Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: EiFpLEWrzyUSNIk384nhiwV7AI0QYQ+fgXV2OOLJjKQ=
Subject key identifier: 24:DB:8A:FF:D7:2C:4E:B5:15:CC:A7:77:29:B7:6F:42:76:D9:5F:26
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019D2703930CB27D6EFECDA0A600E985C48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0429
Signing time: Wed 25 Mar 2026 22:00:38 +0000
Manifest this update: Wed 25 Mar 2026 22:00:38 +0000
Manifest next update: Thu 26 Mar 2026 22:00:38 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: Hty4HY5zvJe9dddwWqCyiZdsupMghd6HyuupDpmi5UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:93:0c:b2:7d:6e:fe:cd:a0:a6:00:e9:85:c4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Mar 25 22:00:38 2026 GMT
Not After : Mar 26 22:00:38 2026 GMT
Subject: CN=24db8affd72c4eb515cca77729b76f4276d95f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:77:e6:c4:e9:73:96:b5:93:44:97:e8:f3:
c5:07:36:ca:21:97:1c:8d:54:3e:e4:9c:98:85:3f:
d0:ba:63:cb:99:52:be:ac:ce:7f:8a:58:4f:04:72:
c1:09:44:a0:0a:d0:98:e7:22:6f:fd:dc:79:54:ff:
9c:02:51:ff:4a:a2:bf:04:35:03:1f:0f:4a:9f:aa:
64:6c:0d:e2:e7:c6:65:50:cf:d2:48:58:ea:fa:e2:
12:d0:cf:e2:92:ab:ed:6d:ab:d6:4a:21:a9:20:32:
df:b1:42:54:06:98:63:7d:58:bc:b9:7d:fe:79:0d:
fc:94:66:fb:52:ec:00:c5:d5:87:b9:9c:c3:f2:01:
7d:8b:fe:b5:b7:3d:d3:49:8d:08:47:af:13:41:c5:
d2:0f:bf:65:12:17:fc:cf:77:4e:c9:0e:95:dd:d0:
af:89:2a:14:ec:ab:61:49:be:79:a6:8e:ef:62:9a:
bb:89:16:b1:e0:f6:2b:6b:79:c6:b0:7b:47:cf:95:
b0:04:95:13:d2:f9:f6:7f:99:d8:bd:85:fb:0c:6c:
a9:6f:ab:57:c2:f7:a3:4e:15:20:22:1a:b1:85:e8:
ee:c0:e1:45:c6:5c:e1:27:09:1e:5e:5d:e9:aa:9b:
f0:fc:6e:34:30:65:eb:ca:1a:6f:e3:2b:10:08:e0:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:8A:FF:D7:2C:4E:B5:15:CC:A7:77:29:B7:6F:42:76:D9:5F:26
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:97:8b:4a:80:3f:ee:6d:a8:85:bd:3f:74:37:83:e9:14:3b:
18:4f:c5:28:db:f9:f3:62:84:14:fb:9b:fe:9f:40:a1:b7:88:
17:a4:f6:f1:96:12:1e:98:7f:a2:d4:a1:ed:d8:15:c7:70:73:
3a:10:32:46:d9:4f:be:21:b6:6c:b9:aa:da:94:73:e1:4a:1e:
24:e2:88:9b:de:5c:0d:fe:fe:38:1c:ab:e2:da:e2:3f:fd:60:
ed:d9:86:f5:cd:88:36:52:4d:61:87:c8:d6:82:2e:91:fc:ab:
cc:66:24:c9:03:ed:0c:b0:89:f2:a0:e9:80:52:70:16:09:24:
ea:aa:26:d6:72:c5:34:d9:91:e2:d0:f7:b4:ab:e2:83:d5:6f:
cd:2c:95:73:10:d3:f0:3a:be:35:52:ec:cd:8b:6c:a6:0c:73:
31:1b:78:76:9c:dc:e7:22:b0:4e:35:a9:a9:01:f3:c2:d2:e5:
64:77:15:d1:db:01:87:4e:a7:22:98:ea:cb:53:61:1e:41:95:
54:d4:a0:65:f8:f5:c1:d6:0a:9b:1b:fc:75:75:76:6b:a5:b3:
8f:12:76:e7:25:12:39:9a:f3:3f:04:eb:2b:24:6c:81:f1:60:
c5:91:ae:d4:6d:2f:b8:c4:f2:b8:d5:a3:79:e5:af:a4:18:0c:
e6:f6:83:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA5MMsn1u/s2gpgDphcSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhY2E4ZGMwYzBiOTIxYjA4OWYxNjAyNjE4ZTQ1NTM3OTdh
NzQ3NDIwHhcNMjYwMzI1MjIwMDM4WhcNMjYwMzI2MjIwMDM4WjAzMTEwLwYDVQQD
EygyNGRiOGFmZmQ3MmM0ZWI1MTVjY2E3NzcyOWI3NmY0Mjc2ZDk1ZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wp35sTpc5a1k0SX6PPFBzbKIZcc
jVQ+5JyYhT/QumPLmVK+rM5/ilhPBHLBCUSgCtCY5yJv/dx5VP+cAlH/SqK/BDUD
Hw9Kn6pkbA3i58ZlUM/SSFjq+uIS0M/ikqvtbavWSiGpIDLfsUJUBphjfVi8uX3+
eQ38lGb7UuwAxdWHuZzD8gF9i/61tz3TSY0IR68TQcXSD79lEhf8z3dOyQ6V3dCv
iSoU7KthSb55po7vYpq7iRax4PYra3nGsHtHz5WwBJUT0vn2f5nYvYX7DGypb6tX
wvejThUgIhqxhejuwOFFxlzhJwkeXl3pqpvw/G40MGXryhpv4ysQCOCb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTbiv/XLE61Fcyndym3b0J22V8mMB8GA1UdIwQY
MBaAFKrKjcDAuSGwifFgJhjkVTeXp0dCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEt
OTFkNTA3MzhkMWU4LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEtOTFkNTA3MzhkMWU4
LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZeLSoA/
7m2ohb0/dDeD6RQ7GE/FKNv582KEFPub/p9AobeIF6T28ZYSHph/otSh7dgVx3Bz
OhAyRtlPviG2bLmq2pRz4UoeJOKIm95cDf7+OByr4triP/1g7dmG9c2INlJNYYfI
1oIukfyrzGYkyQPtDLCJ8qDpgFJwFgkk6qom1nLFNNmR4tD3tKvig9VvzSyVcxDT
8Dq+NVLszYtspgxzMRt4dpzc5yKwTjWpqQHzwtLlZHcV0dsBh06nIpjqy1NhHkGV
VNSgZfj1wdYKmxv8dXV2a6WzjxJ25yUSOZrzPwTrKyRsgfFgxZGu1G0vuMTyuNWj
eeWvpBgM5vaDAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:28 2026 by rpki-client