e7:fa:6d:b9:de:70:0a:29:af:6c:e6:da:
6f:c3:ef:59:85:d8:c0:7e:22:11:41:ad:2a:0e:c9:
7c:43:b0:eb:f7:9d:89:89:0e:cf:c3:0f:db:52:f2:
15:2b:b3:e6:1f:4f:fb:97:3a:4f:07:b6:9a:05:11:
4a:49:10:68:db:e6:b4:d1:57:f1:0f:cd:fe:24:b7:
c0:03:5c:58:23:73:dd:2e:82:ae:34:5c:aa:3f:c5:
8e:db:91:49:93:e1:bd:c7:8d:83:af:e8:0b:99:b5:
64:45:c3:46:f0:80:da:ac:c8:fd:92:80:38:bd:39:
f4:c7:ff:7d:51:5d:41:a2:24:16:09:2b:6a:fb:e4:
e1:7b:7c:12:d2:4b:1e:77:26:d1:ef:0b:34:76:2f:
e4:8a:0b:dd:98:c7:16:e9:d1:5a:60:af:5d:9c:4a:
15:5f:72:be:71:ee:c4:68:0e:d4:e8:48:3a:36:e8:
1c:6d:32:01:cc:31:ec:a9:9f:41:9f:12:fc:46:ea:
3a:0c:c3:8e:44:3e:f2:f0:48:5f:07:a6:fa:39:9a:
09:28:38:28:6a:b4:a3:8f:98:c9:45:09:5d:94:10:
91:e0:66:60:38:e9:80:dc:20:62:26:7b:06:bc:08:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:FA:07:01:2A:24:1C:0B:A2:3B:40:A7:6A:2E:DC:AA:09:F2:AE
X509v3 Authority Key Identifier:
keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a0:c2:6b:2f:c3:04:be:11:af:b0:b3:1f:1f:8c:fc:ed:86:
5f:89:a4:4f:25:66:b0:ee:80:4f:62:df:17:da:f4:1c:91:d9:
85:2b:13:48:8c:79:1b:f0:98:ad:31:7e:c6:ca:60:09:9a:06:
34:32:57:aa:6e:6c:03:55:27:d2:ca:50:dd:07:0c:86:7d:66:
07:2f:bf:f8:46:97:6b:0a:fb:3a:70:35:03:a8:1a:5f:e4:57:
4c:03:a2:07:04:fe:78:b9:78:6c:17:c9:40:4c:40:f5:09:75:
2b:af:e3:0f:ee:4b:63:c5:b3:f1:20:d3:68:fa:51:60:2b:ca:
7d:10:0b:06:4a:25:69:3f:f2:7c:01:28:c4:8a:35:60:b6:60:
53:de:4f:5c:f9:47:d5:e2:2d:99:35:e8:3a:ff:11:2c:f6:4e:
e6:24:dd:33:75:cc:20:c4:1c:7a:ab:59:46:28:f4:8e:f1:99:
c1:c4:f6:92:d0:98:51:a3:45:12:0d:4d:8e:bd:fa:ab:16:b5:
f6:58:02:a3:5b:b4:b2:ed:c6:c1:dc:6f:d7:5e:92:00:0d:07:
f2:04:8f:bc:5e:eb:f5:2a:81:a8:33:5c:c2:1d:47:a9:4e:1b:
2f:3b:87:68:14:23:55:09:30:02:2f:f7:7c:f0:bf:a2:4f:51:
02:a7:32:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06iyULf4wj8sfVteXRg2SWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNWI0NjNiMTdhMjVlYjY4ZGVhYjc5Y2IwZjk4OWVmZDdl
NDhhMTUwHhcNMjYwMzI5MTcwMTMwWhcNMjYwMzMwMTcwMTMwWjAzMTEwLwYDVQQD
Eyg4YzUwZmEwNzAxMmEyNDFjMGJhMjNiNDBhNzZhMmVkY2FhMDlmMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmareVMHixSnkyLLj6Trzyjn+m25
3nAKKa9s5tpvw+9ZhdjAfiIRQa0qDsl8Q7Dr952JiQ7Pww/bUvIVK7PmH0/7lzpP
B7aaBRFKSRBo2+a00VfxD83+JLfAA1xYI3PdLoKuNFyqP8WO25FJk+G9x42Dr+gL
mbVkRcNG8IDarMj9koA4vTn0x/99UV1BoiQWCStq++The3wS0ksedybR7ws0di/k
igvdmMcW6dFaYK9dnEoVX3K+ce7EaA7U6Eg6NugcbTIBzDHsqZ9BnxL8Ruo6DMOO
RD7y8EhfB6b6OZoJKDgoarSjj5jJRQldlBCR4GZgOOmA3CBiJnsGvAhRcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxQ+gcBKiQcC6I7QKdqLtyqCfKuMB8GA1UdIwQY
MBaAFKpbRjsXol62jeq3nLD5ie/X5IoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmIt
YzdlNzExNWY0YTJlLzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmItYzdlNzExNWY0YTJl
LzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaDCay/D
BL4Rr7CzHx+M/O2GX4mkTyVmsO6AT2LfF9r0HJHZhSsTSIx5G/CYrTF+xspgCZoG
NDJXqm5sA1Un0spQ3QcMhn1mBy+/+EaXawr7OnA1A6gaX+RXTAOiBwT+eLl4bBfJ
QExA9Ql1K6/jD+5LY8Wz8SDTaPpRYCvKfRALBkolaT/yfAEoxIo1YLZgU95PXPlH
1eItmTXoOv8RLPZO5iTdM3XMIMQceqtZRij0jvGZwcT2ktCYUaNFEg1Njr36qxa1
9lgCo1u0su3Gwdxv116SAA0H8gSPvF7r9SqBqDNcwh1HqU4bLzuHaBQjVQkwAi/3
fPC/ok9RAqcykw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:19 2026 by rpki-client