Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: L7hckMkfswdQokTw5ED8gtjuDpLC6EsbtB/T0WiMqmo=
Subject key identifier: 1B:AB:8C:89:61:5E:AE:4B:76:9D:81:41:1C:C3:CC:83:54:C1:AB:78
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 019CE5FF69F011EC4046E09E54FDEC44766D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 0270
Signing time: Fri 13 Mar 2026 07:00:47 +0000
Manifest this update: Fri 13 Mar 2026 07:00:47 +0000
Manifest next update: Sat 14 Mar 2026 07:00:47 +0000
Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=)
2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: EKWu84OtIaFDsEfFWxEc2eK/TQElIjffMzSDKkTcA30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:69:f0:11:ec:40:46:e0:9e:54:fd:ec:44:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Mar 13 07:00:47 2026 GMT
Not After : Mar 14 07:00:47 2026 GMT
Subject: CN=1bab8c89615eae4b769d81411cc3cc8354c1ab78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:d5:22:f2:43:4b:04:66:65:2c:89:f0:30:
e4:07:be:7b:82:17:51:d2:5e:9a:62:d7:7e:ee:a4:
2e:51:0d:fb:8a:7e:ed:a8:5c:1f:a4:07:18:cd:30:
81:1f:48:7d:6b:8a:20:01:57:1b:d0:e1:d3:00:91:
ae:6b:82:1e:bb:cf:31:d1:24:8b:52:d6:c6:1b:d8:
b5:ce:a8:2c:3c:a0:80:05:40:71:35:16:39:e4:71:
ad:9a:09:f0:96:4e:86:8f:a6:38:33:e8:cb:32:74:
d1:de:f5:ff:5d:94:21:13:e8:44:55:15:35:81:8a:
f6:fb:92:df:21:27:ec:40:53:76:0a:4b:f5:66:1d:
d8:74:28:52:a5:d2:7e:37:e8:fd:4f:a4:af:18:1f:
c2:74:19:21:35:4e:d2:b4:da:e6:53:2f:25:01:38:
be:fd:9c:1f:0d:59:94:f0:d0:37:42:8a:09:24:03:
da:49:b4:58:54:8d:4c:c3:fe:bb:ee:dd:d9:fd:44:
f1:09:ea:a0:3e:17:83:27:e3:64:59:6a:b0:86:a2:
de:0f:d0:f5:ce:f9:d3:4a:23:03:f4:f8:40:8e:9f:
04:c0:28:c6:05:46:10:74:b0:da:b2:5f:87:1e:54:
76:45:3e:29:9a:68:62:11:71:65:f7:ac:a3:0c:f3:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:8C:89:61:5E:AE:4B:76:9D:81:41:1C:C3:CC:83:54:C1:AB:78
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:f1:f0:ee:52:dc:4d:f8:3a:5d:73:a1:29:ea:b1:c2:95:
d4:22:9a:d6:b3:7d:fa:6c:b6:14:76:a4:84:4f:2a:88:e7:ea:
64:41:19:a7:28:3c:7e:40:27:09:e4:cf:4a:6a:fe:93:c3:b3:
d7:0e:b7:b8:72:c7:e8:f4:41:8e:b9:fb:10:2d:bf:6d:c7:e9:
da:33:62:1c:da:ec:f9:62:d2:19:9b:3b:11:e0:96:cc:1b:9c:
bd:ac:ca:8b:7e:af:23:e4:55:3e:2c:e8:4b:4f:e1:03:61:47:
40:d0:af:53:79:b6:09:69:00:54:07:3d:b8:b8:46:f4:e0:96:
6c:b5:a2:20:46:65:94:bb:30:6b:12:7f:13:5b:d1:ad:3b:6b:
64:16:12:2b:5d:58:e8:51:7e:3b:8f:df:ed:c2:a0:82:c2:83:
c4:d3:ea:62:12:58:6d:c3:d1:fa:46:8b:7f:14:2b:b3:84:5c:
ef:a0:e2:d2:a8:8a:8a:aa:f4:8e:98:8b:2f:48:d2:ba:34:01:
bf:cd:d8:a3:cb:95:95:69:bc:bd:79:09:c4:0b:73:59:f5:d0:
03:ff:b2:66:30:c4:46:2e:15:0d:88:6f:0a:8d:7b:11:e9:7a:
b3:62:1d:05:20:31:49:74:77:4f:e6:a9:e6:eb:ed:be:11:a6:
b7:f2:e3:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/2nwEexARuCeVP3sRHZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj
MTI2MzcwHhcNMjYwMzEzMDcwMDQ3WhcNMjYwMzE0MDcwMDQ3WjAzMTEwLwYDVQQD
EygxYmFiOGM4OTYxNWVhZTRiNzY5ZDgxNDExY2MzY2M4MzU0YzFhYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w/VIvJDSwRmZSyJ8DDkB757ghdR
0l6aYtd+7qQuUQ37in7tqFwfpAcYzTCBH0h9a4ogAVcb0OHTAJGua4Ieu88x0SSL
UtbGG9i1zqgsPKCABUBxNRY55HGtmgnwlk6Gj6Y4M+jLMnTR3vX/XZQhE+hEVRU1
gYr2+5LfISfsQFN2Ckv1Zh3YdChSpdJ+N+j9T6SvGB/CdBkhNU7StNrmUy8lATi+
/ZwfDVmU8NA3QooJJAPaSbRYVI1Mw/677t3Z/UTxCeqgPheDJ+NkWWqwhqLeD9D1
zvnTSiMD9PhAjp8EwCjGBUYQdLDasl+HHlR2RT4pmmhiEXFl96yjDPM5bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBurjIlhXq5Ldp2BQRzDzINUwat4MB8GA1UdIwQY
MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt
NDIzODU4MjBmOGIzLzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz
LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrfx8O5S
3E34Ol1zoSnqscKV1CKa1rN9+my2FHakhE8qiOfqZEEZpyg8fkAnCeTPSmr+k8Oz
1w63uHLH6PRBjrn7EC2/bcfp2jNiHNrs+WLSGZs7EeCWzBucvazKi36vI+RVPizo
S0/hA2FHQNCvU3m2CWkAVAc9uLhG9OCWbLWiIEZllLswaxJ/E1vRrTtrZBYSK11Y
6FF+O4/f7cKggsKDxNPqYhJYbcPR+kaLfxQrs4Rc76Di0qiKiqr0jpiLL0jSujQB
v83Yo8uVlWm8vXkJxAtzWfXQA/+yZjDERi4VDYhvCo17Eel6s2IdBSAxSXR3T+ap
5uvtvhGmt/LjPA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:04 2026 by rpki-client