Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: w6ZEbjo5OrTTrysgmVcoNV3u+pWNrxjDZrzS5DuBgXY=
Subject key identifier: 84:1E:07:0D:D3:EB:FF:A2:D7:BA:AC:91:E3:5E:96:F4:03:8F:70:25
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 019D2AA9FC139BC4F2DF88AF02134329F145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 108D
Signing time: Thu 26 Mar 2026 15:01:16 +0000
Manifest this update: Thu 26 Mar 2026 15:01:16 +0000
Manifest next update: Fri 27 Mar 2026 15:01:16 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: nzpy8nJ2C6FAg6drUtyJE4afbOAIhgTMQIXTC+YcSEU=)
3: mEv1kE1lMotDr8sLFZWQmH30hS8.asa (hash: m7PDerWM5bgHRSI7c7j1m1H/GiwRpECGmTbUoXbAV4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:fc:13:9b:c4:f2:df:88:af:02:13:43:29:f1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Mar 26 15:01:16 2026 GMT
Not After : Mar 27 15:01:16 2026 GMT
Subject: CN=841e070dd3ebffa2d7baac91e35e96f4038f7025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:b2:d0:79:16:ad:44:9b:bf:46:07:8f:f4:
cd:6a:18:34:7e:72:ed:e6:be:f2:f9:5c:ab:df:9a:
9f:9a:ea:4a:a6:4d:e6:b2:5f:bf:39:d8:a4:df:18:
97:43:1d:01:2d:f3:22:11:f4:1f:eb:55:6f:a0:aa:
61:31:dc:07:b3:83:e7:35:77:b5:a1:97:94:3b:2e:
87:56:ab:63:b5:89:0a:63:9a:22:4c:93:bd:de:f8:
72:8b:fd:b4:a8:12:7b:d3:73:e0:e8:91:87:e1:31:
c8:86:42:05:de:4e:9a:39:75:c5:7a:73:e9:16:82:
f9:91:8b:44:38:6c:7e:9f:76:e2:c2:5e:a6:4b:01:
a5:7a:d9:e2:44:53:29:88:ad:01:5c:e7:5c:45:10:
93:59:89:42:f6:95:f8:1d:a5:1b:a3:2b:4f:27:20:
03:32:94:33:e8:49:bb:05:8f:db:db:c0:9b:8e:45:
08:8a:7b:ad:b4:dc:54:0a:5a:88:0e:11:c1:06:ba:
5f:5a:a1:b4:86:87:7c:4b:17:d1:2c:4c:7f:be:35:
33:6f:c2:33:e2:ef:72:2f:2f:b4:d8:5c:9a:b4:f3:
50:9b:38:f6:9e:2a:14:58:a6:89:b8:07:2e:6b:c2:
60:b1:5c:5b:a2:28:e9:c7:08:d2:dc:9c:48:a4:b1:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1E:07:0D:D3:EB:FF:A2:D7:BA:AC:91:E3:5E:96:F4:03:8F:70:25
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:51:44:4d:a4:b5:56:0e:7e:9d:1c:61:da:6f:23:3f:55:
c2:37:9f:8f:8a:87:ed:9a:d5:c1:01:87:f7:b9:e9:26:fa:75:
6e:90:2f:28:ed:23:1d:07:2f:3e:92:29:e5:b7:ec:ac:04:94:
97:11:b8:2e:8b:28:32:e9:03:ab:70:6f:40:42:5f:5c:47:d2:
bf:21:ce:38:da:b8:09:1c:0d:4e:5e:af:6f:43:3d:aa:7a:82:
4d:14:04:30:38:c9:ac:92:5f:14:37:56:a3:ba:57:f1:88:c7:
d9:3d:4c:57:a7:3d:65:b7:23:24:ec:0d:bb:6b:12:ef:63:ce:
6a:13:01:9e:23:f4:48:ca:ef:46:35:bd:41:6c:c3:f5:38:9f:
b4:68:a7:11:90:fe:78:e3:1e:e2:d1:dd:06:ed:83:87:ba:13:
0b:39:a2:27:75:1e:80:9c:0e:62:0c:68:7e:e7:46:fb:e8:36:
68:3f:ee:32:49:2b:79:00:47:93:65:67:4f:7e:ee:56:8e:5a:
95:83:1c:a8:a3:88:05:bd:cd:52:69:b5:ce:f7:e3:e8:00:9e:
55:00:e7:3c:bd:7d:bd:1c:8c:c2:63:c8:6c:53:2e:fb:3e:66:
e0:7c:49:fe:a7:29:d3:ec:43:63:18:38:45:59:c5:0b:fb:4c:
eb:d2:98:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqfwTm8Ty34ivAhNDKfFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNjYyNzMzYmM4NzNkMTNlMWY5ZjY2ZThkZmY3NWM4MjBk
NWQyZjcwHhcNMjYwMzI2MTUwMTE2WhcNMjYwMzI3MTUwMTE2WjAzMTEwLwYDVQQD
Eyg4NDFlMDcwZGQzZWJmZmEyZDdiYWFjOTFlMzVlOTZmNDAzOGY3MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4my0HkWrUSbv0YHj/TNahg0fnLt
5r7y+Vyr35qfmupKpk3msl+/Odik3xiXQx0BLfMiEfQf61VvoKphMdwHs4PnNXe1
oZeUOy6HVqtjtYkKY5oiTJO93vhyi/20qBJ703Pg6JGH4THIhkIF3k6aOXXFenPp
FoL5kYtEOGx+n3biwl6mSwGletniRFMpiK0BXOdcRRCTWYlC9pX4HaUboytPJyAD
MpQz6Em7BY/b28CbjkUIinuttNxUClqIDhHBBrpfWqG0hod8SxfRLEx/vjUzb8Iz
4u9yLy+02FyatPNQmzj2nioUWKaJuAcua8JgsVxboijpxwjS3JxIpLHl9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQeBw3T6/+i17qskeNelvQDj3AlMB8GA1UdIwQY
MBaAFEBmJzO8hz0T4fn2bo3/dcgg1dL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYt
OWNiNTFlNTFmZjc3LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kOTEwZDEtOTRjNi00NDEyLTg1MDYtOWNiNTFlNTFmZjc3
LzEvUUdZbk03eUhQUlBoLWZadWpmOTF5Q0RWMHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8xRRE2k
tVYOfp0cYdpvIz9Vwjefj4qH7ZrVwQGH97npJvp1bpAvKO0jHQcvPpIp5bfsrASU
lxG4LosoMukDq3BvQEJfXEfSvyHOONq4CRwNTl6vb0M9qnqCTRQEMDjJrJJfFDdW
o7pX8YjH2T1MV6c9ZbcjJOwNu2sS72POahMBniP0SMrvRjW9QWzD9TiftGinEZD+
eOMe4tHdBu2Dh7oTCzmiJ3UegJwOYgxofudG++g2aD/uMkkreQBHk2VnT37uVo5a
lYMcqKOIBb3NUmm1zvfj6ACeVQDnPL19vRyMwmPIbFMu+z5m4HxJ/qcp0+xDYxg4
RVnFC/tM69KYGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:24 2026 by rpki-client