Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: ZlO58Q5HfBCB5herVIessyC9jINUZJZcvl08muJrX+c=
Subject key identifier: 57:84:C6:42:4D:A0:36:C8:E8:35:F1:93:65:EC:CE:4B:81:AF:09:3D
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 019D38D3458CA313EC3BE87A966D334314E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: +KAdZ3Zl5Qpw5H10hT30VFqgZ49j4kgD8DqwCeN0xtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:45:8c:a3:13:ec:3b:e8:7a:96:6d:33:43:14:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=5784c6424da036c8e835f19365ecce4b81af093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:9e:d3:67:82:cc:9a:7b:66:00:4a:dd:7e:
10:6b:41:e9:af:59:b4:7d:46:85:ab:f2:e3:22:29:
a2:ec:7a:39:13:4f:3e:ad:15:e3:e2:8b:23:83:e5:
99:22:bc:70:2f:4b:1f:9a:a3:ee:f6:71:f1:aa:f1:
d3:32:d5:df:3f:81:b8:5b:6e:c2:ba:fc:ac:6d:48:
9b:8d:c4:5b:a3:dd:66:ba:2a:bd:f2:8d:d5:c3:3a:
0d:79:d0:fb:fb:05:cc:ad:30:01:4a:53:e3:7f:05:
44:43:4a:28:10:26:21:17:c0:4d:57:c6:d5:1c:de:
f3:23:96:93:90:09:5b:63:d8:94:65:24:d4:5c:70:
6e:7d:93:9e:f2:4d:eb:e2:f9:40:f2:5c:f3:5d:1a:
ab:dd:8c:f3:99:6f:c2:ea:5d:af:4e:9a:30:e8:03:
f3:69:7d:a0:35:90:73:3e:1d:f8:ff:33:93:e5:b0:
1c:33:0a:47:7b:38:9f:ed:1b:47:be:99:d5:7e:a3:
fc:c4:3e:08:75:14:1f:e5:de:1d:aa:2b:dd:46:30:
aa:c6:6b:0a:13:bc:6b:5a:39:6a:ed:03:f1:86:e1:
95:55:0a:b2:65:23:b4:fa:fd:1e:e3:d2:d9:41:28:
4c:32:bb:ae:4a:39:19:0f:b8:95:75:5d:b1:d7:9b:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:C6:42:4D:A0:36:C8:E8:35:F1:93:65:EC:CE:4B:81:AF:09:3D
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0d:d2:a2:61:ca:de:4f:4e:62:3f:a5:c4:4a:45:ec:e0:a5:
18:c8:a0:2b:d4:46:1c:ec:0f:d0:53:d3:28:ad:9f:c3:df:de:
a0:97:87:4a:22:d6:bb:e2:27:7b:64:f4:2a:af:69:08:6a:5a:
90:76:7c:53:36:7c:cb:fd:ad:3f:67:82:cc:2b:7b:c5:f0:c2:
91:f8:d7:1b:3c:21:78:b6:b0:54:01:4a:9a:5b:b6:46:98:cb:
de:6d:37:51:d8:46:12:f8:75:18:e1:27:4e:c3:5a:63:66:82:
fb:af:ab:b9:db:64:50:ab:a4:cc:89:05:fa:44:fc:d1:d2:01:
fb:3c:ba:27:fe:62:ac:c6:d1:10:d4:09:0c:3d:9d:1b:94:9d:
86:bf:03:72:b1:d4:c7:5c:01:a4:cb:65:44:74:e0:e4:c3:9d:
2d:f3:82:e7:3a:7a:dc:97:d3:2e:04:27:aa:72:27:9d:d3:f1:
77:aa:d0:54:70:c6:9d:c6:9e:34:d7:c1:0d:92:4d:7b:01:a6:
d8:10:e5:76:0e:53:6f:c9:40:08:f0:9c:78:76:d7:69:37:f0:
0e:cb:29:26:a3:c5:85:88:7f:4a:03:0b:42:50:8e:27:e7:c7:
ab:b7:d9:a4:fc:3c:1e:73:bb:1e:c4:fd:9e:47:71:d9:83:36:
a4:a2:43:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400WMoxPsO+h6lm0zQxTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl
MzlhYzYwHhcNMjYwMzI5MDkwMTAzWhcNMjYwMzMwMDkwMTAzWjAzMTEwLwYDVQQD
Eyg1Nzg0YzY0MjRkYTAzNmM4ZTgzNWYxOTM2NWVjY2U0YjgxYWYwOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1due02eCzJp7ZgBK3X4Qa0Hpr1m0
fUaFq/LjIimi7Ho5E08+rRXj4osjg+WZIrxwL0sfmqPu9nHxqvHTMtXfP4G4W27C
uvysbUibjcRbo91muiq98o3VwzoNedD7+wXMrTABSlPjfwVEQ0ooECYhF8BNV8bV
HN7zI5aTkAlbY9iUZSTUXHBufZOe8k3r4vlA8lzzXRqr3YzzmW/C6l2vTpow6APz
aX2gNZBzPh34/zOT5bAcMwpHezif7RtHvpnVfqP8xD4IdRQf5d4dqivdRjCqxmsK
E7xrWjlq7QPxhuGVVQqyZSO0+v0e49LZQShMMruuSjkZD7iVdV2x15v3HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeExkJNoDbI6DXxk2XszkuBrwk9MB8GA1UdIwQY
MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt
YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm
LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPg3SomHK
3k9OYj+lxEpF7OClGMigK9RGHOwP0FPTKK2fw9/eoJeHSiLWu+Ine2T0Kq9pCGpa
kHZ8UzZ8y/2tP2eCzCt7xfDCkfjXGzwheLawVAFKmlu2RpjL3m03UdhGEvh1GOEn
TsNaY2aC+6+rudtkUKukzIkF+kT80dIB+zy6J/5irMbRENQJDD2dG5Sdhr8DcrHU
x1wBpMtlRHTg5MOdLfOC5zp63JfTLgQnqnInndPxd6rQVHDGncaeNNfBDZJNewGm
2BDldg5Tb8lACPCceHbXaTfwDsspJqPFhYh/SgMLQlCOJ+fHq7fZpPw8HnO7HsT9
nkdx2YM2pKJDEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client