Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
File: qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json)
Hash identifier: nZNuG0irqp6v0uqSIJ5M30/8GMNIpkS076PaRD+Toik=
Subject key identifier: 2D:45:CC:6E:EE:98:51:CE:F1:38:D4:A9:36:47:99:41:BC:B9:1A:D9
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Certificate issuer: /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial: 019D29290370694835B9F8379BDEE3AE6648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
Manifest number: 03CD
Signing time: Thu 26 Mar 2026 08:00:46 +0000
Manifest this update: Thu 26 Mar 2026 08:00:46 +0000
Manifest next update: Fri 27 Mar 2026 08:00:46 +0000
Files and hashes: 1: NThsozj8huJ5IeZXtUiD3RXp3UE.roa (hash: tDMWht/uuveDY/y55oPzB8QNF9M6ccDoqURq7KgWOQI=)
2: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: 3eS3qs8YdiNokcoj0uTHjclPKr0tndpHTOO1wb8sg4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:03:70:69:48:35:b9:f8:37:9b:de:e3:ae:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Validity
Not Before: Mar 26 08:00:46 2026 GMT
Not After : Mar 27 08:00:46 2026 GMT
Subject: CN=2d45cc6eee9851cef138d4a936479941bcb91ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:3a:f4:4f:08:bf:a4:f8:b2:0a:98:79:8c:
40:04:90:0f:fa:f1:49:09:31:cb:d6:45:6a:14:ed:
f8:ed:9d:a4:0b:3d:19:cb:4b:d3:5c:de:d2:ce:1c:
b8:c0:d0:24:83:68:52:2c:79:73:b2:ef:2c:06:fb:
bb:cd:04:f1:2c:02:4b:0d:f1:bf:80:0c:27:67:ee:
7a:f8:2d:08:9e:87:cd:4a:c3:6d:26:37:69:0f:72:
5b:be:dd:42:88:f7:35:d1:8f:5d:34:a4:ea:bc:27:
95:d1:35:82:14:ce:42:e9:4b:ec:21:91:53:a5:c8:
bb:86:6b:1c:b2:b6:6b:4d:1e:a3:3d:a8:4f:f3:83:
f3:15:5f:f8:b9:f3:90:97:c9:33:c2:3b:48:9f:5b:
55:2d:eb:a5:84:bf:01:c5:41:9e:58:e0:92:54:a4:
6b:3e:0e:fe:81:c4:30:0a:eb:2d:39:ee:35:96:45:
d3:49:2c:6f:7f:17:54:58:25:9f:c8:02:84:23:e3:
2d:76:4c:08:2b:2e:8b:b1:fe:26:b6:f1:61:76:09:
86:ac:03:bd:09:21:0a:99:b5:1e:25:80:ee:c0:e8:
50:9e:c6:e2:11:ca:52:ef:59:b9:3d:54:4b:e2:99:
82:d0:d9:f8:c2:dd:a1:44:a8:af:a2:e7:68:ff:07:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:CC:6E:EE:98:51:CE:F1:38:D4:A9:36:47:99:41:BC:B9:1A:D9
X509v3 Authority Key Identifier:
keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:52:8f:42:5e:6f:8b:f7:9e:31:b4:1f:09:d9:48:a4:3e:df:
96:54:a8:32:79:37:3b:1f:c0:01:d9:01:43:c4:5f:60:f2:30:
c6:08:1b:87:66:a7:85:15:68:9e:aa:e3:a3:2e:de:e3:b4:73:
75:16:85:6c:6d:e8:89:ee:b2:bf:a2:06:7e:17:bb:02:65:ba:
45:c2:8b:23:e9:b4:c5:7f:f6:fd:ae:9e:f6:dd:6c:36:e5:79:
03:ab:93:76:7c:1c:30:7a:c2:29:08:e6:ef:da:15:fe:e7:51:
eb:8d:7c:f4:e6:b6:d4:f8:d8:15:75:1e:a5:6c:42:f4:df:9e:
52:a4:7a:a1:71:17:16:43:8d:89:87:c0:a3:9d:b0:ab:33:ec:
53:2c:cb:4c:16:95:0b:8d:c0:9d:5d:c0:f0:64:60:b6:41:08:
6a:27:3c:57:47:6f:e2:32:40:a0:52:0d:bb:db:a7:c3:90:0a:
db:e9:51:e7:a5:2d:b2:8b:68:cd:54:3b:f3:e6:7f:e5:3e:fb:
f1:2d:d3:1b:62:f0:7e:23:44:66:85:04:05:ba:5f:2f:23:36:
c2:39:2c:72:e6:6e:8d:51:d3:c5:0b:44:f5:04:a2:f8:ab:c2:
d3:37:78:d8:20:46:83:14:2b:1d:0f:36:00:6f:0d:91:aa:bb:
30:e4:8d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKQNwaUg1ufg3m97jrmZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTllMGU4OTgzZDlkZWI0MTU3MTZkNjFlOGM5MTI1MTBh
MjZjMjQwHhcNMjYwMzI2MDgwMDQ2WhcNMjYwMzI3MDgwMDQ2WjAzMTEwLwYDVQQD
EygyZDQ1Y2M2ZWVlOTg1MWNlZjEzOGQ0YTkzNjQ3OTk0MWJjYjkxYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/469E8Iv6T4sgqYeYxABJAP+vFJ
CTHL1kVqFO347Z2kCz0Zy0vTXN7Szhy4wNAkg2hSLHlzsu8sBvu7zQTxLAJLDfG/
gAwnZ+56+C0InofNSsNtJjdpD3Jbvt1CiPc10Y9dNKTqvCeV0TWCFM5C6UvsIZFT
pci7hmscsrZrTR6jPahP84PzFV/4ufOQl8kzwjtIn1tVLeulhL8BxUGeWOCSVKRr
Pg7+gcQwCustOe41lkXTSSxvfxdUWCWfyAKEI+MtdkwIKy6Lsf4mtvFhdgmGrAO9
CSEKmbUeJYDuwOhQnsbiEcpS71m5PVRL4pmC0Nn4wt2hRKivoudo/wfRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1FzG7umFHO8TjUqTZHmUG8uRrZMB8GA1UdIwQY
MBaAFKqp4OiYPZ3rQVcW1h6MkSUQomwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMt
NDUxYjk2YWZjMmIxLzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMtNDUxYjk2YWZjMmIx
LzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlKPQl5v
i/eeMbQfCdlIpD7fllSoMnk3Ox/AAdkBQ8RfYPIwxggbh2anhRVonqrjoy7e47Rz
dRaFbG3oie6yv6IGfhe7AmW6RcKLI+m0xX/2/a6e9t1sNuV5A6uTdnwcMHrCKQjm
79oV/udR64189Oa21PjYFXUepWxC9N+eUqR6oXEXFkONiYfAo52wqzPsUyzLTBaV
C43AnV3A8GRgtkEIaic8V0dv4jJAoFINu9unw5AK2+lR56UtsotozVQ78+Z/5T77
8S3TG2LwfiNEZoUEBbpfLyM2wjkscuZujVHTxQtE9QSi+KvC0zd42CBGgxQrHQ82
AG8Nkaq7MOSN+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:13 2026 by rpki-client