Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: a3JMpgqSUNrcJF1Ui1vXtM1B5xkCtFT/k9lnDCE8uqo=
Subject key identifier: 8F:4E:0C:77:2E:97:E1:1B:BB:54:03:C0:E1:1F:2F:80:70:1C:FE:7C
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019D265FD8C4AA0D3CB05872E586C78132EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 14F7
Signing time: Wed 25 Mar 2026 19:01:48 +0000
Manifest this update: Wed 25 Mar 2026 19:01:48 +0000
Manifest next update: Thu 26 Mar 2026 19:01:48 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: ApNxeA34hQ39s+SCi9Mw4CyteG/knDoDdfS1kqad2b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d8:c4:aa:0d:3c:b0:58:72:e5:86:c7:81:32:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Mar 25 19:01:48 2026 GMT
Not After : Mar 26 19:01:48 2026 GMT
Subject: CN=8f4e0c772e97e11bbb5403c0e11f2f80701cfe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:9a:c6:7f:8c:55:7a:86:c3:c1:41:26:fe:
a9:39:1a:12:ba:0a:b8:fc:e7:6a:e6:51:d6:dc:d2:
ae:ca:fb:08:82:eb:a9:5c:f7:d3:c1:2c:29:af:04:
72:62:3d:48:34:e2:85:37:1c:60:1f:76:dd:34:92:
3c:84:06:e2:0c:8e:6f:d0:05:1b:1f:97:c4:e5:25:
a5:a1:2f:4f:ba:5d:61:d2:12:0e:29:fd:f1:d0:6f:
6c:e5:b6:58:35:13:55:bc:c2:c9:fb:1d:13:38:2f:
73:0c:d0:6b:36:90:83:37:cb:39:cd:e1:c5:3c:34:
c4:0b:c9:3b:c3:fb:57:51:f0:b3:1f:ed:cc:54:32:
6c:02:3b:f6:a8:c2:1f:2b:bf:07:73:4f:29:9f:0d:
0b:fc:6e:df:77:8d:00:44:8d:05:2f:a7:39:d9:67:
4f:0e:8e:91:0a:cb:2d:29:3a:eb:b3:bf:c6:0f:c8:
ee:92:71:ab:83:e1:37:ff:47:7b:b7:7f:99:6f:4b:
55:1c:f7:90:96:c5:2c:de:4f:34:81:4c:63:9d:24:
f1:af:d0:f6:4d:c0:cc:c3:76:eb:e8:f9:85:72:27:
01:8d:e3:9b:74:36:af:80:c2:39:a4:0d:d9:f9:87:
13:8f:2f:76:55:f9:52:20:08:3c:63:af:0f:27:50:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:0C:77:2E:97:E1:1B:BB:54:03:C0:E1:1F:2F:80:70:1C:FE:7C
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7e:8a:59:b4:ea:b7:6a:43:0d:df:90:34:3a:ac:ec:f7:67:
38:30:0e:73:c7:ae:3a:90:be:48:48:86:3e:07:57:44:c8:31:
dc:c1:11:22:a8:f1:2b:56:5f:64:53:91:72:c0:63:7c:b7:49:
4e:fa:91:f9:f9:bc:60:93:24:05:38:c1:16:b5:47:09:04:fa:
4e:1d:cd:50:be:36:1c:5b:3c:e0:41:ef:ed:df:c8:d9:f3:d6:
7e:c0:79:35:15:d8:cf:1d:e6:5f:a1:86:2a:1b:35:67:ba:e7:
41:24:35:06:23:ef:21:84:10:88:f4:f4:ee:3e:a2:a9:f1:03:
da:d0:37:ae:07:79:83:e1:9b:38:b7:65:03:c3:d5:58:4d:14:
71:76:07:81:7c:43:3d:70:83:1c:3f:72:1e:2e:3a:81:e9:4e:
46:9d:3f:76:b3:6f:d4:bd:b4:55:da:00:1b:a7:b2:32:b1:04:
0f:95:e1:60:eb:7c:10:e7:2b:91:59:7f:aa:c7:87:5c:12:ac:
92:83:7a:61:e5:5e:5f:4c:ac:89:3d:ec:aa:bd:6d:c3:b8:a8:
34:05:ef:d7:68:27:b8:b9:e9:04:fb:22:31:cf:33:5a:83:de:
22:3e:be:66:d9:ef:66:09:50:82:f6:62:57:50:2d:43:45:ce:
f5:49:ca:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX9jEqg08sFhy5YbHgTLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDYwYTYzZGEyOWQ3Zjk1NjE3YTZmZmJiNGY1MWNjY2Jj
Nzg2NTEwHhcNMjYwMzI1MTkwMTQ4WhcNMjYwMzI2MTkwMTQ4WjAzMTEwLwYDVQQD
Eyg4ZjRlMGM3NzJlOTdlMTFiYmI1NDAzYzBlMTFmMmY4MDcwMWNmZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzyaxn+MVXqGw8FBJv6pORoSugq4
/Odq5lHW3NKuyvsIguupXPfTwSwprwRyYj1INOKFNxxgH3bdNJI8hAbiDI5v0AUb
H5fE5SWloS9Pul1h0hIOKf3x0G9s5bZYNRNVvMLJ+x0TOC9zDNBrNpCDN8s5zeHF
PDTEC8k7w/tXUfCzH+3MVDJsAjv2qMIfK78Hc08pnw0L/G7fd40ARI0FL6c52WdP
Do6RCsstKTrrs7/GD8juknGrg+E3/0d7t3+Zb0tVHPeQlsUs3k80gUxjnSTxr9D2
TcDMw3br6PmFcicBjeObdDavgMI5pA3Z+YcTjy92VflSIAg8Y68PJ1C7iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9ODHcul+Ebu1QDwOEfL4BwHP58MB8GA1UdIwQY
MBaAFKoGCmPaKdf5Vhem/7tPUczLx4ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAt
NzVmZWE2YTcwZWI3LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAtNzVmZWE2YTcwZWI3
LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOn6KWbTq
t2pDDd+QNDqs7PdnODAOc8euOpC+SEiGPgdXRMgx3MERIqjxK1ZfZFORcsBjfLdJ
TvqR+fm8YJMkBTjBFrVHCQT6Th3NUL42HFs84EHv7d/I2fPWfsB5NRXYzx3mX6GG
Khs1Z7rnQSQ1BiPvIYQQiPT07j6iqfED2tA3rgd5g+GbOLdlA8PVWE0UcXYHgXxD
PXCDHD9yHi46gelORp0/drNv1L20VdoAG6eyMrEED5XhYOt8EOcrkVl/qseHXBKs
koN6YeVeX0ysiT3sqr1tw7ioNAXv12gnuLnpBPsiMc8zWoPeIj6+ZtnvZglQgvZi
V1AtQ0XO9UnKGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:40 2026 by rpki-client