Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: aQewqGTfK+Yhv/D4ZpHqsNgm07kr1MhT+B+2iNtqRg0=
Subject key identifier: 38:FA:EA:F3:D5:E2:30:E1:9B:59:55:AB:FB:16:B3:C8:49:66:D9:D9
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 019D38D2F233F757E1D57A57F1D1546C2890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: GvRDLGT9JeVcujzf4AAeeqnn4IgGB8y9T1+VFeGzkCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f2:33:f7:57:e1:d5:7a:57:f1:d1:54:6c:28:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=38faeaf3d5e230e19b5955abfb16b3c84966d9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:23:6b:e4:60:f7:c5:cd:e4:7a:eb:8d:c4:
0f:94:c6:70:31:19:20:d9:4d:34:b7:f4:d5:5c:52:
bc:f0:20:79:21:b9:aa:ca:71:a8:55:44:00:eb:27:
ef:b7:49:85:8b:74:c0:54:80:ea:20:5c:54:4b:ef:
a3:d2:3e:90:52:27:ef:31:a1:78:2d:ab:43:05:b0:
0a:0e:44:38:64:c0:ff:4f:bc:98:5e:32:85:a4:d2:
64:e7:50:75:7e:b3:6c:27:26:5f:43:ba:63:0d:35:
06:55:23:e6:e6:cd:f3:91:5d:64:09:ce:f4:8a:d7:
d1:d8:ce:5a:e3:93:7a:36:01:bd:45:83:2d:ee:7d:
9a:d7:ee:17:6b:7a:1c:a1:bd:f0:77:e6:b6:33:55:
25:17:46:80:d3:53:b1:54:7a:c2:f9:ac:7f:62:c9:
01:3c:1d:0d:0e:33:cc:ba:17:b6:93:22:16:29:a0:
ee:f6:d8:c2:0c:22:85:d0:5b:d0:32:d0:7d:94:d1:
ad:5b:1f:86:f4:f8:78:b7:b5:76:28:dc:fb:a8:13:
32:1c:54:4d:67:23:16:99:07:25:26:d5:7d:35:97:
1e:4c:eb:11:40:1b:bd:6a:1b:b7:0a:76:92:f3:d5:
f3:33:86:92:0d:e7:bf:d9:3b:a4:de:b6:3d:e6:d7:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:EA:F3:D5:E2:30:E1:9B:59:55:AB:FB:16:B3:C8:49:66:D9:D9
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:86:1a:54:f5:6e:99:ee:32:e6:8e:4c:79:ca:2f:cf:e1:
d1:c6:ea:fc:df:8f:e3:73:54:59:27:e1:80:47:f2:87:be:26:
c9:f8:64:8a:d1:53:5a:76:a6:29:20:da:99:b2:32:9b:44:52:
55:13:ab:59:63:fb:0e:5a:cd:b9:b2:0b:3f:b5:66:5d:da:87:
e3:e1:ae:80:04:c8:34:24:90:a9:2e:0d:71:68:f0:c4:24:a6:
30:2e:35:60:06:17:a0:5d:ea:ad:09:6d:94:c5:44:21:e9:44:
0a:b4:b2:76:b0:50:56:ac:c1:c4:46:f5:f0:07:54:07:d0:01:
a8:20:a9:15:d5:8b:bd:7e:eb:87:a0:c3:83:68:95:30:69:57:
9f:05:1f:6e:81:f9:83:da:b3:32:07:06:a3:c5:d0:93:81:51:
f3:e0:5e:de:32:88:24:0d:44:03:0e:1e:b0:53:0e:6a:cd:1e:
df:31:e2:ab:a7:fc:5a:d9:c4:4a:38:d9:92:32:eb:99:76:65:
9a:4c:ba:14:e0:30:8e:c6:09:5f:fe:b9:6a:7b:91:81:4d:65:
81:27:0e:84:c3:6b:81:77:24:a6:f8:bd:5a:01:52:63:85:bd:
97:6c:5e:3c:b1:97:17:f9:a3:95:49:1d:a1:9d:a2:cb:d4:c8:
4a:21:42:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040vIz91fh1XpX8dFUbCiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTcxNTYxMmE2YTY5NzE0ZjVlM2YyZTRjYmM0OGZjZTg0
YTZmNTIwHhcNMjYwMzI5MDkwMDQxWhcNMjYwMzMwMDkwMDQxWjAzMTEwLwYDVQQD
EygzOGZhZWFmM2Q1ZTIzMGUxOWI1OTU1YWJmYjE2YjNjODQ5NjZkOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4cja+Rg98XN5HrrjcQPlMZwMRkg
2U00t/TVXFK88CB5IbmqynGoVUQA6yfvt0mFi3TAVIDqIFxUS++j0j6QUifvMaF4
LatDBbAKDkQ4ZMD/T7yYXjKFpNJk51B1frNsJyZfQ7pjDTUGVSPm5s3zkV1kCc70
itfR2M5a45N6NgG9RYMt7n2a1+4Xa3ocob3wd+a2M1UlF0aA01OxVHrC+ax/YskB
PB0NDjPMuhe2kyIWKaDu9tjCDCKF0FvQMtB9lNGtWx+G9Ph4t7V2KNz7qBMyHFRN
ZyMWmQclJtV9NZceTOsRQBu9ahu3CnaS89XzM4aSDee/2Tuk3rY95td5RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj66vPV4jDhm1lVq/sWs8hJZtnZMB8GA1UdIwQY
MBaAFELnFWEqamlxT14/Lky8SPzoSm9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVjVllTcHFhWEZQWGo4dVRMeElfT2hLYjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ZmI5YzMtNmM5Yy00MzllLThjY2Et
ZDk5YTIxOThhNjhkLzEvUXVjVllTcHFhWEZQWGo4dVRMeElfT2hLYjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ZmI5YzMtNmM5Yy00MzllLThjY2EtZDk5YTIxOThhNjhk
LzEvUXVjVllTcHFhWEZQWGo4dVRMeElfT2hLYjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQguGGlT1
bpnuMuaOTHnKL8/h0cbq/N+P43NUWSfhgEfyh74myfhkitFTWnamKSDambIym0RS
VROrWWP7DlrNubILP7VmXdqH4+GugATINCSQqS4NcWjwxCSmMC41YAYXoF3qrQlt
lMVEIelECrSydrBQVqzBxEb18AdUB9ABqCCpFdWLvX7rh6DDg2iVMGlXnwUfboH5
g9qzMgcGo8XQk4FR8+Be3jKIJA1EAw4esFMOas0e3zHiq6f8WtnESjjZkjLrmXZl
mky6FOAwjsYJX/65anuRgU1lgScOhMNrgXckpvi9WgFSY4W9l2xePLGXF/mjlUkd
oZ2iy9TISiFCvg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:42 2026 by rpki-client