Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: MsuIFha4awhu/Kz+te3d9rAx47OWmkPPlVi+RG/g4wM=
Subject key identifier: 62:6C:4E:95:03:A0:BE:F4:7D:67:C9:6E:BB:7C:6E:D3:65:AF:A2:75
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 019D3940CC831365718D77A365B9E27D1345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 120B
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: +qP910hASkYtNRsdTNgecChRBj67/vgsrPQW8UlNPBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cc:83:13:65:71:8d:77:a3:65:b9:e2:7d:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=626c4e9503a0bef47d67c96ebb7c6ed365afa275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:5a:f0:ce:7e:aa:69:73:75:42:86:e7:d6:
ae:33:eb:ed:2a:eb:10:0d:4f:38:dd:33:f8:0f:d8:
8d:b3:21:bd:43:67:58:b7:72:ff:3f:62:38:d4:e4:
4f:0a:96:fd:0e:5f:10:62:36:6b:a7:da:d4:77:59:
8a:11:bb:d1:6b:90:b8:cc:27:22:cb:44:f3:fe:b6:
7f:60:65:ce:8c:aa:b9:73:99:d1:64:2e:d1:3e:31:
8b:f8:c5:9c:69:73:86:46:74:0c:3e:4f:05:d0:c4:
38:81:62:21:c7:42:f6:6e:41:cc:57:6a:0c:7d:36:
91:6e:4f:7a:d9:5f:33:b2:d6:16:26:36:da:4a:93:
7a:77:e1:79:fe:26:97:be:8c:fe:12:67:24:ff:89:
66:fb:20:05:f2:76:3f:e5:c7:11:f8:9b:7f:75:e2:
14:3f:6d:8b:f5:04:34:3b:35:e6:c2:95:b1:b9:8d:
76:b1:50:b6:77:7a:b2:fc:6c:dc:88:9e:8f:d2:16:
13:77:2e:4d:59:29:0c:a6:79:6b:37:41:dc:42:de:
c5:24:87:4e:79:69:3a:cd:a3:f1:37:e2:42:2c:1c:
fd:62:2d:94:67:28:20:8b:23:2f:a1:72:ff:56:cc:
ec:26:bb:cb:4e:e7:e0:97:c1:91:41:5d:dc:10:1c:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:4E:95:03:A0:BE:F4:7D:67:C9:6E:BB:7C:6E:D3:65:AF:A2:75
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:99:41:9e:86:b9:36:59:fc:36:67:e4:b3:cc:67:f3:6f:74:
a8:32:98:92:7e:22:98:34:19:3d:86:67:08:f6:7a:5b:41:c7:
8d:15:a2:6d:86:d8:cc:b1:4c:0b:c7:e5:ae:88:c1:43:b3:69:
8c:5f:8b:89:08:dd:db:c4:d2:a3:a2:dc:cd:23:75:3e:82:5c:
46:85:45:86:27:fa:6f:b9:8b:d0:43:b7:bf:99:a9:f9:36:07:
39:b0:1b:a6:b5:a8:ba:76:09:c4:22:b2:e6:3e:a4:03:a4:3e:
f3:96:ed:ad:81:bb:3c:68:2e:ce:9c:49:8e:31:7a:9b:b6:3e:
6c:c8:a7:a3:00:bd:1f:23:26:2a:6f:8e:ef:79:14:04:ff:db:
bd:cf:93:6b:4d:05:ed:7b:e8:ee:a7:3b:f6:42:e0:0f:ec:3d:
c2:a8:7a:cc:3b:55:8d:f8:76:9c:d0:c4:c5:1c:9a:41:03:25:
1b:75:b8:3d:08:42:79:18:37:eb:bd:c4:46:df:cb:99:36:3f:
31:6b:2a:14:2c:51:13:cc:14:3c:0c:c2:35:35:52:25:b0:7a:
c8:ca:3f:12:db:01:8c:50:48:a0:60:56:00:14:0e:cb:e1:0c:
29:27:0c:0c:b5:5a:79:c0:28:bc:2c:40:a5:ff:50:0b:65:d4:
d5:a5:64:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QMyDE2VxjXejZbnifRNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzE2ZWVjYTZhZmVhODQ0Y2E0Njg4MjU4Y2UzMzAwZDJh
MzkzZmUwHhcNMjYwMzI5MTEwMDQwWhcNMjYwMzMwMTEwMDQwWjAzMTEwLwYDVQQD
Eyg2MjZjNGU5NTAzYTBiZWY0N2Q2N2M5NmViYjdjNmVkMzY1YWZhMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXda8M5+qmlzdUKG59auM+vtKusQ
DU843TP4D9iNsyG9Q2dYt3L/P2I41ORPCpb9Dl8QYjZrp9rUd1mKEbvRa5C4zCci
y0Tz/rZ/YGXOjKq5c5nRZC7RPjGL+MWcaXOGRnQMPk8F0MQ4gWIhx0L2bkHMV2oM
fTaRbk962V8zstYWJjbaSpN6d+F5/iaXvoz+Emck/4lm+yAF8nY/5ccR+Jt/deIU
P22L9QQ0OzXmwpWxuY12sVC2d3qy/GzciJ6P0hYTdy5NWSkMpnlrN0HcQt7FJIdO
eWk6zaPxN+JCLBz9Yi2UZyggiyMvoXL/VszsJrvLTufgl8GRQV3cEBy5QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJsTpUDoL70fWfJbrt8btNlr6J1MB8GA1UdIwQY
MBaAFEPBbuymr+qETKRogljOMwDSo5P+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUt
YjM5NzdmNjQ0N2IzLzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUtYjM5NzdmNjQ0N2Iz
LzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJlBnoa5
Nln8Nmfks8xn8290qDKYkn4imDQZPYZnCPZ6W0HHjRWibYbYzLFMC8flrojBQ7Np
jF+LiQjd28TSo6LczSN1PoJcRoVFhif6b7mL0EO3v5mp+TYHObAbprWounYJxCKy
5j6kA6Q+85btrYG7PGguzpxJjjF6m7Y+bMinowC9HyMmKm+O73kUBP/bvc+Ta00F
7Xvo7qc79kLgD+w9wqh6zDtVjfh2nNDExRyaQQMlG3W4PQhCeRg3673ERt/LmTY/
MWsqFCxRE8wUPAzCNTVSJbB6yMo/EtsBjFBIoGBWABQOy+EMKScMDLVaecAovCxA
pf9QC2XU1aVk/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:58 2026 by rpki-client