Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: XuXAXo6BYdV2ruMc55BVql5LpAVDp8tm8qmNfWruyBU=
Subject key identifier: E1:54:44:DA:23:F0:BC:13:62:99:C9:ED:49:BF:4D:7C:AC:22:C7:E9
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019D29970CD535ED977BF8EC7A9EBEB3358E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 10:00:58 +0000
Manifest this update: Thu 26 Mar 2026 10:00:58 +0000
Manifest next update: Fri 27 Mar 2026 10:00:58 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: uqV9EhNFIlSQn28RvoLmWOwC6M8jV7Y9J+GeZ2yXQbs=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0c:d5:35:ed:97:7b:f8:ec:7a:9e:be:b3:35:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Mar 26 10:00:58 2026 GMT
Not After : Mar 27 10:00:58 2026 GMT
Subject: CN=e15444da23f0bc136299c9ed49bf4d7cac22c7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:93:10:b5:99:e1:c1:3e:c4:05:29:36:06:
82:46:21:bd:85:ba:f3:ef:a4:58:b2:75:3e:63:a4:
65:1c:78:60:92:31:e7:60:4d:8a:53:1e:74:e7:1a:
33:ba:2d:7f:b7:c3:00:8b:6b:8d:c2:06:81:8e:31:
57:ae:78:02:03:42:9c:0f:8c:5d:9e:a3:e0:7b:18:
56:6f:fd:2e:97:4d:a3:03:df:d6:3a:4d:2c:50:2e:
14:b6:27:52:fc:98:c2:ff:a3:69:01:8b:db:4a:fe:
4c:94:01:80:7a:52:29:01:05:9a:01:e9:c1:8a:97:
b3:8e:17:ec:d5:95:06:db:33:d3:e6:7c:da:2a:79:
3f:99:53:42:39:7c:12:c0:96:37:63:4c:ff:fc:26:
55:17:a1:86:9e:2a:39:82:21:73:12:fb:96:1f:9d:
56:9a:de:75:ec:39:e3:8b:87:57:f2:b2:df:99:e5:
eb:28:f0:8a:2d:b5:1c:2c:9b:d7:58:ff:37:dc:67:
17:3c:73:a7:14:b2:d8:36:04:5a:6c:a5:4f:ab:fc:
6c:c5:86:bc:16:a3:6c:ed:09:ce:6f:5e:9c:64:ca:
9c:49:55:19:0a:87:cf:7b:86:06:49:56:2c:e1:4f:
a3:9a:e1:fb:40:c4:22:ee:a3:4f:0f:49:00:58:47:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:54:44:DA:23:F0:BC:13:62:99:C9:ED:49:BF:4D:7C:AC:22:C7:E9
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:80:3c:63:40:61:c6:ca:e0:69:8e:49:98:ef:79:34:5d:
92:66:d4:52:e2:f5:77:b0:af:9f:6f:0a:03:5d:6f:4e:c0:00:
bf:1b:a2:59:bf:1c:f2:69:ce:52:23:c7:78:20:32:1f:5b:fe:
2a:8b:f2:72:aa:2d:3b:fb:ae:d6:44:b2:d9:dd:29:d2:28:0e:
b1:4a:d9:e1:56:e6:73:8f:8e:20:1d:a1:15:c0:d7:5e:99:19:
d7:d6:5c:50:30:fa:44:34:f0:b3:e1:0d:ae:e3:73:92:39:96:
d0:86:ab:d7:dc:f5:c2:72:13:ae:e6:56:2f:d0:dd:64:b8:a6:
b4:c6:41:26:18:d4:c2:b5:66:ea:3c:35:42:0f:1e:42:61:c7:
52:4c:ca:5e:be:03:d5:69:f5:26:5c:2b:d3:36:e8:65:cf:e7:
4d:04:7a:72:3f:78:53:07:9d:90:57:5c:16:f5:bb:50:be:bb:
0e:12:3f:41:60:c3:62:0e:d8:b1:51:ad:56:c8:54:30:4d:9a:
2a:0a:86:17:ab:ce:a6:38:45:b4:6b:c6:c2:4a:59:06:db:1e:
fa:ff:24:fa:2c:f7:6f:0b:ce:1a:45:8c:13:19:dd:45:a2:c5:
db:09:5c:5c:9c:97:78:5f:2a:cd:71:68:ef:9f:b2:3a:70:5f:
71:49:f6:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plwzVNe2Xe/jsep6+szWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjYwMzI2MTAwMDU4WhcNMjYwMzI3MTAwMDU4WjAzMTEwLwYDVQQD
EyhlMTU0NDRkYTIzZjBiYzEzNjI5OWM5ZWQ0OWJmNGQ3Y2FjMjJjN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzeTELWZ4cE+xAUpNgaCRiG9hbrz
76RYsnU+Y6RlHHhgkjHnYE2KUx505xozui1/t8MAi2uNwgaBjjFXrngCA0KcD4xd
nqPgexhWb/0ul02jA9/WOk0sUC4UtidS/JjC/6NpAYvbSv5MlAGAelIpAQWaAenB
ipezjhfs1ZUG2zPT5nzaKnk/mVNCOXwSwJY3Y0z//CZVF6GGnio5giFzEvuWH51W
mt517Dnji4dX8rLfmeXrKPCKLbUcLJvXWP833GcXPHOnFLLYNgRabKVPq/xsxYa8
FqNs7QnOb16cZMqcSVUZCofPe4YGSVYs4U+jmuH7QMQi7qNPD0kAWEc7uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFURNoj8LwTYpnJ7Um/TXysIsfpMB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe42APGNA
YcbK4GmOSZjveTRdkmbUUuL1d7Cvn28KA11vTsAAvxuiWb8c8mnOUiPHeCAyH1v+
KovycqotO/uu1kSy2d0p0igOsUrZ4Vbmc4+OIB2hFcDXXpkZ19ZcUDD6RDTws+EN
ruNzkjmW0Iar19z1wnITruZWL9DdZLimtMZBJhjUwrVm6jw1Qg8eQmHHUkzKXr4D
1Wn1Jlwr0zboZc/nTQR6cj94UwedkFdcFvW7UL67DhI/QWDDYg7YsVGtVshUME2a
KgqGF6vOpjhFtGvGwkpZBtse+v8k+iz3bwvOGkWMExndRaLF2wlcXJyXeF8qzXFo
75+yOnBfcUn2sA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:12 2026 by rpki-client