Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier: ZkULwA5j1WPLT7EV6jc8DNNOf/qTwoALaAupko9Yyf8=
Subject key identifier: 2B:BF:4A:62:58:04:AB:9A:9E:AB:41:64:63:73:30:AB:20:51:78:1D
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer: /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial: 019CE5911102BB860C26B986448C0A8642A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number: 1002
Signing time: Fri 13 Mar 2026 05:00:15 +0000
Manifest this update: Fri 13 Mar 2026 05:00:15 +0000
Manifest next update: Sat 14 Mar 2026 05:00:15 +0000
Files and hashes: 1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: 0GbA//H5cyRTiG1+bvjDOjOvkRNt2a3LYI7GjPvuK8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:11:02:bb:86:0c:26:b9:86:44:8c:0a:86:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
Validity
Not Before: Mar 13 05:00:15 2026 GMT
Not After : Mar 14 05:00:15 2026 GMT
Subject: CN=2bbf4a625804ab9a9eab4164637330ab2051781d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:52:51:ef:d0:f9:7e:c9:65:37:39:56:f6:
3f:32:eb:ce:3f:c3:ee:e5:08:1c:18:26:fd:8d:a7:
ac:cc:0e:29:ae:0c:ad:61:e7:67:07:8e:4b:6d:f5:
fc:4b:6e:29:46:eb:ed:f7:90:0d:1f:e3:57:76:ac:
95:e4:ec:a6:be:16:80:2a:f2:51:f7:39:bd:5c:c4:
e6:50:fe:b7:22:f6:1b:2a:3e:8e:d4:47:27:77:6a:
a3:c6:dd:90:a1:d7:7d:a7:27:7a:d9:52:7d:34:61:
e3:59:05:e3:57:68:81:77:06:26:74:ea:58:b8:ed:
65:88:43:23:1d:ca:e4:56:07:32:b2:c4:7d:2d:f7:
1c:3c:36:89:8a:20:65:7d:4b:32:7a:cf:37:f9:fc:
ec:c6:6d:e2:cd:a6:7d:b1:83:19:55:43:4c:80:e2:
34:e3:58:47:96:64:42:0a:5e:d1:0f:74:26:21:11:
60:c6:08:3f:82:cf:3b:c5:cf:be:08:fc:3f:86:e1:
2b:d5:d8:60:d3:f3:97:3c:fe:98:3a:e0:3c:56:59:
4b:79:ab:e2:2d:5b:8a:17:cd:e8:e9:25:bf:60:0f:
33:09:b0:61:d6:9d:92:01:83:5f:7f:e5:c6:34:37:
00:d8:c0:fa:1d:ab:f6:60:8b:59:5c:8d:c0:4f:e3:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:4A:62:58:04:AB:9A:9E:AB:41:64:63:73:30:AB:20:51:78:1D
X509v3 Authority Key Identifier:
keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:e9:ee:64:f0:98:14:ff:7b:66:a0:22:d8:b8:ad:ee:57:
c2:6a:fb:a3:b4:7e:cc:47:54:3d:2d:93:08:9a:ce:06:cf:73:
89:f4:a8:cb:24:3c:54:04:b9:ee:84:dc:9c:51:46:17:e0:6d:
33:2d:67:a8:ef:a9:57:45:bd:fc:fb:39:ff:a0:aa:dc:1e:4b:
c8:ed:33:ac:0c:2e:87:2b:b5:e2:35:11:da:0b:87:85:f6:a6:
06:e2:73:7e:f3:3c:94:e0:da:6b:9c:90:ac:47:d6:bd:24:29:
6d:47:8e:71:bf:75:76:01:2a:11:fd:26:81:d1:3b:a7:53:78:
2d:fe:34:44:95:88:e4:2f:6b:19:a9:d7:30:10:72:7c:38:72:
44:5c:49:f6:bd:e9:d4:74:37:17:14:6a:a5:92:9a:4e:c9:8c:
ab:f9:9b:c4:40:2f:fb:32:1e:f6:d9:f3:02:a1:ea:f3:bc:9e:
d8:5c:e0:8d:8e:b6:ad:bb:a5:9a:22:24:16:b9:5c:0d:5c:f3:
cf:bb:1e:eb:29:aa:21:7a:15:4c:0d:73:3c:4f:8f:2b:fe:d9:
21:78:54:9f:e1:c4:82:a5:fb:ae:ca:a7:a6:78:31:25:52:27:
e4:80:77:52:41:b7:b2:dd:fa:cf:5a:d9:27:d1:b3:a2:aa:fe:
c7:0b:c6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkRECu4YMJrmGRIwKhkKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTJlZjI3NDcyYTk2MDRiZjYyNmZlYTBlMTg3ZjhkYjYy
NDEzNGEwHhcNMjYwMzEzMDUwMDE1WhcNMjYwMzE0MDUwMDE1WjAzMTEwLwYDVQQD
EygyYmJmNGE2MjU4MDRhYjlhOWVhYjQxNjQ2MzczMzBhYjIwNTE3ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApphSUe/Q+X7JZTc5VvY/MuvOP8Pu
5QgcGCb9jaeszA4prgytYednB45LbfX8S24pRuvt95ANH+NXdqyV5OymvhaAKvJR
9zm9XMTmUP63IvYbKj6O1Ecnd2qjxt2Qodd9pyd62VJ9NGHjWQXjV2iBdwYmdOpY
uO1liEMjHcrkVgcyssR9LfccPDaJiiBlfUsyes83+fzsxm3izaZ9sYMZVUNMgOI0
41hHlmRCCl7RD3QmIRFgxgg/gs87xc++CPw/huEr1dhg0/OXPP6YOuA8VllLeavi
LVuKF83o6SW/YA8zCbBh1p2SAYNff+XGNDcA2MD6Hav2YItZXI3AT+M/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu/SmJYBKuanqtBZGNzMKsgUXgdMB8GA1UdIwQY
MBaAFEOi7ydHKpYEv2Jv6g4Yf422JBNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZMdkowY3FsZ1NfWW1fcURoaF9qYllrRTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85MmY2ZmItNjc5MS00YmZkLTllNjgt
MjBlMWIyOWMwYzEyLzEvUTZMdkowY3FsZ1NfWW1fcURoaF9qYllrRTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My85MmY2ZmItNjc5MS00YmZkLTllNjgtMjBlMWIyOWMwYzEy
LzEvUTZMdkowY3FsZ1NfWW1fcURoaF9qYllrRTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUnp7mTw
mBT/e2agIti4re5Xwmr7o7R+zEdUPS2TCJrOBs9zifSoyyQ8VAS57oTcnFFGF+Bt
My1nqO+pV0W9/Ps5/6Cq3B5LyO0zrAwuhyu14jUR2guHhfamBuJzfvM8lODaa5yQ
rEfWvSQpbUeOcb91dgEqEf0mgdE7p1N4Lf40RJWI5C9rGanXMBByfDhyRFxJ9r3p
1HQ3FxRqpZKaTsmMq/mbxEAv+zIe9tnzAqHq87ye2FzgjY62rbulmiIkFrlcDVzz
z7se6ymqIXoVTA1zPE+PK/7ZIXhUn+HEgqX7rsqnpngxJVIn5IB3UkG3st36z1rZ
J9Gzoqr+xwvGig==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:29:09 2026 by rpki-client