Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: 5xTOWaZyuheyyadmiEfW7t2krB4ovFArpV4N99Zyngs=
Subject key identifier: 01:6E:18:A4:26:46:09:85:1D:D0:2C:6F:80:6E:14:D5:37:7E:3B:3E
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019D265F7216B688055622C2C5655629ED13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 18B1
Signing time: Wed 25 Mar 2026 19:01:22 +0000
Manifest this update: Wed 25 Mar 2026 19:01:22 +0000
Manifest next update: Thu 26 Mar 2026 19:01:22 +0000
Files and hashes: 1: p7BVCU62BRURJnqp18vcgZBi9lA.roa (hash: DLOPi5ESV+e2DHMAV+0PXNX8prnnrufqQAKqkUfKYls=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: 2V8afBWVK7ZBHycPwW3ucB0oAnMtZ1BGCkEvrfVHg/M=)
3: tS7Ekl755jz7sx7rmhOe1p5tzfI.roa (hash: JxL6ENaZZO0bTihUCNQQ0Sy7sFcJ4MbgWVnIFPKdL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:72:16:b6:88:05:56:22:c2:c5:65:56:29:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Mar 25 19:01:22 2026 GMT
Not After : Mar 26 19:01:22 2026 GMT
Subject: CN=016e18a4264609851dd02c6f806e14d5377e3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:d6:c3:f3:ff:66:32:01:a8:3e:d3:9f:3c:
01:76:aa:f0:37:97:e9:1d:d7:a0:c8:29:d9:d2:55:
6d:b0:bd:de:1c:bc:1d:e8:a6:86:db:54:ca:d9:a4:
b9:04:dd:42:5a:76:45:17:db:a2:56:33:2b:24:f9:
a7:c9:b4:02:bb:21:0a:05:7c:a0:1c:1c:91:8b:d4:
77:f7:59:bb:f5:2d:c2:98:19:10:da:ce:ed:16:dc:
de:8c:f5:04:cd:4e:68:45:8e:65:82:8e:e9:b3:8d:
7d:d2:64:a7:34:50:52:30:68:44:97:8d:a1:bf:76:
f8:5c:c1:3e:35:8e:3a:88:9b:0f:ba:ac:b7:70:07:
98:f3:84:54:9b:25:a4:d0:12:d9:43:b0:0a:b7:18:
60:f8:46:8a:e9:96:db:11:31:e8:e2:2d:e1:8d:7b:
2d:01:14:1d:3e:1f:a7:64:56:35:38:bd:2e:96:8d:
36:d6:ff:d0:49:5f:2b:c6:d3:65:a2:b6:b9:6b:6d:
1a:88:be:92:3f:66:4c:a7:8d:b0:e0:a3:8f:9a:99:
3c:2b:4d:a5:30:db:42:fa:20:38:dd:5e:7a:56:09:
21:e0:4f:89:36:1c:c7:d3:ba:69:aa:2a:41:22:ba:
4c:3c:28:a8:4f:29:4d:01:a0:4b:46:94:65:71:33:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6E:18:A4:26:46:09:85:1D:D0:2C:6F:80:6E:14:D5:37:7E:3B:3E
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b7:a8:ea:40:d0:93:72:4f:c4:f6:1e:6a:08:40:51:2e:a1:
ca:17:ce:a2:1d:96:ea:d1:9d:fb:85:48:70:e8:e9:2e:8b:e6:
d9:74:ca:86:f5:6a:b8:52:7d:17:b0:c3:37:fc:7f:d1:b1:fe:
53:3d:e1:6a:1c:85:c9:34:27:36:04:8e:5b:08:fd:e2:4b:b8:
2c:ea:0e:ec:7d:4c:d6:47:38:a3:58:02:37:bf:c3:72:d3:80:
84:0f:47:21:05:3d:3e:5b:50:26:03:10:03:3e:8e:37:32:0e:
49:b4:25:c2:a8:38:ec:ea:a1:22:69:7b:54:75:07:7a:d7:62:
09:43:98:ae:75:29:75:9e:31:f8:33:9c:d6:4e:87:e2:77:f7:
03:eb:48:c2:44:00:19:31:2c:41:90:85:ac:f6:97:76:2d:27:
c8:57:0c:a0:91:1a:d4:e3:cd:5d:bf:d1:18:a6:ce:89:a7:e1:
90:43:5f:d0:42:fe:04:19:ba:d8:4e:fd:d4:6c:41:5b:e9:64:
68:1a:86:74:fc:15:df:f2:1e:fb:2d:84:29:bb:cf:7a:16:7c:
7e:62:1b:95:fe:11:a7:ef:fe:80:8e:fa:a4:bc:ce:48:d2:0f:
8e:bf:0a:50:6e:fe:f4:26:f4:fc:20:1f:15:46:12:3b:a1:35:
46:42:aa:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3IWtogFViLCxWVWKe0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjYwMzI1MTkwMTIyWhcNMjYwMzI2MTkwMTIyWjAzMTEwLwYDVQQD
EygwMTZlMThhNDI2NDYwOTg1MWRkMDJjNmY4MDZlMTRkNTM3N2UzYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikDWw/P/ZjIBqD7TnzwBdqrwN5fp
HdegyCnZ0lVtsL3eHLwd6KaG21TK2aS5BN1CWnZFF9uiVjMrJPmnybQCuyEKBXyg
HByRi9R391m79S3CmBkQ2s7tFtzejPUEzU5oRY5lgo7ps4190mSnNFBSMGhEl42h
v3b4XME+NY46iJsPuqy3cAeY84RUmyWk0BLZQ7AKtxhg+EaK6ZbbETHo4i3hjXst
ARQdPh+nZFY1OL0ulo021v/QSV8rxtNlora5a20aiL6SP2ZMp42w4KOPmpk8K02l
MNtC+iA43V56Vgkh4E+JNhzH07ppqipBIrpMPCioTylNAaBLRpRlcTOsUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFuGKQmRgmFHdAsb4BuFNU3fjs+MB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbeo6kDQ
k3JPxPYeaghAUS6hyhfOoh2W6tGd+4VIcOjpLovm2XTKhvVquFJ9F7DDN/x/0bH+
Uz3hahyFyTQnNgSOWwj94ku4LOoO7H1M1kc4o1gCN7/DctOAhA9HIQU9PltQJgMQ
Az6ONzIOSbQlwqg47OqhIml7VHUHetdiCUOYrnUpdZ4x+DOc1k6H4nf3A+tIwkQA
GTEsQZCFrPaXdi0nyFcMoJEa1OPNXb/RGKbOiafhkENf0EL+BBm62E791GxBW+lk
aBqGdPwV3/Ie+y2EKbvPehZ8fmIblf4Rp+/+gI76pLzOSNIPjr8KUG7+9Cb0/CAf
FUYSO6E1RkKq2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:28 2026 by rpki-client