Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: LMkmuefPXAxdWPfIHwosXZHd5B0rcTufLEx/yBS0uIU=
Subject key identifier: 66:68:33:AF:D3:CE:2E:8D:31:19:B2:5B:36:27:BA:B8:BD:27:0D:A0
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 019D26283BB5D9ED8CE671B9B68574D7B850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 15C8
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: PV/p7jr/2c7kNm6YhUCM8/9uzC6Cs44UGsvwyeKIpd8=)
2: tI5Q_pHNppa9IygLbs0z0gxs4tQ.roa (hash: 42laiJa6YC1H/CwPJuianhlbqJN55nJRIX5XgJoyuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3b:b5:d9:ed:8c:e6:71:b9:b6:85:74:d7:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=666833afd3ce2e8d3119b25b3627bab8bd270da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:70:ad:20:29:c2:a8:de:82:36:0e:6c:f0:
58:3a:d1:db:a4:94:4d:66:00:b1:89:62:ec:ed:8d:
8b:1e:e7:81:9f:3a:7f:36:6c:7d:b6:d0:a9:02:fb:
38:d0:d9:51:61:1d:34:b0:ef:6c:a8:64:8c:9c:c7:
23:06:5a:37:f7:0a:1a:3e:09:f3:a0:41:b9:93:dc:
c5:bf:8e:dc:93:76:a3:0b:3c:4a:a7:4b:4b:bd:91:
42:7f:50:98:aa:63:8f:05:e5:32:a0:25:7f:24:6b:
64:27:92:76:46:f9:6f:8c:d1:14:ed:1a:9e:46:6d:
72:33:c6:ed:e1:d1:dd:53:3f:84:4d:b4:03:2c:7f:
d3:27:84:24:07:f1:fa:a6:bb:76:57:23:2a:8a:12:
8e:1b:f4:9a:f0:b1:ce:c5:14:c9:ed:9d:88:22:ef:
98:77:2f:8a:97:14:22:81:14:b2:72:1a:84:52:05:
22:1c:fe:7e:63:41:3e:43:9b:86:b6:06:a5:fc:91:
e3:72:ef:b5:ce:2c:db:0f:06:ba:d1:28:65:9c:15:
e3:49:98:da:2a:f2:e3:96:e5:67:76:02:bd:59:05:
a6:b7:e9:43:63:d9:7a:74:da:13:88:85:a6:9d:d4:
b3:85:17:7d:9c:9c:4c:af:22:30:87:e7:35:91:df:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:33:AF:D3:CE:2E:8D:31:19:B2:5B:36:27:BA:B8:BD:27:0D:A0
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c8:5f:71:0f:01:da:2c:82:e6:57:e6:07:5f:57:fa:83:18:
68:bf:9f:3f:cd:71:41:9e:d7:13:13:9a:54:64:52:3d:0c:ec:
dc:0b:46:6f:dd:74:1a:ec:24:48:ee:f4:5e:b0:3f:a1:99:c6:
3b:de:15:d7:69:e0:e8:65:f7:74:81:10:b5:2d:8e:fa:f2:57:
51:b0:99:dc:ac:8c:16:63:77:3c:95:08:63:4c:52:16:0b:24:
8b:2c:30:88:54:f7:2f:63:6a:b9:36:fb:f2:82:75:38:83:bc:
fc:8a:e5:8f:2f:20:7f:91:b9:71:37:e5:1c:7f:73:e2:86:05:
4e:91:08:48:9e:ab:d0:13:ba:ac:ab:da:a2:64:9d:94:cc:16:
b0:06:a6:66:ba:b0:7d:ca:23:8f:63:30:43:5d:8c:10:a9:18:
30:c9:97:a2:fb:92:c4:a0:6a:17:64:b8:cb:79:b1:a1:30:80:
c7:0e:67:1c:44:df:e5:37:c9:33:0c:24:f0:de:ee:83:11:81:
96:32:60:16:72:e9:d4:aa:f0:c2:31:1f:75:bf:66:ce:01:ce:
83:0b:2d:6b:4d:ac:ac:b5:98:54:0d:ac:c6:5e:d8:53:85:64:
a1:a0:b1:f2:79:35:d1:81:d6:34:68:3b:99:1e:dd:4c:23:47:
d0:72:91:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKDu12e2M5nG5toV017hQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODVjZGJkZGZkN2QxMzE2ODQ1YmViNGY3Mzk4ZjNjZTY0
ZmFjZDAwHhcNMjYwMzI1MTgwMTA0WhcNMjYwMzI2MTgwMTA0WjAzMTEwLwYDVQQD
Eyg2NjY4MzNhZmQzY2UyZThkMzExOWIyNWIzNjI3YmFiOGJkMjcwZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlRwrSApwqjegjYObPBYOtHbpJRN
ZgCxiWLs7Y2LHueBnzp/Nmx9ttCpAvs40NlRYR00sO9sqGSMnMcjBlo39woaPgnz
oEG5k9zFv47ck3ajCzxKp0tLvZFCf1CYqmOPBeUyoCV/JGtkJ5J2RvlvjNEU7Rqe
Rm1yM8bt4dHdUz+ETbQDLH/TJ4QkB/H6prt2VyMqihKOG/Sa8LHOxRTJ7Z2IIu+Y
dy+KlxQigRSychqEUgUiHP5+Y0E+Q5uGtgal/JHjcu+1zizbDwa60ShlnBXjSZja
KvLjluVndgK9WQWmt+lDY9l6dNoTiIWmndSzhRd9nJxMryIwh+c1kd/IlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZoM6/Tzi6NMRmyWzYnuri9Jw2gMB8GA1UdIwQY
MBaAFKiFzb3f19ExaEW+tPc5jzzmT6zQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEt
ZjQ4Mjc4MDBiMGM4LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEtZjQ4Mjc4MDBiMGM4
LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnshfcQ8B
2iyC5lfmB19X+oMYaL+fP81xQZ7XExOaVGRSPQzs3AtGb910GuwkSO70XrA/oZnG
O94V12ng6GX3dIEQtS2O+vJXUbCZ3KyMFmN3PJUIY0xSFgskiywwiFT3L2NquTb7
8oJ1OIO8/Irljy8gf5G5cTflHH9z4oYFTpEISJ6r0BO6rKvaomSdlMwWsAamZrqw
fcojj2MwQ12MEKkYMMmXovuSxKBqF2S4y3mxoTCAxw5nHETf5TfJMwwk8N7ugxGB
ljJgFnLp1KrwwjEfdb9mzgHOgwsta02srLWYVA2sxl7YU4VkoaCx8nk10YHWNGg7
mR7dTCNH0HKRkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:15 2026 by rpki-client