Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: v5F2d254pvSFo2NT2RTIEgMyxrSF71gsWdjeLpYQ5G8=
Subject key identifier: 41:D3:A1:75:22:A2:90:BA:A1:4A:EB:5C:3D:6B:A1:1C:32:28:33:05
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 019D2A72C247067B0729BF8DD7248988E653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 0233
Signing time: Thu 26 Mar 2026 14:00:57 +0000
Manifest this update: Thu 26 Mar 2026 14:00:57 +0000
Manifest next update: Fri 27 Mar 2026 14:00:57 +0000
Files and hashes: 1: 0kO4HDhs-Z05CdJzgp5tseLyhSU.asa (hash: /YkuI+YVFPmtxpbrJU27qGqrMqF1Tro9Xx9l6QKKoAU=)
2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: J3Lesa94fCm/yWD60hflygy+UQ5QhB+Na7r9XHDNghU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c2:47:06:7b:07:29:bf:8d:d7:24:89:88:e6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Mar 26 14:00:57 2026 GMT
Not After : Mar 27 14:00:57 2026 GMT
Subject: CN=41d3a17522a290baa14aeb5c3d6ba11c32283305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:a5:01:c1:c0:f3:0a:ec:51:08:7f:71:36:
41:58:a1:f2:1e:2d:50:59:3a:db:5e:59:45:7e:22:
dd:ac:2a:03:72:b9:5f:ba:cf:8f:b4:ab:8a:25:dc:
30:48:7b:4c:a8:f4:92:69:79:d9:f2:5d:af:c4:a9:
7d:9c:8e:22:e8:bb:9a:f5:cc:50:1f:ba:2c:dd:6e:
44:fa:6f:c8:84:71:da:e4:20:b2:03:88:bd:79:37:
a0:d6:34:20:ba:b7:16:00:ce:c3:bd:66:aa:59:c6:
9b:2e:ea:dd:56:a2:20:36:9e:fc:56:8d:e2:9d:ca:
00:58:7f:46:d6:da:d9:6a:19:b3:ca:e6:72:c4:0d:
85:44:be:45:1b:11:e4:cb:64:26:d2:5b:2b:d0:c9:
33:2d:3d:8c:57:46:8c:a2:10:09:3d:1e:68:fb:10:
04:28:c4:df:4f:57:e5:ce:55:7c:2f:a5:f8:5a:e5:
5a:de:2f:95:ee:73:a9:fe:2e:be:6d:34:d7:f3:89:
a1:c5:64:07:ea:21:c0:68:f4:de:1f:1b:c2:96:3e:
7e:c3:27:b0:bc:18:6e:bd:42:11:c6:7f:a1:66:c5:
45:de:59:99:2a:75:4a:e6:11:59:0a:ed:30:11:dd:
d5:92:31:79:6d:92:ee:67:7e:75:1d:0b:6c:a9:1a:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:A1:75:22:A2:90:BA:A1:4A:EB:5C:3D:6B:A1:1C:32:28:33:05
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:f0:ee:2d:40:88:f0:87:f8:53:8f:43:32:64:28:08:2d:
7c:e8:f4:1a:bf:c9:df:72:2e:e4:0d:af:6a:3a:4b:e3:55:9a:
87:61:f8:c5:25:6b:46:5a:02:f7:8f:11:f5:f7:50:70:ca:4a:
ac:7c:dd:7c:b3:ad:c4:35:a5:bc:7c:e3:f0:05:64:de:7c:0d:
ba:a2:42:d3:5f:27:fa:bb:9c:bc:47:ef:0e:3c:f0:9e:7f:5a:
4c:b8:37:6d:7a:72:2e:37:67:21:5d:ba:88:b0:0b:c2:ef:18:
f4:cc:d5:c0:c0:aa:7d:36:c0:f2:a2:24:da:f9:52:b9:5e:7d:
c1:73:92:f3:25:5b:b2:49:aa:2e:2f:17:c0:dc:6e:71:88:94:
f5:34:81:35:df:e1:d5:6a:23:5d:81:3e:3e:61:dd:ab:5a:9e:
13:c3:d3:eb:20:dd:54:c3:a0:cb:e9:84:70:ff:0d:3f:1c:85:
f7:0f:31:53:dd:53:1f:06:93:db:cf:6e:71:53:84:ac:54:86:
e3:fd:b8:4a:c2:cb:84:56:30:43:ec:23:2f:21:8e:7b:2e:75:
d7:26:be:3a:3d:49:52:64:54:48:20:56:ee:85:c1:2c:0b:5a:
6c:f8:67:7e:6e:bd:a0:13:24:1b:5c:c2:de:1f:aa:ea:9a:00:
5d:5c:6d:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcsJHBnsHKb+N1ySJiOZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzkxNmYzNjA5ODM0ZWQ0MDE0ZGE4YzY5NWIzNDBhN2Iw
YTU4MGUwHhcNMjYwMzI2MTQwMDU3WhcNMjYwMzI3MTQwMDU3WjAzMTEwLwYDVQQD
Eyg0MWQzYTE3NTIyYTI5MGJhYTE0YWViNWMzZDZiYTExYzMyMjgzMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcWlAcHA8wrsUQh/cTZBWKHyHi1Q
WTrbXllFfiLdrCoDcrlfus+PtKuKJdwwSHtMqPSSaXnZ8l2vxKl9nI4i6Lua9cxQ
H7os3W5E+m/IhHHa5CCyA4i9eTeg1jQgurcWAM7DvWaqWcabLurdVqIgNp78Vo3i
ncoAWH9G1trZahmzyuZyxA2FRL5FGxHky2Qm0lsr0MkzLT2MV0aMohAJPR5o+xAE
KMTfT1flzlV8L6X4WuVa3i+V7nOp/i6+bTTX84mhxWQH6iHAaPTeHxvClj5+wyew
vBhuvUIRxn+hZsVF3lmZKnVK5hFZCu0wEd3VkjF5bZLuZ351HQtsqRoC5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHToXUiopC6oUrrXD1roRwyKDMFMB8GA1UdIwQY
MBaAFKt5FvNgmDTtQBTajGlbNAp7ClgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEt
YjY2MzAwYTdmOWYxLzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEtYjY2MzAwYTdmOWYx
LzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+zw7i1A
iPCH+FOPQzJkKAgtfOj0Gr/J33Iu5A2vajpL41Wah2H4xSVrRloC948R9fdQcMpK
rHzdfLOtxDWlvHzj8AVk3nwNuqJC018n+rucvEfvDjzwnn9aTLg3bXpyLjdnIV26
iLALwu8Y9MzVwMCqfTbA8qIk2vlSuV59wXOS8yVbskmqLi8XwNxucYiU9TSBNd/h
1WojXYE+PmHdq1qeE8PT6yDdVMOgy+mEcP8NPxyF9w8xU91THwaT289ucVOErFSG
4/24SsLLhFYwQ+wjLyGOey511ya+Oj1JUmRUSCBW7oXBLAtabPhnfm69oBMkG1zC
3h+q6poAXVxtaA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:42 2026 by rpki-client