Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
File: qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft (raw, json)
Hash identifier: dE/J9/Ded96PsGaHmT5mCz2+92PKzHL04ZeOvQUbTBQ=
Subject key identifier: 92:D1:1F:E6:34:49:43:C3:77:D9:E3:A9:CD:73:6A:06:17:F0:FC:C5
Authority key identifier: A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35
Certificate issuer: /CN=a8ab7d68d69a52aa50c799990b9218419c147935
Certificate serial: 019D2A3B44C3CF215A0DC0BAB0F23318924C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
Manifest number: 02B3
Signing time: Thu 26 Mar 2026 13:00:20 +0000
Manifest this update: Thu 26 Mar 2026 13:00:20 +0000
Manifest next update: Fri 27 Mar 2026 13:00:20 +0000
Files and hashes: 1: LD8OWpI1obkdnjkX8kmxb_IamiA.roa (hash: RMRCf8c6qT05wLKTTfxT0EUrLvsEv29MJgHXniMipJs=)
2: qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl (hash: 5UDWRUr7MwwsoUzwVdhs9oQuVvwk6CPiI6h+LvZeILE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:44:c3:cf:21:5a:0d:c0:ba:b0:f2:33:18:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ab7d68d69a52aa50c799990b9218419c147935
Validity
Not Before: Mar 26 13:00:20 2026 GMT
Not After : Mar 27 13:00:20 2026 GMT
Subject: CN=92d11fe6344943c377d9e3a9cd736a0617f0fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:fa:99:1b:9c:14:3d:f4:20:f4:7b:80:56:
16:83:5d:ba:04:a5:c0:37:66:a4:92:74:e5:7d:31:
aa:ab:ff:2e:87:b2:cc:ea:45:45:79:5c:9c:7a:82:
54:e6:dd:9f:e1:9a:fb:81:fe:d6:89:20:f4:13:54:
aa:bc:d6:06:34:7c:87:96:d0:52:14:e1:89:0c:b4:
92:58:5e:c2:3e:d9:51:fc:9d:e5:0b:0f:d3:35:50:
db:de:5e:12:33:40:ef:d0:23:8e:34:d3:a3:d9:cb:
09:b8:be:c4:fe:f3:f3:94:43:13:e2:69:bd:f7:c3:
f6:c2:43:1c:8f:00:0d:d4:0e:6f:e2:6c:8a:2c:f8:
3a:38:c0:f4:dc:a7:b3:f2:47:39:54:65:24:cd:f6:
c7:5c:c8:4a:83:e8:78:c6:79:eb:5c:7a:d7:b3:b8:
a7:3a:dc:16:0f:bf:c0:87:75:7c:67:79:d6:60:27:
bf:52:fc:2f:14:52:f4:97:67:d6:c8:cb:f0:89:01:
f1:8d:1c:86:6e:f1:a4:3d:9b:c4:90:9a:d9:6f:f6:
2c:17:72:0c:88:ba:15:17:02:2e:e3:cc:fb:f3:0e:
98:39:0f:22:55:49:a3:05:ac:1c:59:cc:49:6e:e8:
40:c6:0c:ab:3a:37:c1:99:1e:4f:f4:93:5f:d8:65:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D1:1F:E6:34:49:43:C3:77:D9:E3:A9:CD:73:6A:06:17:F0:FC:C5
X509v3 Authority Key Identifier:
keyid:A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ff:37:e4:19:ba:01:2c:50:aa:d0:af:5e:37:83:fb:a6:ab:
76:57:b4:a6:12:6c:49:dd:68:3f:9b:d5:8e:97:a4:da:51:7c:
d4:07:59:20:12:a8:7a:0a:34:11:f4:ef:e9:3c:86:70:d8:c0:
89:2f:4b:a7:25:a5:a9:2c:ae:6e:8b:3a:48:5f:2a:9a:f8:cd:
8a:b5:cf:6a:db:f8:34:63:4f:63:fc:5b:ba:c2:1f:f5:34:55:
c7:a1:76:e5:4a:1d:f3:c8:32:fa:98:a8:7f:f6:9a:8f:69:22:
59:3a:8c:8b:6a:59:71:8c:c9:13:97:00:d7:dd:be:54:cb:71:
32:29:77:ed:81:59:97:09:57:8c:31:0b:ab:cd:61:07:25:46:
a1:3a:f7:f3:05:a9:77:9e:d3:28:3d:0a:92:08:b6:c4:0b:d8:
ae:ef:6f:81:d8:ef:d7:58:fe:04:3c:5e:89:19:ce:dd:ad:f0:
7b:2f:57:67:7c:a7:5a:de:16:22:8b:4f:3e:59:6d:da:9e:e9:
0e:3a:03:90:64:ae:d2:ef:57:2e:b4:d1:aa:a2:42:f5:d1:20:
1f:75:d7:79:6f:6f:ca:80:ce:51:dd:4e:b9:52:43:64:75:f6:
94:90:53:c3:93:bd:2e:60:39:cb:c0:7a:59:25:be:93:89:bb:
de:2c:fb:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO0TDzyFaDcC6sPIzGJJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWI3ZDY4ZDY5YTUyYWE1MGM3OTk5OTBiOTIxODQxOWMx
NDc5MzUwHhcNMjYwMzI2MTMwMDIwWhcNMjYwMzI3MTMwMDIwWjAzMTEwLwYDVQQD
Eyg5MmQxMWZlNjM0NDk0M2MzNzdkOWUzYTljZDczNmEwNjE3ZjBmY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYX6mRucFD30IPR7gFYWg126BKXA
N2akknTlfTGqq/8uh7LM6kVFeVyceoJU5t2f4Zr7gf7WiSD0E1SqvNYGNHyHltBS
FOGJDLSSWF7CPtlR/J3lCw/TNVDb3l4SM0Dv0COONNOj2csJuL7E/vPzlEMT4mm9
98P2wkMcjwAN1A5v4myKLPg6OMD03Kez8kc5VGUkzfbHXMhKg+h4xnnrXHrXs7in
OtwWD7/Ah3V8Z3nWYCe/UvwvFFL0l2fWyMvwiQHxjRyGbvGkPZvEkJrZb/YsF3IM
iLoVFwIu48z78w6YOQ8iVUmjBawcWcxJbuhAxgyrOjfBmR5P9JNf2GXj8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLRH+Y0SUPDd9njqc1zagYX8PzFMB8GA1UdIwQY
MBaAFKirfWjWmlKqUMeZmQuSGEGcFHk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZWM3MjUtNGQ4ZC00MzExLTkzNGYt
Mzg4MDU1MmE1NDM5LzEvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80ZWM3MjUtNGQ4ZC00MzExLTkzNGYtMzg4MDU1MmE1NDM5
LzEvcUt0OWFOYWFVcXBReDVtWkM1SVlRWndVZVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv835Bm6
ASxQqtCvXjeD+6ardle0phJsSd1oP5vVjpek2lF81AdZIBKoego0EfTv6TyGcNjA
iS9LpyWlqSyubos6SF8qmvjNirXPatv4NGNPY/xbusIf9TRVx6F25Uod88gy+pio
f/aaj2kiWTqMi2pZcYzJE5cA192+VMtxMil37YFZlwlXjDELq81hByVGoTr38wWp
d57TKD0Kkgi2xAvYru9vgdjv11j+BDxeiRnO3a3wey9XZ3ynWt4WIotPPllt2p7p
DjoDkGSu0u9XLrTRqqJC9dEgH3XXeW9vyoDOUd1OuVJDZHX2lJBTw5O9LmA5y8B6
WSW+k4m73iz7Sg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:35 2026 by rpki-client