Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: mgoVF9FyKj4UUMsd07AbdV7YtkY+4ksctnFhsPeEcvk=
Subject key identifier: F0:63:5A:DE:09:26:98:DE:87:3A:D6:FF:D0:3D:6E:DA:BB:00:F7:DD
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 019D265F0016AD78186DFA613A8F0D3F4F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0F07
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: eogi7uZKoXfZXQjkTKe/ZquKMBnWGKH3xpDl60nDLfU=)
2: skeAadI4AP4ZvpAKWtTlCV07X48.roa (hash: teA/npSH8zrPPm6lOFHsXXFeJadHqVvDUxx+vJRFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:00:16:ad:78:18:6d:fa:61:3a:8f:0d:3f:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=f0635ade092698de873ad6ffd03d6edabb00f7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:6b:57:70:3a:07:e2:d2:24:a9:17:1e:99:
72:b5:c3:73:79:8f:37:be:de:fc:12:ef:c1:8d:a1:
1f:4a:8e:d1:fd:8e:68:2e:10:14:62:f3:a0:bf:66:
8d:a7:4f:ce:86:db:96:b2:2f:a7:8b:84:d9:52:94:
5f:c0:19:77:4f:94:bf:51:ef:93:12:5b:41:dc:01:
8a:b6:ab:11:32:3b:a7:34:c5:d0:c7:91:c7:27:6e:
6b:0e:39:ac:6b:8d:e5:e8:35:ba:f1:67:97:f4:c4:
a1:35:18:be:9e:11:d4:4e:3f:3f:99:d6:b5:b9:a7:
21:59:15:66:a4:54:a5:bc:ad:46:36:5a:ae:1b:d1:
b8:c7:b3:6f:3d:10:1f:fa:33:16:69:b5:ba:32:87:
83:a9:99:fa:3d:66:19:2f:8d:8b:67:df:e3:64:90:
da:96:81:0d:85:f6:88:22:59:dc:4a:96:9c:ed:e7:
4d:09:d0:22:a7:49:6c:ea:93:e2:9b:f2:e1:2c:15:
39:4e:8f:31:0f:c5:e2:80:f4:e8:9a:ed:04:ea:31:
09:1e:77:c8:aa:cc:f6:00:28:18:fd:42:78:09:f1:
7d:d9:2e:95:78:b9:06:d7:72:d1:9f:1b:55:78:30:
06:86:2d:62:03:95:f8:ee:10:b0:85:33:14:04:d8:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:5A:DE:09:26:98:DE:87:3A:D6:FF:D0:3D:6E:DA:BB:00:F7:DD
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ee:ec:1d:b2:c3:80:51:02:fe:f3:4b:d0:3c:28:66:34:be:
f4:9f:22:4b:16:89:56:98:8b:f6:56:6b:78:91:20:00:5b:c4:
19:4a:49:b5:5b:cb:f5:b5:a9:7d:f4:4c:17:26:1b:24:fc:16:
01:cc:ea:f8:7c:0b:5b:9b:29:3d:3d:4a:b4:a3:fc:a0:07:81:
f4:6f:05:33:e2:aa:26:54:32:a8:92:7a:5c:e9:d6:dc:23:30:
58:fe:ef:06:5a:77:19:b0:cb:c5:5d:ea:f3:0e:90:8f:ca:34:
ba:2c:89:b3:19:ac:23:8b:b2:16:7c:ae:f6:6b:a5:09:bc:45:
63:0b:ba:7a:4a:79:6c:60:d6:0a:d9:51:38:31:ce:5f:1b:9b:
0e:2f:f3:cc:dc:17:cb:d8:b8:01:af:a8:17:ec:32:20:28:e0:
5d:5f:73:f8:26:fc:16:80:4c:d2:0e:48:2d:25:70:3e:7c:3e:
31:b4:0c:1e:62:81:4d:7e:80:85:2c:af:8d:f6:d0:d2:9b:ab:
0b:18:90:37:69:a2:22:0c:51:85:f7:13:cb:b2:27:5e:2b:c7:
df:9e:ab:31:de:a7:e3:63:21:cb:ed:d9:5c:72:4b:00:f4:dc:
a2:cd:c4:c9:a6:e1:b1:37:69:c0:e8:ad:3e:c7:3b:2e:ea:af:
70:92:93:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXwAWrXgYbfphOo8NP09lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2
MDUxNTEwHhcNMjYwMzI1MTkwMDUzWhcNMjYwMzI2MTkwMDUzWjAzMTEwLwYDVQQD
EyhmMDYzNWFkZTA5MjY5OGRlODczYWQ2ZmZkMDNkNmVkYWJiMDBmN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0trV3A6B+LSJKkXHplytcNzeY83
vt78Eu/BjaEfSo7R/Y5oLhAUYvOgv2aNp0/OhtuWsi+ni4TZUpRfwBl3T5S/Ue+T
EltB3AGKtqsRMjunNMXQx5HHJ25rDjmsa43l6DW68WeX9MShNRi+nhHUTj8/mda1
uachWRVmpFSlvK1GNlquG9G4x7NvPRAf+jMWabW6MoeDqZn6PWYZL42LZ9/jZJDa
loENhfaIIlncSpac7edNCdAip0ls6pPim/LhLBU5To8xD8XigPTomu0E6jEJHnfI
qsz2ACgY/UJ4CfF92S6VeLkG13LRnxtVeDAGhi1iA5X47hCwhTMUBNg+1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBjWt4JJpjehzrW/9A9btq7APfdMB8GA1UdIwQY
MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt
MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy
LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe7sHbLD
gFEC/vNL0DwoZjS+9J8iSxaJVpiL9lZreJEgAFvEGUpJtVvL9bWpffRMFyYbJPwW
Aczq+HwLW5spPT1KtKP8oAeB9G8FM+KqJlQyqJJ6XOnW3CMwWP7vBlp3GbDLxV3q
8w6Qj8o0uiyJsxmsI4uyFnyu9mulCbxFYwu6ekp5bGDWCtlRODHOXxubDi/zzNwX
y9i4Aa+oF+wyICjgXV9z+Cb8FoBM0g5ILSVwPnw+MbQMHmKBTX6AhSyvjfbQ0pur
CxiQN2miIgxRhfcTy7InXivH356rMd6n42Mhy+3ZXHJLAPTcos3EyabhsTdpwOit
Psc7LuqvcJKTcw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:39 2026 by rpki-client