Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json)
Hash identifier: +MYf3UYvsjgC42wJ61SD7hUOdTrv3M1oSFRCsNu1/a0=
Subject key identifier: 1A:E9:26:B1:3C:12:3F:A6:83:90:FD:6B:38:91:56:34:25:06:C7:80
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019D25836928074C0D7E3587B21C007E1A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
Manifest number: 013D
Signing time: Wed 25 Mar 2026 15:01:02 +0000
Manifest this update: Wed 25 Mar 2026 15:01:02 +0000
Manifest next update: Thu 26 Mar 2026 15:01:02 +0000
Files and hashes: 1: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: 8iZqjMeZYvFCf1IwFrwrvQUYM04M9agjHenzZ3FXePw=)
2: w9_9phOVfcIB0arXvZjOg3oe-Gk.asa (hash: rpPL3WEh5ip5RqGHVPKSVlccVtUT14qZLk2GgYWP78M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:69:28:07:4c:0d:7e:35:87:b2:1c:00:7e:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Mar 25 15:01:02 2026 GMT
Not After : Mar 26 15:01:02 2026 GMT
Subject: CN=1ae926b13c123fa68390fd6b389156342506c780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:26:66:94:a9:d2:20:eb:8e:11:6e:80:b5:
73:f0:b9:02:31:3f:8b:54:f5:0a:55:20:92:f1:b8:
24:21:53:46:3f:da:57:f9:6a:94:32:e3:5d:a5:aa:
32:72:49:09:21:43:7d:6c:cc:dd:bc:d5:79:eb:c3:
7b:d5:35:d9:ae:ee:7e:b8:01:ef:65:38:89:f9:66:
de:f5:3c:5e:ab:97:55:a1:6b:2e:91:5e:2b:78:47:
19:86:f8:cf:0c:c4:59:34:5c:75:00:77:d6:83:a6:
b2:cb:b7:5b:4d:d7:56:9b:17:e3:6b:af:15:92:a0:
94:33:5c:9e:94:dc:4f:9c:f5:29:11:6e:7c:7a:61:
a5:8f:f2:89:a8:e3:d8:d8:83:34:09:21:07:59:f4:
ca:c4:34:88:81:b4:7c:fa:3c:ed:de:7e:24:b7:6f:
90:fd:1f:2e:9e:dd:66:a4:7c:bc:50:4a:9e:4f:9f:
fa:66:39:19:ce:9d:e8:10:c0:53:c9:3d:20:0d:c6:
e0:bd:d2:f1:02:a5:d3:73:8f:c1:a5:37:40:45:9c:
8d:77:df:18:aa:7c:54:04:7f:76:70:7d:32:0c:43:
a6:c6:b6:74:23:5e:3c:5e:35:fe:05:36:d9:43:2d:
1f:e1:02:f3:56:6f:89:1b:db:76:e3:ef:1c:8e:80:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:26:B1:3C:12:3F:A6:83:90:FD:6B:38:91:56:34:25:06:C7:80
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f7:bf:48:f1:e3:f7:2a:84:ed:fd:4b:ea:c2:fb:a6:be:15:
49:52:12:f2:f4:f3:cf:a2:fc:3b:cd:fa:df:6f:e7:0e:0e:ee:
0f:a2:a8:a9:a3:db:8c:51:b0:42:a9:b3:90:fe:09:65:36:eb:
68:6c:e4:f3:e0:60:d2:d8:56:a5:87:f2:a7:1a:e3:e6:79:26:
e8:09:b0:5e:67:7b:07:4b:78:b7:64:49:b3:ec:e8:ce:b0:39:
ea:13:3d:1b:e7:b6:bf:4a:63:d1:77:78:0f:b5:f9:17:3a:03:
87:95:99:cb:36:75:86:d0:ed:d2:14:f4:ec:45:e4:01:57:1e:
75:96:e9:aa:19:b8:88:d6:29:98:c1:c6:d4:2a:e9:b4:5b:6b:
ee:4b:3b:52:26:0f:a4:93:0c:01:96:ca:2f:64:f5:68:c8:f0:
b4:67:bc:aa:7a:2b:e9:88:bb:3f:ff:45:a4:02:49:ff:db:c7:
e4:46:c0:6d:81:c6:79:c2:68:d3:bf:67:d2:50:26:35:f8:a2:
53:8b:cb:f8:a4:d4:c5:13:de:df:52:3c:32:69:9e:f5:21:5b:
19:92:08:73:76:a0:30:26:9c:92:ef:b3:06:12:98:0a:a0:dd:
ad:2d:12:85:15:a5:e6:bf:44:eb:87:71:1c:8b:3c:23:70:6b:
77:5c:59:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg2koB0wNfjWHshwAfhpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz
MjlhMDcwHhcNMjYwMzI1MTUwMTAyWhcNMjYwMzI2MTUwMTAyWjAzMTEwLwYDVQQD
EygxYWU5MjZiMTNjMTIzZmE2ODM5MGZkNmIzODkxNTYzNDI1MDZjNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj0mZpSp0iDrjhFugLVz8LkCMT+L
VPUKVSCS8bgkIVNGP9pX+WqUMuNdpaoyckkJIUN9bMzdvNV568N71TXZru5+uAHv
ZTiJ+Wbe9Txeq5dVoWsukV4reEcZhvjPDMRZNFx1AHfWg6ayy7dbTddWmxfja68V
kqCUM1yelNxPnPUpEW58emGlj/KJqOPY2IM0CSEHWfTKxDSIgbR8+jzt3n4kt2+Q
/R8unt1mpHy8UEqeT5/6ZjkZzp3oEMBTyT0gDcbgvdLxAqXTc4/BpTdARZyNd98Y
qnxUBH92cH0yDEOmxrZ0I148XjX+BTbZQy0f4QLzVm+JG9t24+8cjoDUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrpJrE8Ej+mg5D9aziRVjQlBseAMB8GA1UdIwQY
MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt
ZTU5MmM3ZDM1ZmYyLzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy
LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPe/SPHj
9yqE7f1L6sL7pr4VSVIS8vTzz6L8O83632/nDg7uD6KoqaPbjFGwQqmzkP4JZTbr
aGzk8+Bg0thWpYfypxrj5nkm6AmwXmd7B0t4t2RJs+zozrA56hM9G+e2v0pj0Xd4
D7X5FzoDh5WZyzZ1htDt0hT07EXkAVcedZbpqhm4iNYpmMHG1CrptFtr7ks7UiYP
pJMMAZbKL2T1aMjwtGe8qnor6Yi7P/9FpAJJ/9vH5EbAbYHGecJo079n0lAmNfii
U4vL+KTUxRPe31I8Mmme9SFbGZIIc3agMCacku+zBhKYCqDdrS0ShRWl5r9E64dx
HIs8I3Brd1xZNw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:55 2026 by rpki-client