Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: iyP5413bWJxICIMhmuBUj424zY1M8rxeiIkVlDylYJ0=
Subject key identifier: B6:DB:D3:79:83:92:91:F5:46:92:91:E7:E7:49:C0:15:8F:B8:EE:3F
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 019D284D5520FD62B2AD5AE40EBC475EB6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0FBD
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: GuUQabt2k0I5-qJJOMBc68ywwdc.roa (hash: Xq2BynkEhHcna9VYb0KvlZPGBlElBggMhxm3EhEPnM0=)
2: NSXY549oyeJh_ywPWUFsoFAfnFE.roa (hash: PqAKJQyPO77ShWqR8N9V3ypCb33ovrN70zA1E2ZocLc=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: /TrsPBC8S9G9X8ngDbsvYoUHrhBoNBryTtAqQRbm8GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:55:20:fd:62:b2:ad:5a:e4:0e:bc:47:5e:b6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=b6dbd379839291f5469291e7e749c0158fb8ee3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:8e:b0:10:de:d9:78:fd:01:fd:dc:95:8b:
8b:02:8f:b4:49:7b:54:fb:56:80:77:75:01:d8:be:
06:28:e2:d4:03:21:bc:a3:08:22:48:56:6e:a7:0e:
fe:ba:98:c1:f2:5e:9e:e1:7d:cb:9b:a4:8c:60:18:
03:8c:9a:85:77:83:14:1c:4d:d9:7b:16:6e:23:98:
59:97:31:5a:ce:f8:34:8d:fd:c8:be:f4:fb:cd:4e:
61:24:f5:ba:87:00:3d:00:7e:cd:53:fa:27:f8:1e:
13:c3:e5:37:0f:0a:41:df:5f:b9:bc:c8:60:0f:fe:
f9:85:dc:e9:4f:7c:f3:6b:7b:d6:43:53:25:ec:34:
18:fa:ca:f3:1c:1c:00:00:aa:cc:ca:a0:ec:ce:37:
ad:12:ab:9b:1f:ef:38:a0:2b:e0:73:1c:fc:d8:31:
b1:67:cf:3f:80:e4:e3:86:64:56:87:ab:4a:f0:12:
83:38:5c:3e:a8:a3:6c:bc:a5:1c:26:e2:08:aa:db:
86:e8:b3:99:65:52:b8:8c:fb:6c:13:94:e8:92:69:
11:11:66:75:85:b7:38:8d:aa:64:3a:0e:dc:56:dc:
cc:d4:60:6f:e4:b5:15:77:4a:b6:67:da:4f:92:53:
0a:58:90:ff:a2:18:e2:b3:12:85:f3:74:e5:b4:93:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DB:D3:79:83:92:91:F5:46:92:91:E7:E7:49:C0:15:8F:B8:EE:3F
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8c:4c:79:21:78:6c:c2:c3:0c:ff:e2:ea:f6:f2:94:95:01:
16:d7:d9:e4:de:e3:2a:b4:bb:38:1d:38:c2:6a:a4:df:23:4c:
c8:3d:73:3d:c7:a2:d9:bd:60:a2:12:04:0a:76:8c:e5:80:22:
bc:05:ae:3f:5b:89:75:0c:a2:cf:6c:6e:18:9e:a2:99:f8:db:
51:86:0b:a7:7e:bd:d0:eb:cf:bc:6c:99:06:2d:51:eb:c3:de:
b3:8a:16:bb:3c:3d:f4:16:6d:d2:95:48:66:77:42:da:02:00:
d5:60:29:3e:f7:35:b5:86:5c:9e:b6:13:5b:54:9d:46:a7:65:
79:c9:de:6a:c5:82:15:2b:4e:0f:70:c2:e9:5c:38:d2:8a:87:
d5:c2:d1:19:c2:db:82:8e:2b:99:fa:65:09:b1:05:52:00:15:
be:0d:0c:8d:a1:f7:43:34:51:6d:26:5d:d9:04:a1:6c:e9:8a:
a5:94:20:1a:b6:fe:42:1a:00:da:3d:78:c8:c5:0a:92:0b:6b:
79:1c:9d:2a:4a:73:c0:fb:62:96:2b:ce:eb:d3:5e:d7:00:de:
cf:20:1d:73:6b:ad:9d:3b:e0:a7:67:81:f4:87:de:5f:40:0d:
a6:fe:23:6b:70:76:df:f5:3d:94:25:0a:79:1e:73:22:e2:cf:
20:7b:a1:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVUg/WKyrVrkDrxHXraoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZmMzkzMzUwYzc3NTk4YzEyMWFjZDNjOTJmNzA0ODU3
NmVmODkwHhcNMjYwMzI2MDQwMDQ5WhcNMjYwMzI3MDQwMDQ5WjAzMTEwLwYDVQQD
EyhiNmRiZDM3OTgzOTI5MWY1NDY5MjkxZTdlNzQ5YzAxNThmYjhlZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2WOsBDe2Xj9Af3clYuLAo+0SXtU
+1aAd3UB2L4GKOLUAyG8owgiSFZupw7+upjB8l6e4X3Lm6SMYBgDjJqFd4MUHE3Z
exZuI5hZlzFazvg0jf3IvvT7zU5hJPW6hwA9AH7NU/on+B4Tw+U3DwpB31+5vMhg
D/75hdzpT3zza3vWQ1Ml7DQY+srzHBwAAKrMyqDszjetEqubH+84oCvgcxz82DGx
Z88/gOTjhmRWh6tK8BKDOFw+qKNsvKUcJuIIqtuG6LOZZVK4jPtsE5TokmkREWZ1
hbc4japkOg7cVtzM1GBv5LUVd0q2Z9pPklMKWJD/ohjisxKF83TltJN5CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbb03mDkpH1RpKR5+dJwBWPuO4/MB8GA1UdIwQY
MBaAFKjG85M1DHdZjBIazTyS9wSFdu+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3Nzct
YzZiY2EwMWIyZmY4LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3NzctYzZiY2EwMWIyZmY4
LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYxMeSF4
bMLDDP/i6vbylJUBFtfZ5N7jKrS7OB04wmqk3yNMyD1zPcei2b1gohIECnaM5YAi
vAWuP1uJdQyiz2xuGJ6imfjbUYYLp3690OvPvGyZBi1R68Pes4oWuzw99BZt0pVI
ZndC2gIA1WApPvc1tYZcnrYTW1SdRqdlecneasWCFStOD3DC6Vw40oqH1cLRGcLb
go4rmfplCbEFUgAVvg0MjaH3QzRRbSZd2QShbOmKpZQgGrb+QhoA2j14yMUKkgtr
eRydKkpzwPtilivO69Ne1wDezyAdc2utnTvgp2eB9IfeX0ANpv4ja3B23/U9lCUK
eR5zIuLPIHuh6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:34 2026 by rpki-client