Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: pIapOKZCpXrOj9Gy4KQ0pqQ7j54zJW2plDpevDfzllo=
Subject key identifier: B8:02:06:4A:F0:D8:A6:73:05:26:5C:29:4A:96:9F:3E:8A:37:A7:86
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 019D39AED7187E81AE59ED135CE0BB172933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 1392
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: QCKq3osd0p2pkLW9A5PIb60Erm+tzlDqBNER1bo9DYA=)
2: nHM0DFEdkMMw68BfCu8SxI-WKpo.roa (hash: lV1ZePN72sIOtMuPDcQdRq/kQ5D5g83a0m3tXbtpunw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d7:18:7e:81:ae:59:ed:13:5c:e0:bb:17:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=b802064af0d8a67305265c294a969f3e8a37a786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:a7:dd:75:a6:ed:e2:40:97:78:db:70:d7:
b6:c3:e5:10:77:48:ae:3b:24:5e:70:3f:67:83:96:
4c:18:a0:f1:79:e8:fa:01:4f:76:51:0e:12:29:14:
3e:b7:41:53:86:ea:bd:3c:90:44:85:84:cb:e4:d7:
4d:16:94:45:50:ed:fd:86:59:33:75:95:cc:f6:9c:
35:be:6c:a8:80:56:71:f8:74:40:33:d7:19:dd:46:
4e:96:37:0c:f0:16:9f:89:57:39:0b:68:fa:91:cd:
5b:27:ef:05:a6:00:47:82:e6:c7:1c:56:2b:3f:33:
b4:d3:51:31:7c:8b:67:71:f2:bb:e2:50:01:38:7e:
8e:bb:38:f6:6d:c9:bf:52:c4:86:f6:ca:73:35:cc:
29:e8:ee:31:76:00:41:2c:e1:96:59:12:93:41:4c:
9c:fb:e8:c9:99:57:a4:30:ca:2d:0f:9a:14:40:98:
d6:b1:f8:dc:20:46:ed:09:96:57:3c:ed:c5:8a:34:
80:bd:f6:7c:2c:30:e3:ad:6d:87:cb:99:78:41:d2:
07:72:f0:ed:9c:93:5b:b8:3c:cb:9f:79:b0:5c:63:
bb:2c:3c:ee:19:46:30:ba:d5:97:ce:d0:e6:62:83:
74:19:1d:e1:1c:eb:ab:de:22:01:43:38:16:06:da:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:06:4A:F0:D8:A6:73:05:26:5C:29:4A:96:9F:3E:8A:37:A7:86
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3f:60:7e:c8:35:b4:d1:5d:db:51:55:84:ec:32:c5:6e:86:
8b:12:a2:a7:2d:75:6d:38:44:7b:d1:83:eb:fc:19:a4:34:48:
74:32:b3:bd:77:30:d7:ea:18:f8:89:34:5b:f6:07:31:44:ce:
ae:47:87:45:db:cb:a0:da:c2:8a:ed:46:dd:09:b7:c0:9f:ed:
7a:c1:cb:5d:59:90:a8:51:6f:4a:0c:bc:82:25:33:8b:64:4a:
af:19:73:09:c7:45:68:95:2d:fc:7f:29:0a:69:10:37:de:3d:
e7:92:f0:21:5a:66:b2:12:c7:35:94:94:38:01:00:c7:61:e7:
c9:d5:51:e4:fe:e5:0a:82:00:f3:58:8a:de:a2:3b:a3:fa:6c:
1e:28:27:98:bf:6e:c2:9f:2d:94:74:af:6e:28:6f:d0:f0:fb:
3e:56:ef:b7:9f:2a:d7:27:dc:c6:56:5c:9a:00:75:10:dc:1f:
17:70:e1:11:7f:d0:e5:61:c9:e9:41:9b:c8:9c:71:d2:0f:08:
ee:72:86:ce:66:6d:21:34:83:62:6a:10:52:89:f2:1e:bc:5c:
fb:59:85:dd:55:fa:a8:26:d7:61:66:66:c9:88:2d:6a:73:54:
a7:28:d7:3a:43:8d:e6:ee:28:e5:d1:ff:e9:08:10:ab:32:18:
77:71:cd:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rtcYfoGuWe0TXOC7FykzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmZhZDk3YTU4Y2I1MGNiZmM4NGVjODY1YWYzZDcxYzhi
MTg1YWYwHhcNMjYwMzI5MTMwMDUyWhcNMjYwMzMwMTMwMDUyWjAzMTEwLwYDVQQD
EyhiODAyMDY0YWYwZDhhNjczMDUyNjVjMjk0YTk2OWYzZThhMzdhNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsOn3XWm7eJAl3jbcNe2w+UQd0iu
OyRecD9ng5ZMGKDxeej6AU92UQ4SKRQ+t0FThuq9PJBEhYTL5NdNFpRFUO39hlkz
dZXM9pw1vmyogFZx+HRAM9cZ3UZOljcM8BafiVc5C2j6kc1bJ+8FpgBHgubHHFYr
PzO001ExfItncfK74lABOH6Ouzj2bcm/UsSG9spzNcwp6O4xdgBBLOGWWRKTQUyc
++jJmVekMMotD5oUQJjWsfjcIEbtCZZXPO3FijSAvfZ8LDDjrW2Hy5l4QdIHcvDt
nJNbuDzLn3mwXGO7LDzuGUYwutWXztDmYoN0GR3hHOur3iIBQzgWBtqB8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgCBkrw2KZzBSZcKUqWnz6KN6eGMB8GA1UdIwQY
MBaAFEG/rZeljLUMv8hOyGWvPXHIsYWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAt
YmY3OGJiODVhNjllLzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAtYmY3OGJiODVhNjll
LzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvj9gfsg1
tNFd21FVhOwyxW6GixKipy11bThEe9GD6/wZpDRIdDKzvXcw1+oY+Ik0W/YHMUTO
rkeHRdvLoNrCiu1G3Qm3wJ/tesHLXVmQqFFvSgy8giUzi2RKrxlzCcdFaJUt/H8p
CmkQN94955LwIVpmshLHNZSUOAEAx2HnydVR5P7lCoIA81iK3qI7o/psHignmL9u
wp8tlHSvbihv0PD7Plbvt58q1yfcxlZcmgB1ENwfF3DhEX/Q5WHJ6UGbyJxx0g8I
7nKGzmZtITSDYmoQUonyHrxc+1mF3VX6qCbXYWZmyYgtanNUpyjXOkON5u4o5dH/
6QgQqzIYd3HNsA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:10 2026 by rpki-client