Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: 9ujKA/C63qLX6WZ0NV0i9VXpIcR3YJM23Bm8sDHsb0I=
Subject key identifier: 81:29:E9:02:F9:ED:C5:C8:0A:1A:76:F4:B8:4E:08:E4:1A:F0:B9:48
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 019D254C7FBAA563263C5E94746E798199BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 17CB
Signing time: Wed 25 Mar 2026 14:01:03 +0000
Manifest this update: Wed 25 Mar 2026 14:01:03 +0000
Manifest next update: Thu 26 Mar 2026 14:01:03 +0000
Files and hashes: 1: DsEiDbdONX-wlDkZ_X-1g9jpCQg.roa (hash: OA/21KHBKcEIJSTWxQCJ0tkhioZ536fK4ENW6PbwjpI=)
2: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: JmjEla798S0Sq4D7GqA86SiIsFrqyqYhzge1h3Z7xVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:7f:ba:a5:63:26:3c:5e:94:74:6e:79:81:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Mar 25 14:01:03 2026 GMT
Not After : Mar 26 14:01:03 2026 GMT
Subject: CN=8129e902f9edc5c80a1a76f4b84e08e41af0b948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:24:30:bb:01:69:1e:db:14:e8:2f:70:1e:
54:1e:89:30:f1:05:da:c3:1a:5b:03:a6:ff:e3:80:
ce:11:23:32:93:dd:5a:58:dd:b1:a7:9b:53:84:53:
d8:ff:62:7e:8b:ca:06:5d:71:5c:ab:92:c2:62:bf:
30:4a:89:b4:7e:5a:de:1a:8f:4a:ef:5b:f4:ea:41:
85:34:7a:6b:84:dc:b5:1c:d5:74:23:1a:37:d2:04:
f2:cc:93:37:ca:32:2d:ca:49:b5:3d:d6:ac:63:e8:
ec:2f:90:e9:f4:58:41:07:77:a3:d4:f2:3f:80:c3:
08:39:8c:ad:91:80:f9:44:84:c2:99:19:be:5f:9a:
1e:76:fe:a6:65:0b:60:26:3c:1a:dc:f6:9a:c7:5a:
a3:78:90:4e:78:f9:a2:4b:00:bf:b0:4c:b3:d6:83:
9d:3b:4e:95:ba:77:dc:50:e4:4f:a9:4a:73:6c:84:
ab:b2:b9:ce:8a:de:5b:07:02:e6:3f:27:59:d6:78:
6a:c2:29:13:10:b7:89:1b:75:15:8c:56:d9:b6:37:
dc:72:88:c1:00:fc:b5:13:18:07:ae:b6:56:2c:a4:
32:b5:69:b7:b8:25:bd:e7:f5:a7:ac:7c:66:cb:ba:
02:4b:19:6c:3b:1d:19:01:dd:d1:0a:d9:34:42:93:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:E9:02:F9:ED:C5:C8:0A:1A:76:F4:B8:4E:08:E4:1A:F0:B9:48
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:15:1e:f9:43:72:56:a0:19:eb:ce:67:75:b8:f7:cd:ef:b0:
c5:a8:1b:4d:34:db:8c:20:34:ce:6a:b8:60:d7:4b:9b:24:73:
01:d9:d9:01:0c:ed:80:c6:50:9b:7f:8a:a4:fd:85:bb:e0:f6:
3b:71:d5:b3:a5:ee:d3:7c:78:de:d1:99:d2:6d:9d:e4:4e:72:
ee:de:cd:8a:bd:d6:7e:6a:e7:30:0a:66:7d:28:aa:6d:f7:5f:
7b:67:46:30:63:97:db:f1:63:6f:17:62:45:1c:ab:00:5f:9d:
82:b1:f4:7d:9c:cc:f2:34:7e:b9:92:df:08:85:ba:2b:95:56:
28:fb:a1:2a:bd:80:c5:62:a3:3b:67:39:0f:2a:79:9b:24:ef:
74:ec:fe:f2:62:9d:de:2a:7d:29:22:4f:6a:5f:6b:8e:99:7b:
37:be:eb:cd:71:71:41:f1:76:a8:80:2b:07:74:18:4b:be:d6:
72:f2:a0:51:d7:ae:76:c3:eb:09:be:6a:cf:34:d3:ae:16:b4:
c4:0d:d3:1b:41:e7:53:9c:20:64:b1:e2:9b:57:1f:a8:e0:2d:
b1:aa:40:1c:9b:97:ac:44:38:f0:5f:bb:98:00:73:7d:c8:49:
80:fe:0a:3e:4f:76:f8:01:c6:a4:46:13:d3:61:a3:73:57:6f:
55:60:c6:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTH+6pWMmPF6UdG55gZm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2UwMzBkNDQ2NjFhNGMyMDFlYmEwM2RlNDUyYjA0Yjhl
N2Q5ZTUwHhcNMjYwMzI1MTQwMTAzWhcNMjYwMzI2MTQwMTAzWjAzMTEwLwYDVQQD
Eyg4MTI5ZTkwMmY5ZWRjNWM4MGExYTc2ZjRiODRlMDhlNDFhZjBiOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UgkMLsBaR7bFOgvcB5UHokw8QXa
wxpbA6b/44DOESMyk91aWN2xp5tThFPY/2J+i8oGXXFcq5LCYr8wSom0flreGo9K
71v06kGFNHprhNy1HNV0Ixo30gTyzJM3yjItykm1PdasY+jsL5Dp9FhBB3ej1PI/
gMMIOYytkYD5RITCmRm+X5oedv6mZQtgJjwa3Paax1qjeJBOePmiSwC/sEyz1oOd
O06VunfcUORPqUpzbISrsrnOit5bBwLmPydZ1nhqwikTELeJG3UVjFbZtjfccojB
APy1ExgHrrZWLKQytWm3uCW95/WnrHxmy7oCSxlsOx0ZAd3RCtk0QpNZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEp6QL57cXIChp29LhOCOQa8LlIMB8GA1UdIwQY
MBaAFEN+Aw1EZhpMIB66A95FKwS459nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUt
YmJkMjEwNmYzMzcwLzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUtYmJkMjEwNmYzMzcw
LzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxUe+UNy
VqAZ685ndbj3ze+wxagbTTTbjCA0zmq4YNdLmyRzAdnZAQztgMZQm3+KpP2Fu+D2
O3HVs6Xu03x43tGZ0m2d5E5y7t7Nir3WfmrnMApmfSiqbfdfe2dGMGOX2/Fjbxdi
RRyrAF+dgrH0fZzM8jR+uZLfCIW6K5VWKPuhKr2AxWKjO2c5Dyp5myTvdOz+8mKd
3ip9KSJPal9rjpl7N77rzXFxQfF2qIArB3QYS77WcvKgUdeudsPrCb5qzzTTrha0
xA3TG0HnU5wgZLHim1cfqOAtsapAHJuXrEQ48F+7mABzfchJgP4KPk92+AHGpEYT
02Gjc1dvVWDGbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:35 2026 by rpki-client