Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier: gk19YAnMSdJeo2ad/1y06k/9w+PTlzIZBvfsJKr+96I=
Subject key identifier: FF:0F:BB:32:BA:74:E1:38:72:39:CF:DC:48:E7:08:97:8E:A2:8B:34
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019D27A8EDA923A6CBB3B3462EC74C7E0162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number: 0C72
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: CzW4u1rrcKCYl0G03vqU8cBXz94.roa (hash: /yz/XIWJQxzaieHj+TVvT11gZyxGejhib5PYK9y3aXc=)
2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: kuYU0kodstlqZmou/rdr0dFV7vgZCTLYWWlZDxbs3Nk=)
3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ed:a9:23:a6:cb:b3:b3:46:2e:c7:4c:7e:01:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=ff0fbb32ba74e1387239cfdc48e708978ea28b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:fc:18:70:1e:00:8c:12:2e:08:6f:6a:9b:
26:4d:7c:8e:b5:b0:08:1e:ac:f3:af:3f:19:ce:79:
6d:b9:48:24:a2:ec:b1:05:48:55:05:19:5a:8c:a3:
e1:b6:2d:e4:87:71:fc:de:46:a1:ca:5f:b1:60:e0:
73:5f:b2:f8:05:03:41:b9:29:b7:21:b5:62:45:f9:
08:c7:20:cc:c2:32:6b:8d:bc:9b:03:f4:f2:23:63:
2e:a9:ca:bd:d8:59:c7:a7:53:35:27:5e:87:77:f4:
fc:2a:94:a0:c3:e0:d6:85:88:18:6f:89:8d:57:51:
f7:6e:84:ca:39:30:6f:d4:7f:e4:76:32:d3:57:f4:
9a:a5:c4:3c:75:97:83:63:7c:95:18:93:20:05:6f:
14:53:bf:4d:89:fa:03:1b:78:bd:96:1b:b1:e8:18:
af:ef:a8:13:cf:a7:a2:f6:8b:90:43:2f:72:67:44:
04:6f:63:3c:25:31:98:68:ca:94:c1:23:b4:db:b6:
72:86:9e:b7:0c:15:e5:50:4d:f6:a3:4f:92:70:ad:
ee:33:78:5d:91:f2:a7:89:da:b7:05:ba:7a:f7:b2:
ce:d8:e0:3a:b2:8d:40:9c:36:fb:2f:e5:24:a0:3d:
6a:e9:1d:68:71:a7:6d:e5:15:c3:e0:61:f7:ac:25:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:BB:32:BA:74:E1:38:72:39:CF:DC:48:E7:08:97:8E:A2:8B:34
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c5:0e:a1:e6:8d:ad:b7:a7:26:bd:d4:a4:63:e4:f4:a8:5e:
33:9c:5e:02:91:8d:de:7c:72:ff:4e:9c:07:9c:e3:69:81:36:
5d:5b:23:5c:a4:c6:3a:92:21:26:a4:37:75:35:c4:15:8a:e2:
eb:09:4a:2b:ee:eb:0d:4b:68:db:85:54:e3:c6:81:4d:dd:4f:
92:96:3b:c4:ae:8f:8e:4a:c8:5c:8e:5a:5a:52:5a:e0:cb:a2:
2a:d9:4e:15:83:26:d8:64:96:20:a3:1f:78:14:0e:61:d9:e2:
0b:fc:39:aa:47:03:de:d7:e7:a9:2f:49:7d:81:7e:22:f5:cc:
a8:5b:85:34:8a:d1:53:f9:11:af:11:6f:72:f3:ef:b0:7d:6f:
99:47:04:da:cf:a6:70:35:66:b5:70:8e:d4:85:85:85:d8:5f:
7a:66:5b:8e:48:4b:e8:bc:d0:21:80:27:03:63:41:01:93:70:
ba:12:5d:85:4f:d9:d2:fc:c9:e5:16:3d:28:be:b5:19:60:fa:
78:32:23:d6:13:84:d5:cd:6a:65:93:e6:b1:06:43:8f:44:98:
d9:6b:3f:7b:25:cf:bf:de:1d:00:58:8e:17:cf:cc:fd:b9:e4:
f8:0c:13:67:3d:a5:4b:d9:42:92:dc:bc:e7:7e:c4:65:47:55:
80:b4:15:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqO2pI6bLs7NGLsdMfgFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx
MTkzZDQwHhcNMjYwMzI2MDEwMTE1WhcNMjYwMzI3MDEwMTE1WjAzMTEwLwYDVQQD
EyhmZjBmYmIzMmJhNzRlMTM4NzIzOWNmZGM0OGU3MDg5NzhlYTI4YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXn8GHAeAIwSLghvapsmTXyOtbAI
Hqzzrz8ZznltuUgkouyxBUhVBRlajKPhti3kh3H83kahyl+xYOBzX7L4BQNBuSm3
IbViRfkIxyDMwjJrjbybA/TyI2Muqcq92FnHp1M1J16Hd/T8KpSgw+DWhYgYb4mN
V1H3boTKOTBv1H/kdjLTV/SapcQ8dZeDY3yVGJMgBW8UU79NifoDG3i9lhux6Biv
76gTz6ei9ouQQy9yZ0QEb2M8JTGYaMqUwSO027Zyhp63DBXlUE32o0+ScK3uM3hd
kfKnidq3Bbp697LO2OA6so1AnDb7L+UkoD1q6R1ocadt5RXD4GH3rCV+xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8PuzK6dOE4cjnP3EjnCJeOoos0MB8GA1UdIwQY
MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt
MmZlZThiNjMwOWNiLzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi
LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMUOoeaN
rbenJr3UpGPk9KheM5xeApGN3nxy/06cB5zjaYE2XVsjXKTGOpIhJqQ3dTXEFYri
6wlKK+7rDUto24VU48aBTd1PkpY7xK6PjkrIXI5aWlJa4MuiKtlOFYMm2GSWIKMf
eBQOYdniC/w5qkcD3tfnqS9JfYF+IvXMqFuFNIrRU/kRrxFvcvPvsH1vmUcE2s+m
cDVmtXCO1IWFhdhfemZbjkhL6LzQIYAnA2NBAZNwuhJdhU/Z0vzJ5RY9KL61GWD6
eDIj1hOE1c1qZZPmsQZDj0SY2Ws/eyXPv94dAFiOF8/M/bnk+AwTZz2lS9lCkty8
537EZUdVgLQVQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:02 2026 by rpki-client