Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: AD+BSCtmxbUunQxHnhM3HKAhT0/R5xpfdd1ZpilbLMw=
Subject key identifier: 2C:4E:6D:A8:29:8C:DB:6C:A4:5F:3A:F0:6B:5F:AF:41:5B:E8:52:45
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 019E1F47E460CBE750B96E5941B83DDE9BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 03A7
Signing time: Wed 13 May 2026 03:01:05 +0000
Manifest this update: Wed 13 May 2026 03:01:05 +0000
Manifest next update: Thu 14 May 2026 03:01:05 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: PdoNTc5a21s+0iILcwxqScGtyqFxkNXUKHL82FK1wiI=)
2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:e4:60:cb:e7:50:b9:6e:59:41:b8:3d:de:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: May 13 03:01:05 2026 GMT
Not After : May 14 03:01:05 2026 GMT
Subject: CN=2c4e6da8298cdb6ca45f3af06b5faf415be85245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:09:59:ab:33:e1:fa:5d:80:2c:f2:ea:fa:
f9:50:6c:f9:54:77:b7:37:79:f2:c0:82:17:3c:e5:
ef:2d:75:a9:4c:a3:6f:95:2f:78:33:05:df:35:fb:
f4:21:96:63:07:d6:04:b3:bd:e0:41:48:9a:07:cb:
61:a9:98:2d:e7:19:20:35:fb:b4:41:ee:a3:c2:ff:
9d:72:03:6e:32:43:2e:7a:20:d0:9a:2b:d4:f8:d4:
09:55:fd:97:1e:70:02:be:be:24:f4:1f:05:01:ed:
fd:00:be:22:65:55:2d:55:ee:99:83:16:a8:14:03:
47:48:56:f3:7d:be:3d:35:8b:51:f6:2c:38:e9:84:
32:32:e0:da:08:a1:e8:70:c0:24:15:28:51:b6:12:
95:d8:ec:f2:01:5e:f3:0b:ea:5f:2c:fa:74:2f:d9:
74:03:c1:57:c3:14:77:24:96:b9:83:58:80:44:70:
5f:93:2b:1d:b7:4f:0f:de:04:ef:1a:3a:1a:f3:33:
5d:21:f0:ca:1d:eb:3d:83:7d:10:86:db:d8:56:36:
36:d6:09:65:f2:d5:a3:67:cb:fc:e4:8d:b5:8f:a4:
38:9d:25:8b:fd:12:c8:e6:c1:a4:85:53:55:13:d8:
65:97:29:23:ba:7a:75:07:ac:a4:d3:b7:5c:6a:ed:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:6D:A8:29:8C:DB:6C:A4:5F:3A:F0:6B:5F:AF:41:5B:E8:52:45
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:07:bb:a8:f0:23:a5:57:da:72:5c:a9:d8:ae:2e:79:8f:b0:
7a:89:42:40:95:9e:b0:71:f5:75:c8:89:67:6b:cd:72:d8:dd:
1e:9e:38:72:1e:4b:c3:26:07:a7:e0:05:8d:78:dd:28:32:1b:
d6:21:73:ba:2a:0d:6f:e1:88:37:f9:0b:3e:35:0b:9f:c2:5a:
6f:94:01:f9:cb:3f:92:3b:5a:0e:69:ee:b2:6e:f8:4c:af:ff:
b3:bc:f3:34:d7:79:4f:10:ad:84:46:e6:8c:ce:94:8a:36:00:
9b:7d:12:31:4b:54:57:65:d3:f9:58:ff:66:c8:c6:35:82:e0:
97:2e:c5:71:66:4f:df:a3:b3:6a:22:b0:44:5d:94:d5:cc:f5:
ba:42:f8:1e:8b:d1:25:6b:ee:44:75:42:f4:2d:81:e7:db:fc:
9f:46:97:e9:08:51:f1:3d:be:d7:bb:06:3d:00:d2:74:3e:af:
f8:4c:28:db:0b:63:4b:dc:b2:45:43:4a:2b:b1:a9:22:f5:c0:
35:7d:ff:f5:20:cb:e7:14:71:be:3b:cf:ca:2e:2c:c9:57:17:
de:b6:49:17:60:57:3e:24:8f:e1:c8:83:a1:5a:66:bf:5d:a3:
9d:ae:9e:f9:b4:7e:4d:5d:12:ad:63:3d:c6:cb:a1:32:b3:b6:
1b:6b:df:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR+Rgy+dQuW5ZQbg93pv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi
MDljMDcwHhcNMjYwNTEzMDMwMTA1WhcNMjYwNTE0MDMwMTA1WjAzMTEwLwYDVQQD
EygyYzRlNmRhODI5OGNkYjZjYTQ1ZjNhZjA2YjVmYWY0MTViZTg1MjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojYJWasz4fpdgCzy6vr5UGz5VHe3
N3nywIIXPOXvLXWpTKNvlS94MwXfNfv0IZZjB9YEs73gQUiaB8thqZgt5xkgNfu0
Qe6jwv+dcgNuMkMueiDQmivU+NQJVf2XHnACvr4k9B8FAe39AL4iZVUtVe6Zgxao
FANHSFbzfb49NYtR9iw46YQyMuDaCKHocMAkFShRthKV2OzyAV7zC+pfLPp0L9l0
A8FXwxR3JJa5g1iARHBfkysdt08P3gTvGjoa8zNdIfDKHes9g30QhtvYVjY21gll
8tWjZ8v85I21j6Q4nSWL/RLI5sGkhVNVE9hllykjunp1B6yk07dcau0jYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxObagpjNtspF868Gtfr0Fb6FJFMB8GA1UdIwQY
MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt
NzliNDA5YzFiZDM4LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4
LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQe7qPAj
pVfaclyp2K4ueY+weolCQJWesHH1dciJZ2vNctjdHp44ch5LwyYHp+AFjXjdKDIb
1iFzuioNb+GIN/kLPjULn8Jab5QB+cs/kjtaDmnusm74TK//s7zzNNd5TxCthEbm
jM6UijYAm30SMUtUV2XT+Vj/ZsjGNYLgly7FcWZP36OzaiKwRF2U1cz1ukL4HovR
JWvuRHVC9C2B59v8n0aX6QhR8T2+17sGPQDSdD6v+Ewo2wtjS9yyRUNKK7GpIvXA
NX3/9SDL5xRxvjvPyi4syVcX3rZJF2BXPiSP4ciDoVpmv12jna6e+bR+TV0SrWM9
xsuhMrO2G2vf9A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:53:12 2026 by rpki-client