Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: Bi5es9TXagNYt/o7bQA5XFEp2plNZf0dZBAL6ky9X9E=
Subject key identifier: 2F:4E:31:FE:AD:DE:82:3E:D2:13:08:55:64:A6:3D:4A:50:4C:BA:8E
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 019D258410DE7093BC9A0F5C9C21D87B671F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:45 +0000
Manifest this update: Wed 25 Mar 2026 15:01:45 +0000
Manifest next update: Thu 26 Mar 2026 15:01:45 +0000
Files and hashes: 1: l8Y52p5aI63FDuq51m4qJ-mPHY4.roa (hash: wSpWuBqn1Tlul2t7+8SYMlOp535GnFPP8F8ir7MJTSU=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: 7I/QhTQ2shy4YLhiHVbEk4JXosdBO7zW/RMny4tSNKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:10:de:70:93:bc:9a:0f:5c:9c:21:d8:7b:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Mar 25 15:01:45 2026 GMT
Not After : Mar 26 15:01:45 2026 GMT
Subject: CN=2f4e31feadde823ed213085564a63d4a504cba8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:30:d2:87:b0:05:df:36:f0:d7:33:69:4f:
ef:de:50:55:a1:39:f9:e8:c4:cc:91:a0:45:3b:39:
91:ef:79:19:04:f0:66:60:ec:66:cf:d4:92:94:11:
2b:38:4e:48:e3:90:4b:40:3f:e1:75:b9:6c:d1:8d:
30:e0:16:03:54:1e:5b:61:48:2b:12:63:42:7a:60:
e4:7d:04:91:7f:0f:59:9e:ff:a1:4b:ec:e9:ce:bf:
06:8c:d8:2c:10:25:32:1a:12:db:d7:c7:1a:9c:92:
19:78:e4:30:fc:75:7b:9d:37:22:6e:29:3a:af:79:
14:da:d7:8b:0c:aa:e6:6d:19:5b:45:a1:ae:27:11:
d8:0a:a9:6c:73:46:8a:9e:e6:c9:f5:57:8b:ae:58:
e0:35:31:85:19:d2:9e:f4:10:04:46:42:2b:af:44:
e8:a6:95:a8:01:2a:07:56:90:ac:78:db:fe:52:3e:
89:a5:bb:2e:fd:2e:a5:ed:dc:e7:d4:3a:f6:53:47:
6c:fc:ef:90:78:0d:a1:7e:3e:1d:e2:50:45:57:ea:
81:b5:02:3a:64:75:e3:cd:fa:19:7c:cc:47:81:3e:
8f:76:ba:cf:df:b5:40:00:37:17:7e:6c:95:8f:b2:
4a:0e:58:f7:66:db:9d:4d:41:7c:0b:7d:e4:ab:d9:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:31:FE:AD:DE:82:3E:D2:13:08:55:64:A6:3D:4A:50:4C:BA:8E
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e1:d6:b5:e2:52:8c:fa:39:a0:a3:49:ea:37:d0:cc:1b:e8:
f8:f2:39:ee:68:8e:9a:f0:80:49:d3:d0:aa:b7:3c:c7:aa:4e:
92:34:7c:da:7e:ad:cb:95:13:73:3d:30:6c:c0:d2:2d:34:73:
ef:c9:7e:65:b9:84:4c:9e:44:46:49:1d:6a:10:22:2a:33:e0:
f2:c5:7f:ea:0c:b1:14:49:82:ad:04:4f:af:7f:13:49:39:e3:
f1:38:f9:12:1f:90:1e:79:98:65:64:ba:9e:89:d9:97:49:c9:
f6:c3:82:9d:91:8c:8c:90:39:55:98:12:ab:6c:06:91:7b:e3:
41:7e:3c:b6:ff:d0:37:39:02:30:7d:5c:cf:e8:17:4d:fe:b2:
21:7d:5d:f6:23:37:82:32:65:57:f5:c0:15:db:59:80:66:04:
e9:c5:2e:a2:1b:55:2d:4f:78:39:ee:84:d5:07:b5:cd:1d:69:
39:32:01:f4:d4:63:63:a8:60:3f:12:6b:06:45:dc:fd:84:ea:
2f:c1:f8:cf:74:c3:2e:ed:1b:4a:de:d7:66:0e:dc:80:71:dd:
f5:db:f6:f9:5c:f5:1b:29:f4:3a:3a:eb:55:4f:54:55:0e:ca:
50:b3:6a:2a:de:eb:20:88:c6:62:c4:d0:b8:a6:77:19:c9:fc:
0f:46:1c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhBDecJO8mg9cnCHYe2cfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDU0MDM2ZGFkMzJkMTdhOGM5MTZkYzJkZmJiM2NlOGEz
NjQ1MmMwHhcNMjYwMzI1MTUwMTQ1WhcNMjYwMzI2MTUwMTQ1WjAzMTEwLwYDVQQD
EygyZjRlMzFmZWFkZGU4MjNlZDIxMzA4NTU2NGE2M2Q0YTUwNGNiYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA248w0oewBd828NczaU/v3lBVoTn5
6MTMkaBFOzmR73kZBPBmYOxmz9SSlBErOE5I45BLQD/hdbls0Y0w4BYDVB5bYUgr
EmNCemDkfQSRfw9Znv+hS+zpzr8GjNgsECUyGhLb18canJIZeOQw/HV7nTcibik6
r3kU2teLDKrmbRlbRaGuJxHYCqlsc0aKnubJ9VeLrljgNTGFGdKe9BAERkIrr0To
ppWoASoHVpCseNv+Uj6Jpbsu/S6l7dzn1Dr2U0ds/O+QeA2hfj4d4lBFV+qBtQI6
ZHXjzfoZfMxHgT6PdrrP37VAADcXfmyVj7JKDlj3ZtudTUF8C33kq9l4twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9OMf6t3oI+0hMIVWSmPUpQTLqOMB8GA1UdIwQY
MBaAFK0FQDba0y0XqMkW3C37s86KNkUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0Yjgt
OGUxNTE0Y2NhYTRhLzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0YjgtOGUxNTE0Y2NhYTRh
LzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuHWteJS
jPo5oKNJ6jfQzBvo+PI57miOmvCASdPQqrc8x6pOkjR82n6ty5UTcz0wbMDSLTRz
78l+ZbmETJ5ERkkdahAiKjPg8sV/6gyxFEmCrQRPr38TSTnj8Tj5Eh+QHnmYZWS6
nonZl0nJ9sOCnZGMjJA5VZgSq2wGkXvjQX48tv/QNzkCMH1cz+gXTf6yIX1d9iM3
gjJlV/XAFdtZgGYE6cUuohtVLU94Oe6E1Qe1zR1pOTIB9NRjY6hgPxJrBkXc/YTq
L8H4z3TDLu0bSt7XZg7cgHHd9dv2+Vz1Gyn0OjrrVU9UVQ7KULNqKt7rIIjGYsTQ
uKZ3Gcn8D0Ycww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:40 2026 by rpki-client