Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File: QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier: /S0XGcqCZtF/U+1pOyHxd+ZOV0DxQk9qVzW5k5wUjZY=
Subject key identifier: C4:4A:65:A0:EA:19:F8:BC:60:C0:02:37:AB:63:A2:03:58:55:2B:30
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 019CC33C881CB0361770D65D238DB0FE13BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number: 14
Signing time: Fri 06 Mar 2026 13:00:50 +0000
Manifest this update: Fri 06 Mar 2026 13:00:50 +0000
Manifest next update: Sat 07 Mar 2026 13:00:50 +0000
Files and hashes: 1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: 9kObLiGWuHjztGdWS92eUBXx/yItrt62h4FoeznfUGA=)
2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:3c:88:1c:b0:36:17:70:d6:5d:23:8d:b0:fe:13:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Mar 6 13:00:50 2026 GMT
Not After : Mar 7 13:00:50 2026 GMT
Subject: CN=c44a65a0ea19f8bc60c00237ab63a20358552b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:08:f1:e3:6f:12:93:4c:93:ab:72:a5:db:
68:e2:2e:b9:85:aa:00:57:2f:e2:03:83:ad:fc:ec:
de:28:79:c1:4c:83:c8:12:54:96:9f:3b:f3:53:8a:
d6:76:2d:55:3e:54:79:15:56:dc:e6:c4:db:17:d2:
a0:25:32:35:ae:44:0b:16:22:86:ec:f0:9f:bb:13:
d9:bb:91:56:66:c7:95:57:74:ee:03:2b:c3:67:f1:
ee:3d:97:90:a6:2f:97:ce:b0:52:7e:e9:db:f1:9d:
53:33:24:ea:51:28:b3:e2:4e:79:8e:3e:5e:d6:45:
60:31:9a:4d:96:aa:e4:80:10:05:be:53:fc:13:44:
ef:f3:78:0f:3b:18:59:7c:92:b0:fc:6a:89:24:ea:
28:9c:f7:4f:bc:e7:75:a8:6d:fe:0c:9e:d1:4a:37:
48:db:18:ce:be:61:3b:94:c4:4e:a0:82:ad:6c:05:
92:77:62:60:03:08:e3:24:de:06:86:6a:9e:89:7c:
e4:87:52:1d:46:c1:f1:71:50:f6:d6:64:3b:49:49:
d3:da:a6:9e:29:de:7a:d6:45:8f:a0:20:53:b9:d1:
95:4f:9b:f8:7b:a2:b9:56:40:1a:13:e7:fb:db:47:
5a:01:d8:97:01:b4:46:f6:0f:3d:31:f2:75:2d:d6:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:65:A0:EA:19:F8:BC:60:C0:02:37:AB:63:A2:03:58:55:2B:30
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:65:d2:47:08:9f:d8:e7:1a:ff:3e:5d:18:5e:13:52:aa:f2:
ab:11:4a:70:59:db:af:73:c3:98:39:31:94:2d:12:b5:59:09:
eb:1f:d5:7b:2e:f7:d1:77:d5:dc:1e:28:24:47:35:01:0b:6d:
b8:a9:80:9d:4b:97:40:89:a1:02:5f:30:c5:f8:47:b9:bd:68:
fe:09:d8:91:8a:34:d2:62:5e:39:94:61:b7:49:19:7d:f6:8b:
50:90:14:f9:f7:e4:a6:07:9f:08:20:98:db:d6:76:9d:c8:2f:
86:54:23:dd:80:e1:c7:7e:da:70:7e:a6:76:31:41:d9:cf:1a:
fd:59:0b:0a:63:07:a8:8d:02:0d:fe:83:30:2d:29:bc:b1:5f:
b3:99:9e:cd:d9:e9:bf:c2:c1:c0:5e:c0:9c:9a:59:9b:8a:2b:
59:8f:7a:34:fa:67:92:2e:a9:9b:82:14:1b:28:fd:3c:1c:12:
b4:5b:15:57:bb:5f:5b:ad:75:0e:8f:83:08:67:ba:a8:31:75:
90:df:de:72:ed:b8:47:a8:24:c5:b9:5c:3e:a6:de:ec:09:3d:
18:59:74:7a:86:f8:82:6d:a6:03:47:19:72:0d:59:4c:e0:8f:
4d:6a:a3:c8:2c:aa:df:2e:ad:df:75:e8:22:07:d8:f2:2c:b1:
b8:1c:50:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzDPIgcsDYXcNZdI42w/hO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmJiM2UyY2FkN2IxMDAyNTZlMWM0YTdmNTU1YjZhMzhk
ODc1MjYwHhcNMjYwMzA2MTMwMDUwWhcNMjYwMzA3MTMwMDUwWjAzMTEwLwYDVQQD
EyhjNDRhNjVhMGVhMTlmOGJjNjBjMDAyMzdhYjYzYTIwMzU4NTUyYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskMI8eNvEpNMk6typdto4i65haoA
Vy/iA4Ot/OzeKHnBTIPIElSWnzvzU4rWdi1VPlR5FVbc5sTbF9KgJTI1rkQLFiKG
7PCfuxPZu5FWZseVV3TuAyvDZ/HuPZeQpi+XzrBSfunb8Z1TMyTqUSiz4k55jj5e
1kVgMZpNlqrkgBAFvlP8E0Tv83gPOxhZfJKw/GqJJOoonPdPvOd1qG3+DJ7RSjdI
2xjOvmE7lMROoIKtbAWSd2JgAwjjJN4GhmqeiXzkh1IdRsHxcVD21mQ7SUnT2qae
Kd561kWPoCBTudGVT5v4e6K5VkAaE+f720daAdiXAbRG9g89MfJ1LdYXOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRKZaDqGfi8YMACN6tjogNYVSswMB8GA1UdIwQY
MBaAFEBrs+LK17EAJW4cSn9VW2o42HUmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjBhZGYtNjYzYS00MDJiLWIyNmMt
Y2ZjMDFjOGZmOWVkLzEvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZjBhZGYtNjYzYS00MDJiLWIyNmMtY2ZjMDFjOGZmOWVk
LzEvUUd1ejRzclhzUUFsYmh4S2YxVmJhampZZFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2XSRwif
2Oca/z5dGF4TUqryqxFKcFnbr3PDmDkxlC0StVkJ6x/Vey730XfV3B4oJEc1AQtt
uKmAnUuXQImhAl8wxfhHub1o/gnYkYo00mJeOZRht0kZffaLUJAU+ffkpgefCCCY
29Z2ncgvhlQj3YDhx37acH6mdjFB2c8a/VkLCmMHqI0CDf6DMC0pvLFfs5mezdnp
v8LBwF7AnJpZm4orWY96NPpnki6pm4IUGyj9PBwStFsVV7tfW611Do+DCGe6qDF1
kN/ecu24R6gkxblcPqbe7Ak9GFl0eob4gm2mA0cZcg1ZTOCPTWqjyCyq3y6t33Xo
IgfY8iyxuBxQvg==
-----END CERTIFICATE-----
Generated at Fri Mar 6 16:19:13 2026 by rpki-client