Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
File: Qw66p97iuM4Ru6dRoX2nshMTtm4.mft (raw, json)
Hash identifier: gavYdLlVexaKt8Es1BpUyb0mSKDMkPQDJSEbTEIr5bk=
Subject key identifier: EA:61:B8:16:F2:44:30:22:C9:61:8B:4E:B8:C0:9C:FC:D6:83:5C:46
Authority key identifier: 43:0E:BA:A7:DE:E2:B8:CE:11:BB:A7:51:A1:7D:A7:B2:13:13:B6:6E
Certificate issuer: /CN=430ebaa7dee2b8ce11bba751a17da7b21313b66e
Certificate serial: 019D326317C8B99E960D6938DA09A3AE143B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
Manifest number: 79
Signing time: Sat 28 Mar 2026 03:00:47 +0000
Manifest this update: Sat 28 Mar 2026 03:00:47 +0000
Manifest next update: Sun 29 Mar 2026 03:00:47 +0000
Files and hashes: 1: 1-Q4j0qKtj29aQO8HTd1ll4oq01M.roa (hash: Lf21mP22Hqe9W386laAQtZ9s0Z9m4XiYLVKYKs7MqJo=)
2: Qw66p97iuM4Ru6dRoX2nshMTtm4.crl (hash: 5AAUAq4p+NYmL2DYiC4Sg5uAkB9mEyDnRDbMCkHqmUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:17:c8:b9:9e:96:0d:69:38:da:09:a3:ae:14:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430ebaa7dee2b8ce11bba751a17da7b21313b66e
Validity
Not Before: Mar 28 03:00:47 2026 GMT
Not After : Mar 29 03:00:47 2026 GMT
Subject: CN=ea61b816f2443022c9618b4eb8c09cfcd6835c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:cb:5e:78:5b:bb:22:dd:12:02:60:25:80:
bf:06:14:35:b4:0b:70:4a:fe:e8:5e:1f:25:c2:5b:
de:3f:42:eb:0e:1e:d1:19:62:fb:2a:50:fe:4c:5e:
df:fb:9b:a2:b6:ea:b3:d0:32:76:e3:f1:3b:be:2a:
36:d7:e3:e4:17:5d:29:8b:5f:91:af:fd:4c:cb:52:
9c:8d:eb:a1:62:da:90:6c:81:e9:61:5c:fb:8e:eb:
93:e9:51:ed:f9:53:1d:75:0a:1d:99:ab:c4:5f:28:
44:d7:09:eb:8f:d0:77:4a:82:2b:ea:08:79:64:3e:
db:7e:75:3b:65:76:de:22:78:bc:79:c5:0b:55:4a:
d6:38:7e:8f:2a:b7:20:2c:e4:5e:7c:8e:94:4d:4c:
f2:a6:53:55:47:bc:8d:85:7c:9f:b6:da:84:79:45:
25:06:b5:30:b8:d3:62:f3:cc:4d:88:ae:20:b2:b2:
0e:d1:0e:be:df:15:39:74:f2:ab:f3:65:3a:81:29:
fa:a0:16:6a:2e:56:f1:7a:28:2e:3b:db:e3:f1:4e:
be:88:a7:aa:c1:9f:c1:b3:03:79:85:0a:8e:0c:37:
10:4a:db:46:57:2e:33:8d:06:07:e8:fd:7c:54:79:
00:f3:a1:66:69:de:a3:67:d3:aa:af:08:6f:83:dd:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:B8:16:F2:44:30:22:C9:61:8B:4E:B8:C0:9C:FC:D6:83:5C:46
X509v3 Authority Key Identifier:
keyid:43:0E:BA:A7:DE:E2:B8:CE:11:BB:A7:51:A1:7D:A7:B2:13:13:B6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:16:31:97:99:85:1e:b5:70:2c:a4:c9:a4:00:52:94:8b:8d:
ae:8d:f7:23:ef:dc:d9:c4:7d:f7:11:c2:b8:b7:10:33:7f:49:
5c:a4:6a:78:eb:a1:82:9b:cd:de:1a:93:75:3d:3d:b9:e6:4a:
31:ef:0e:f0:3d:51:56:65:bd:d5:d2:05:60:3d:75:5a:c7:09:
35:75:b8:5e:f0:a6:8b:89:8e:73:71:6d:53:37:1c:79:4f:6a:
dc:a7:93:60:b8:8c:0f:43:57:21:be:3b:54:05:7d:d9:1e:ef:
31:e0:1b:ad:f3:b9:17:5d:89:7c:cd:56:10:3d:22:a9:ec:1f:
2e:cc:99:eb:2a:c9:c7:c3:44:c0:49:61:9c:73:ad:10:43:60:
8d:5c:86:54:ad:f2:16:df:44:39:11:f4:61:b7:c5:3c:6f:2f:
4e:77:a2:fd:53:1d:ca:af:0b:ad:6b:cf:cb:21:fe:a7:c4:e9:
25:b3:e8:a9:52:01:4a:ef:11:f4:4a:9e:4a:b1:4f:d5:69:bf:
f0:07:76:cb:23:9a:6f:1a:b2:89:58:19:5b:4e:86:67:2e:fd:
70:f0:6f:2f:01:af:9d:11:16:bd:69:51:6b:55:be:73:63:4e:
0b:91:f8:78:8c:1e:b7:d0:6d:80:f0:c7:e3:59:80:a5:7c:1d:
bc:73:28:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yYxfIuZ6WDWk42gmjrhQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGViYWE3ZGVlMmI4Y2UxMWJiYTc1MWExN2RhN2IyMTMx
M2I2NmUwHhcNMjYwMzI4MDMwMDQ3WhcNMjYwMzI5MDMwMDQ3WjAzMTEwLwYDVQQD
EyhlYTYxYjgxNmYyNDQzMDIyYzk2MThiNGViOGMwOWNmY2Q2ODM1YzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fbLXnhbuyLdEgJgJYC/BhQ1tAtw
Sv7oXh8lwlveP0LrDh7RGWL7KlD+TF7f+5uituqz0DJ24/E7vio21+PkF10pi1+R
r/1My1KcjeuhYtqQbIHpYVz7juuT6VHt+VMddQodmavEXyhE1wnrj9B3SoIr6gh5
ZD7bfnU7ZXbeIni8ecULVUrWOH6PKrcgLORefI6UTUzyplNVR7yNhXyfttqEeUUl
BrUwuNNi88xNiK4gsrIO0Q6+3xU5dPKr82U6gSn6oBZqLlbxeiguO9vj8U6+iKeq
wZ/BswN5hQqODDcQSttGVy4zjQYH6P18VHkA86Fmad6jZ9Oqrwhvg935KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOphuBbyRDAiyWGLTrjAnPzWg1xGMB8GA1UdIwQY
MBaAFEMOuqfe4rjOEbunUaF9p7ITE7ZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXc2NnA5N2l1TTRSdTZkUm9YMm5zaE1UdG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZWZjOTAtM2Q3MS00MGUwLWE2YjMt
OWY3OTBjMWIyMjM0LzEvUXc2NnA5N2l1TTRSdTZkUm9YMm5zaE1UdG00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lZWZjOTAtM2Q3MS00MGUwLWE2YjMtOWY3OTBjMWIyMjM0
LzEvUXc2NnA5N2l1TTRSdTZkUm9YMm5zaE1UdG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRYxl5mF
HrVwLKTJpABSlIuNro33I+/c2cR99xHCuLcQM39JXKRqeOuhgpvN3hqTdT09ueZK
Me8O8D1RVmW91dIFYD11WscJNXW4XvCmi4mOc3FtUzcceU9q3KeTYLiMD0NXIb47
VAV92R7vMeAbrfO5F12JfM1WED0iqewfLsyZ6yrJx8NEwElhnHOtEENgjVyGVK3y
Ft9EORH0YbfFPG8vTnei/VMdyq8LrWvPyyH+p8TpJbPoqVIBSu8R9EqeSrFP1Wm/
8Ad2yyOabxqyiVgZW06GZy79cPBvLwGvnREWvWlRa1W+c2NOC5H4eIwet9BtgPDH
41mApXwdvHMoew==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:51:56 2026 by rpki-client