Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: KzovQ4Q3/qDTpurpT3tkv8U/Ctt+VfZdH7BIRmWfkZE=
Subject key identifier: 93:27:24:16:A1:55:DE:ED:0E:05:FA:4E:B3:8B:1E:17:D5:FC:2A:D5
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019D2960B5E59124161D54E42701AD6866C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 07BD
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: SvTOmY9BBpn2s9niQcf1nljrd+Gk112ynJCELLiluiY=)
2: Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa (hash: g40LtFFYkGRLTg/R02uueeyuMPwHWbYTIxLpfiRgOHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b5:e5:91:24:16:1d:54:e4:27:01:ad:68:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=93272416a155deed0e05fa4eb38b1e17d5fc2ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:e3:68:2a:01:d1:f2:b4:55:00:33:b8:fd:
94:01:ae:d1:e2:90:22:7a:d6:42:06:ec:96:93:de:
5e:1a:57:2c:92:9b:45:1e:f9:bb:7e:85:ec:41:fe:
12:5a:23:8a:74:19:1c:6f:78:26:59:48:bf:fa:7d:
bd:7e:fb:b7:f8:53:90:75:3e:16:32:47:60:10:7f:
e6:8b:79:01:bf:cf:72:1a:d3:e9:f5:f6:34:b1:a7:
12:78:17:dc:d1:d8:5d:5f:da:33:af:74:8a:98:85:
fd:da:a2:b2:f3:3e:9e:5d:97:f8:31:47:9f:56:df:
0d:58:95:88:28:a2:63:9d:d5:3f:f6:31:8d:1a:38:
90:86:fd:da:72:66:72:87:b4:55:be:93:2c:ca:f3:
52:a1:05:af:84:0d:19:00:14:6f:8b:1a:7e:c1:68:
01:1a:76:2d:4a:d7:91:9b:a5:b5:21:6d:1a:83:88:
23:cb:d3:0b:ef:0b:ff:93:6b:93:fa:bc:ac:6a:37:
b2:a0:fe:2c:30:aa:81:71:f0:cc:66:f1:71:a1:61:
b3:fa:73:ac:88:3c:24:8b:97:55:70:a1:55:3f:de:
95:64:21:c0:d9:6e:24:ca:60:ab:83:15:ad:0a:8c:
b7:67:77:e9:4d:88:8f:9f:42:69:ab:82:7b:af:cc:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:24:16:A1:55:DE:ED:0E:05:FA:4E:B3:8B:1E:17:D5:FC:2A:D5
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:49:57:2d:ee:c6:f7:96:71:17:40:3b:0b:49:b0:cd:b0:e2:
3e:a3:7d:c6:2f:c6:f5:71:87:d4:f7:27:2d:ca:3d:38:d2:cc:
76:fb:9d:6f:cd:a9:fa:38:92:7d:cc:94:1d:ea:72:37:8b:51:
8c:39:14:89:2d:dc:a0:0f:e7:98:e7:82:73:69:f1:b8:9d:9d:
6b:5d:64:58:2e:bf:71:6c:65:fb:e0:7b:e3:f3:d3:34:ca:bf:
4e:3e:27:81:4e:60:f0:ed:8f:67:bf:3a:e3:23:8d:56:74:ac:
d3:89:d9:15:df:03:f0:cf:e2:4f:09:e2:03:df:58:88:18:9d:
32:41:81:08:b3:80:04:52:9e:5b:88:b9:f0:52:50:fc:f3:a3:
b5:e3:d5:96:f7:24:b3:27:41:a7:69:13:41:5a:3d:67:45:7a:
93:e9:d2:8c:8d:7d:9d:b4:04:0f:4d:ef:89:c1:ff:1d:e4:f8:
56:8e:31:53:f7:bc:e6:b0:f3:80:81:3c:40:7a:8e:8a:22:ea:
e7:25:82:34:04:62:14:28:e2:62:e6:f2:de:aa:67:45:65:30:
55:5a:78:8d:81:6b:85:84:89:52:9e:93:31:6f:bb:42:2e:0f:
e8:38:47:bd:40:2a:80:af:0c:22:10:99:44:c2:1c:b5:31:88:
e2:86:88:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYLXlkSQWHVTkJwGtaGbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx
MWFlYzUwHhcNMjYwMzI2MDkwMTM3WhcNMjYwMzI3MDkwMTM3WjAzMTEwLwYDVQQD
Eyg5MzI3MjQxNmExNTVkZWVkMGUwNWZhNGViMzhiMWUxN2Q1ZmMyYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxbjaCoB0fK0VQAzuP2UAa7R4pAi
etZCBuyWk95eGlcskptFHvm7foXsQf4SWiOKdBkcb3gmWUi/+n29fvu3+FOQdT4W
MkdgEH/mi3kBv89yGtPp9fY0sacSeBfc0dhdX9ozr3SKmIX92qKy8z6eXZf4MUef
Vt8NWJWIKKJjndU/9jGNGjiQhv3acmZyh7RVvpMsyvNSoQWvhA0ZABRvixp+wWgB
GnYtSteRm6W1IW0ag4gjy9ML7wv/k2uT+rysajeyoP4sMKqBcfDMZvFxoWGz+nOs
iDwki5dVcKFVP96VZCHA2W4kymCrgxWtCoy3Z3fpTYiPn0Jpq4J7r8w88QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMnJBahVd7tDgX6TrOLHhfV/CrVMB8GA1UdIwQY
MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt
YTc3ODM0NWFlZDg4LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4
LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUlXLe7G
95ZxF0A7C0mwzbDiPqN9xi/G9XGH1PcnLco9ONLMdvudb82p+jiSfcyUHepyN4tR
jDkUiS3coA/nmOeCc2nxuJ2da11kWC6/cWxl++B74/PTNMq/Tj4ngU5g8O2PZ786
4yONVnSs04nZFd8D8M/iTwniA99YiBidMkGBCLOABFKeW4i58FJQ/POjtePVlvck
sydBp2kTQVo9Z0V6k+nSjI19nbQED03vicH/HeT4Vo4xU/e85rDzgIE8QHqOiiLq
5yWCNARiFCjiYuby3qpnRWUwVVp4jYFrhYSJUp6TMW+7Qi4P6DhHvUAqgK8MIhCZ
RMIctTGI4oaI+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:26 2026 by rpki-client