Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: GP5pk/434ae3srwv3BbK7U1ICwq6pXHxr48OyobU0CI=
Subject key identifier: 16:B6:8B:C7:F9:AC:12:01:FC:18:CB:C1:DD:DA:D7:04:39:EC:15:4A
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 019D284D69F84E5E4FFA7778CA85C25B82EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0DF5
Signing time: Thu 26 Mar 2026 04:00:55 +0000
Manifest this update: Thu 26 Mar 2026 04:00:55 +0000
Manifest next update: Fri 27 Mar 2026 04:00:55 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: CXh9XP7JrjDrm/b7rKEXYzjShtyq18wR7G+tkejKQhM=)
2: qkoAr_KuXYuK5zR2LayC2hJcN9Q.roa (hash: QgFzqo+zZRD3aFWIozFXdcVEC6p5YunAVsbUCMVWzNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:69:f8:4e:5e:4f:fa:77:78:ca:85:c2:5b:82:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Mar 26 04:00:55 2026 GMT
Not After : Mar 27 04:00:55 2026 GMT
Subject: CN=16b68bc7f9ac1201fc18cbc1dddad70439ec154a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c7:57:8c:a7:d6:72:fc:99:ec:3c:fb:8b:4c:
9b:17:b3:21:3e:85:9b:8f:5a:90:d7:d6:75:79:f0:
e3:f2:20:88:7f:2d:20:52:17:28:78:51:31:3c:ef:
2c:fd:45:f7:7f:50:95:b4:8f:1d:9e:15:87:1e:0d:
2d:b8:3e:94:39:b2:2c:c0:c7:ce:64:1a:4e:11:d7:
ac:e9:9f:a6:bf:a4:e4:b9:f3:cf:75:3e:3e:b6:fb:
54:9b:3e:b5:03:90:5e:e5:c6:be:64:7d:3d:4a:b3:
a4:87:f3:ba:71:f5:9f:5a:53:43:b0:cc:42:7f:78:
91:8e:18:d1:eb:be:49:a3:6b:fb:5e:30:d1:09:cb:
b3:5b:40:fa:be:fa:b3:7d:95:c0:10:4b:16:4e:c1:
61:03:8c:d6:b8:6b:7e:2a:a4:db:96:2e:98:97:e1:
4c:7f:03:6c:cf:2b:2d:f0:d2:ad:9d:76:f2:a8:4d:
5f:3b:30:27:f0:81:72:53:6b:05:f1:24:52:a2:a4:
56:d0:6e:16:41:f4:46:ea:7b:1b:33:01:2a:62:ca:
7c:45:e9:ce:da:8c:2b:96:62:c1:68:e1:05:99:84:
5b:72:46:18:c0:a5:e3:9e:29:af:73:5c:15:99:68:
a9:fd:e8:d4:cb:8b:a2:ec:4b:ca:5c:07:12:12:6d:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B6:8B:C7:F9:AC:12:01:FC:18:CB:C1:DD:DA:D7:04:39:EC:15:4A
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1f:0f:da:b5:cd:9e:a4:fc:2b:46:e9:46:a8:09:39:e2:3c:
d2:bf:d6:34:1a:17:4a:dd:cb:6d:87:67:53:ad:96:82:72:f1:
89:2f:7a:e7:25:00:5a:31:ec:4e:ef:17:f3:6a:cc:08:91:cb:
bf:23:b6:ca:ee:e1:5c:82:42:ec:fc:c1:c3:5c:c2:72:5f:72:
dd:f9:d5:3c:5f:62:44:77:54:68:73:8a:9e:27:2b:16:53:48:
7e:6d:08:42:8b:da:c9:74:87:0c:49:c9:ce:7a:91:29:f6:57:
0d:d0:52:12:51:e5:55:07:6a:47:b8:70:22:60:97:7c:31:4d:
cc:3f:a4:bc:bb:45:56:38:85:64:2a:8e:4c:ee:73:58:dc:bc:
a7:33:d2:7d:74:c2:cc:f0:e6:1b:62:ba:73:ae:7b:9e:00:74:
65:e4:00:df:72:60:b3:41:c9:a4:0b:e6:04:15:6d:1e:f5:36:
57:a1:2f:9b:30:af:af:85:22:6d:05:ac:5a:46:26:50:f8:49:
4b:3b:26:1f:7a:bb:45:9e:84:46:ab:2a:47:0e:04:3f:e0:60:
d8:68:b4:01:c6:22:7e:57:4c:e2:c6:2b:31:ca:b4:c5:c6:4a:
1c:9e:5d:81:4a:02:1d:38:da:43:dd:0b:08:11:4a:a9:28:77:
11:67:64:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTWn4Tl5P+nd4yoXCW4LvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNjQ0NmE0YTFjYjU2YjNmNzZmZTZiNGRlZmFiYWQzYmQ5
YjUyMDcwHhcNMjYwMzI2MDQwMDU1WhcNMjYwMzI3MDQwMDU1WjAzMTEwLwYDVQQD
EygxNmI2OGJjN2Y5YWMxMjAxZmMxOGNiYzFkZGRhZDcwNDM5ZWMxNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MdXjKfWcvyZ7Dz7i0ybF7MhPoWb
j1qQ19Z1efDj8iCIfy0gUhcoeFExPO8s/UX3f1CVtI8dnhWHHg0tuD6UObIswMfO
ZBpOEdes6Z+mv6TkufPPdT4+tvtUmz61A5Be5ca+ZH09SrOkh/O6cfWfWlNDsMxC
f3iRjhjR675Jo2v7XjDRCcuzW0D6vvqzfZXAEEsWTsFhA4zWuGt+KqTbli6Yl+FM
fwNszyst8NKtnXbyqE1fOzAn8IFyU2sF8SRSoqRW0G4WQfRG6nsbMwEqYsp8RenO
2owrlmLBaOEFmYRbckYYwKXjnimvc1wVmWip/ejUy4ui7EvKXAcSEm0bXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa2i8f5rBIB/BjLwd3a1wQ57BVKMB8GA1UdIwQY
MBaAFEJkRqShy1az92/mtN76utO9m1IHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEt
ZWRlMDI4MmY5YmI5LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEtZWRlMDI4MmY5YmI5
LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIR8P2rXN
nqT8K0bpRqgJOeI80r/WNBoXSt3LbYdnU62WgnLxiS965yUAWjHsTu8X82rMCJHL
vyO2yu7hXIJC7PzBw1zCcl9y3fnVPF9iRHdUaHOKnicrFlNIfm0IQovayXSHDEnJ
znqRKfZXDdBSElHlVQdqR7hwImCXfDFNzD+kvLtFVjiFZCqOTO5zWNy8pzPSfXTC
zPDmG2K6c657ngB0ZeQA33Jgs0HJpAvmBBVtHvU2V6EvmzCvr4UibQWsWkYmUPhJ
SzsmH3q7RZ6ERqsqRw4EP+Bg2Gi0AcYifldM4sYrMcq0xcZKHJ5dgUoCHTjaQ90L
CBFKqSh3EWdk/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:04 2026 by rpki-client