Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
File: q9lqrojvmbTVDknsrpyuSPN4gfc.mft (raw, json)
Hash identifier: 9RtTGyfVW+wRzhBvwYz93KgcjImV6F6eVk7dXGpVejo=
Subject key identifier: 94:CC:85:C1:5C:76:06:9F:AC:E4:50:F3:1B:51:BB:EA:E1:7B:F3:F4
Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
Certificate issuer: /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Certificate serial: 019D2C60E85FECF7CCD9A31374BAA34FEAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
Manifest number: 04D8
Signing time: Thu 26 Mar 2026 23:00:41 +0000
Manifest this update: Thu 26 Mar 2026 23:00:41 +0000
Manifest next update: Fri 27 Mar 2026 23:00:41 +0000
Files and hashes: 1: 1-DN9R_xhKOI4mV80WkUcPVaagQc.roa (hash: ASJpdR212uLae0GK1ckKJRJ0hpliZAorVI6HruZ1pYo=)
2: q9lqrojvmbTVDknsrpyuSPN4gfc.crl (hash: kXQ3GPPOHPr7Swwajn5QWb0qypXLKlus/D9U2MN08jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:e8:5f:ec:f7:cc:d9:a3:13:74:ba:a3:4f:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Validity
Not Before: Mar 26 23:00:41 2026 GMT
Not After : Mar 27 23:00:41 2026 GMT
Subject: CN=94cc85c15c76069face450f31b51bbeae17bf3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:35:87:36:2d:26:2c:72:03:2e:9a:22:ab:
3e:54:ef:55:5b:9f:26:79:84:35:94:ff:42:c6:07:
70:77:de:a1:3d:60:85:4d:f5:b9:a1:62:cd:e3:26:
ed:05:d5:5b:34:07:af:3a:79:b0:28:b9:a5:e0:2a:
3e:a8:1f:b4:28:aa:8d:90:ca:66:66:3e:33:7e:96:
01:8c:d2:62:d9:c9:65:c2:8d:e9:d4:87:01:20:cb:
23:7f:4d:4c:75:2c:53:f9:58:20:35:9d:ea:88:4a:
1f:95:84:ca:54:48:9e:c5:ca:0b:33:c6:66:47:e9:
a3:4c:99:a6:4c:94:a2:56:d8:4e:1c:4d:8f:40:ca:
77:e6:a0:84:b6:d7:75:60:83:c0:ec:89:cb:cb:84:
db:b1:87:bb:3c:ce:f4:a1:d5:76:e6:7e:dc:2b:cf:
68:e1:48:dc:f8:7b:38:c5:61:93:51:82:48:d0:f2:
ad:ce:41:63:ca:a4:63:6f:40:1b:32:f2:bd:ec:f2:
af:90:dd:ea:fe:88:9c:62:a4:a1:cd:a6:21:29:92:
ab:62:e9:94:4b:20:12:53:82:c3:75:7c:da:17:b6:
c1:69:d4:a0:eb:70:a6:6a:3e:fe:fa:83:01:dc:e3:
3a:25:46:30:14:16:28:8b:07:1e:dc:e5:30:51:7f:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CC:85:C1:5C:76:06:9F:AC:E4:50:F3:1B:51:BB:EA:E1:7B:F3:F4
X509v3 Authority Key Identifier:
keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e0:41:69:ea:c8:c9:53:ca:e4:98:ed:8a:36:3b:ee:f0:bb:
a5:36:73:36:2c:aa:bf:c1:b2:87:dd:14:c2:37:7b:5c:12:c2:
3d:79:27:cb:85:68:b8:ee:63:a2:fe:4c:c0:42:75:eb:e8:e5:
74:20:b8:41:c0:06:07:7e:12:7d:e1:52:62:fd:de:87:4f:34:
66:48:ed:94:40:d3:cf:61:4f:ea:fe:c8:0a:0e:52:78:31:63:
cf:ff:3f:74:1a:39:b5:b6:8f:6a:9a:0f:95:5f:97:c3:d5:2f:
28:7e:ec:6a:b2:6d:01:3d:66:06:f0:28:9f:17:06:a1:fe:d6:
09:77:bd:f9:c8:3a:a0:8f:3a:24:13:a8:8c:2c:dc:99:bb:3d:
fb:ad:35:bd:64:e9:18:ab:9e:3b:f1:18:78:47:64:b3:a6:e3:
64:84:41:92:23:f6:53:6e:31:dc:99:ae:88:48:25:c0:fa:f6:
ed:23:2b:d5:9a:16:87:1e:47:04:7e:87:35:e8:9d:70:f5:b4:
1f:2e:ea:f0:85:65:44:55:23:15:07:55:3d:d6:bf:24:23:ca:
41:21:06:77:e1:3c:8d:3a:3f:1b:ec:77:d3:dc:73:c1:6c:dc:
4d:58:19:9c:cf:be:81:ba:f0:23:49:b8:f2:33:c9:6c:04:05:
90:e9:9c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYOhf7PfM2aMTdLqjT+qzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDk2YWFlODhlZjk5YjRkNTBlNDllY2FlOWNhZTQ4ZjM3
ODgxZjcwHhcNMjYwMzI2MjMwMDQxWhcNMjYwMzI3MjMwMDQxWjAzMTEwLwYDVQQD
Eyg5NGNjODVjMTVjNzYwNjlmYWNlNDUwZjMxYjUxYmJlYWUxN2JmM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq81hzYtJixyAy6aIqs+VO9VW58m
eYQ1lP9Cxgdwd96hPWCFTfW5oWLN4ybtBdVbNAevOnmwKLml4Co+qB+0KKqNkMpm
Zj4zfpYBjNJi2cllwo3p1IcBIMsjf01MdSxT+VggNZ3qiEoflYTKVEiexcoLM8Zm
R+mjTJmmTJSiVthOHE2PQMp35qCEttd1YIPA7InLy4TbsYe7PM70odV25n7cK89o
4Ujc+Hs4xWGTUYJI0PKtzkFjyqRjb0AbMvK97PKvkN3q/oicYqShzaYhKZKrYumU
SyASU4LDdXzaF7bBadSg63Cmaj7++oMB3OM6JUYwFBYoiwce3OUwUX+aWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTMhcFcdgafrORQ8xtRu+rhe/P0MB8GA1UdIwQY
MBaAFKvZaq6I75m01Q5J7K6crkjzeIH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZjk2MTktNGJkMC00YWJhLTkwZTIt
N2MzZjhjNDBjNTEwLzEvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZjk2MTktNGJkMC00YWJhLTkwZTItN2MzZjhjNDBjNTEw
LzEvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuBBaerI
yVPK5JjtijY77vC7pTZzNiyqv8Gyh90Uwjd7XBLCPXkny4VouO5jov5MwEJ16+jl
dCC4QcAGB34SfeFSYv3eh080ZkjtlEDTz2FP6v7ICg5SeDFjz/8/dBo5tbaPapoP
lV+Xw9UvKH7sarJtAT1mBvAonxcGof7WCXe9+cg6oI86JBOojCzcmbs9+601vWTp
GKueO/EYeEdks6bjZIRBkiP2U24x3JmuiEglwPr27SMr1ZoWhx5HBH6HNeidcPW0
Hy7q8IVlRFUjFQdVPda/JCPKQSEGd+E8jTo/G+x309xzwWzcTVgZnM++gbrwI0m4
8jPJbAQFkOmcpQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:40 2026 by rpki-client