Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
File: QiW1cPRt5cbosrZO0JCtE4XatzE.mft (raw, json)
Hash identifier: mfEfVQoemmcubUglAGZ0yZuNruE6Sa6FhZWdJ4kQZOc=
Subject key identifier: 17:94:81:46:D8:28:F9:C9:C4:4A:B3:9F:23:48:26:1A:25:9F:0E:68
Authority key identifier: 42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
Certificate issuer: /CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Certificate serial: 019CE712452C06EAFD953BFF37543BD4109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 12:00:59 +0000
Manifest this update: Fri 13 Mar 2026 12:00:59 +0000
Manifest next update: Sat 14 Mar 2026 12:00:59 +0000
Files and hashes: 1: CVESS1wyEds4BHAfnSulEoVDL6w.roa (hash: hDPJ5GteWfUiIqOYYRTQikgoZpNgyrm+JUUXa3SL4+k=)
2: QiW1cPRt5cbosrZO0JCtE4XatzE.crl (hash: H8KtvyaxM3fnmSWJmmxZyhMxHwQwwGj8xFtJ7e7AxNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:45:2c:06:ea:fd:95:3b:ff:37:54:3b:d4:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Validity
Not Before: Mar 13 12:00:59 2026 GMT
Not After : Mar 14 12:00:59 2026 GMT
Subject: CN=17948146d828f9c9c44ab39f2348261a259f0e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:ff:bd:3c:84:3f:25:9d:3e:d8:90:d6:94:
03:45:0e:70:86:3c:64:24:9a:3b:9f:56:cb:7e:27:
70:67:a2:87:99:df:2a:b2:a1:7d:69:9d:40:32:94:
cf:b8:56:eb:cb:45:a2:1e:a4:18:7a:44:0e:10:38:
50:af:d5:ce:35:b1:66:2d:54:80:64:fb:e3:40:3a:
3e:c8:6a:0d:98:58:ce:97:b0:8d:25:fd:54:23:01:
7b:12:a7:1f:b5:26:05:dc:39:42:88:f9:42:9a:21:
54:6f:5b:43:e0:41:fd:81:3f:cc:b6:9a:dc:2c:89:
4b:b8:a4:f1:63:01:31:1c:05:6a:8e:84:bf:1a:13:
0f:f7:04:78:36:e3:1d:10:81:c6:60:24:9a:01:7b:
47:b9:f0:6e:af:f8:05:a0:65:fe:b7:af:19:63:7a:
79:f0:06:26:be:90:9b:8c:1b:48:ac:a3:80:eb:d8:
60:d4:4c:b9:51:11:f2:89:de:32:52:06:0b:d3:2d:
31:ce:b3:ec:1f:f5:8e:cb:ad:8b:82:e4:15:df:33:
4b:a5:de:ce:06:b2:4c:4a:83:0a:33:d6:f3:16:28:
90:6c:05:d1:02:ea:14:d5:08:c2:73:ef:d1:17:ba:
08:52:ff:d1:57:67:b1:7a:d2:c1:69:a8:64:ed:4b:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:81:46:D8:28:F9:C9:C4:4A:B3:9F:23:48:26:1A:25:9F:0E:68
X509v3 Authority Key Identifier:
keyid:42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5b:f0:38:2b:70:43:af:16:91:86:b4:a1:ba:d2:fe:0d:4d:
41:2a:a5:08:b3:16:35:b7:ab:88:5c:8a:c3:90:cf:a6:7f:f2:
39:3d:50:d9:e3:45:da:44:99:70:0d:ea:3b:44:94:e8:65:01:
8e:e4:5d:2d:ba:cd:3e:fa:13:a8:d3:40:25:b6:5b:6b:e4:11:
de:55:20:25:d6:9a:4c:09:a0:af:ec:3b:35:10:72:af:48:5c:
20:65:a2:23:ed:0a:d9:f6:c0:6b:80:91:39:30:01:c4:2f:28:
d4:5c:d8:ca:62:b9:09:04:30:61:f4:29:68:64:26:e4:1e:56:
97:88:6a:10:2d:41:4f:71:75:fb:76:1c:05:85:1d:6a:bd:3b:
bf:f8:e8:47:21:79:aa:e4:e5:a1:eb:53:8d:96:30:63:49:ae:
de:43:13:07:70:07:d9:c6:f1:8a:37:d6:f5:3a:2c:c1:51:9b:
3a:fc:c5:2c:e6:92:a8:8c:45:86:8a:0e:71:01:9e:89:85:d7:
a5:c4:cd:3a:dd:db:e5:d6:a4:50:de:47:b2:d4:7e:69:2b:69:
05:9c:e9:40:6e:87:f1:99:1f:6d:cf:00:fd:7b:03:59:ed:f4:
88:64:09:09:73:be:32:14:92:f8:73:0b:8a:c8:fe:12:54:ee:
9f:44:d1:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznEkUsBur9lTv/N1Q71BCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjViNTcwZjQ2ZGU1YzZlOGIyYjY0ZWQwOTBhZDEzODVk
YWI3MzEwHhcNMjYwMzEzMTIwMDU5WhcNMjYwMzE0MTIwMDU5WjAzMTEwLwYDVQQD
EygxNzk0ODE0NmQ4MjhmOWM5YzQ0YWIzOWYyMzQ4MjYxYTI1OWYwZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9D/vTyEPyWdPtiQ1pQDRQ5whjxk
JJo7n1bLfidwZ6KHmd8qsqF9aZ1AMpTPuFbry0WiHqQYekQOEDhQr9XONbFmLVSA
ZPvjQDo+yGoNmFjOl7CNJf1UIwF7EqcftSYF3DlCiPlCmiFUb1tD4EH9gT/Mtprc
LIlLuKTxYwExHAVqjoS/GhMP9wR4NuMdEIHGYCSaAXtHufBur/gFoGX+t68ZY3p5
8AYmvpCbjBtIrKOA69hg1Ey5URHyid4yUgYL0y0xzrPsH/WOy62LguQV3zNLpd7O
BrJMSoMKM9bzFiiQbAXRAuoU1QjCc+/RF7oIUv/RV2exetLBaahk7Uu/kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeUgUbYKPnJxEqznyNIJholnw5oMB8GA1UdIwQY
MBaAFEIltXD0beXG6LK2TtCQrROF2rcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGIt
MzkwYjg1Mzk0YmViLzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGItMzkwYjg1Mzk0YmVi
LzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1vwOCtw
Q68WkYa0obrS/g1NQSqlCLMWNberiFyKw5DPpn/yOT1Q2eNF2kSZcA3qO0SU6GUB
juRdLbrNPvoTqNNAJbZba+QR3lUgJdaaTAmgr+w7NRByr0hcIGWiI+0K2fbAa4CR
OTABxC8o1FzYymK5CQQwYfQpaGQm5B5Wl4hqEC1BT3F1+3YcBYUdar07v/joRyF5
quTloetTjZYwY0mu3kMTB3AH2cbxijfW9ToswVGbOvzFLOaSqIxFhooOcQGeiYXX
pcTNOt3b5dakUN5HstR+aStpBZzpQG6H8Zkfbc8A/XsDWe30iGQJCXO+MhSS+HML
isj+ElTun0TRRw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:20:25 2026 by rpki-client