Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: qmQnFKIn5QrlseW4I9os1bru13/ajaz3tSrspRu/pGc=
Subject key identifier: 2C:02:15:30:4E:F2:5D:98:C5:8E:33:71:93:67:FA:F2:94:72:A0:3E
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 019D2997327831611BDB34E1F7ACEBD56590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0F16
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: JLgki92L26vgomF3wfSSuh1nDvo.roa (hash: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I=)
2: NcpN8sW8qQBrAdmBdPAjvFVJbQ4.asa (hash: YF9c0azhuf6/qBJm+KdWT2V2rii+OM05USUNERyUwKo=)
3: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (hash: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ=)
4: m6hIErNMpBZVw2qZHKcW2BJUVwg.roa (hash: CKojvhqXdroeSLPSwIAOGazGVtOAtTG05hf6NLW4WCs=)
5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: iwWs1uaGrQbc6PuTUWQxXDTA/TemSdt5iX0bXjf21J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:32:78:31:61:1b:db:34:e1:f7:ac:eb:d5:65:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=2c0215304ef25d98c58e33719367faf29472a03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:45:4c:e6:d1:f5:22:f2:23:a4:5d:f1:2d:
99:7b:08:d4:35:9c:e2:e2:50:17:9c:d6:02:a7:37:
77:91:5e:9b:5f:22:fb:01:fd:ee:7e:81:e5:05:18:
24:ef:92:0e:1f:40:85:ee:b0:ed:85:c2:93:29:1a:
a4:11:6f:75:b5:b1:22:5a:d1:94:ad:21:f4:c9:bf:
90:ff:bc:f0:3e:6c:19:b1:0a:30:a4:7e:c1:6e:a5:
02:6b:f7:d8:5c:fc:a8:f4:09:aa:5d:e9:ad:1c:f8:
24:ae:9b:da:b7:f8:67:ab:4d:8d:ed:8e:75:06:92:
ab:f7:e9:43:ac:89:5f:7d:29:0a:61:1f:ac:ef:86:
d6:41:04:7c:bb:3d:f9:ad:57:48:68:5b:6d:95:bf:
91:4c:9f:04:8e:d6:73:67:9d:92:a9:51:d2:d0:b6:
d1:e5:8d:20:62:12:ea:0b:d2:5b:0f:45:e4:2d:99:
92:e8:fe:25:ea:0c:8e:55:e3:3a:98:13:0d:f6:e4:
4d:92:09:b8:6b:f9:e0:51:45:f6:c1:df:a2:ae:94:
5d:fb:92:bb:1d:00:cd:67:4d:82:78:89:59:f3:57:
91:3e:c8:f5:0a:2e:bf:29:8c:28:a6:e8:f8:01:70:
43:9a:31:df:06:16:ec:27:1e:d3:7a:81:bf:b6:bb:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:15:30:4E:F2:5D:98:C5:8E:33:71:93:67:FA:F2:94:72:A0:3E
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0a:f1:b4:db:e6:3a:c8:fd:02:b8:6d:17:31:ee:b3:ac:e3:
59:98:04:41:5d:69:2d:49:f5:30:32:86:15:f7:a7:29:8b:0f:
eb:90:78:21:6b:91:bd:d9:27:17:8f:b6:82:94:8d:3d:e0:43:
f1:97:43:37:14:5e:e5:0e:a6:b3:0d:e7:3f:4d:16:2f:a9:78:
17:dd:6f:59:f8:d4:03:7e:63:79:dd:10:45:4a:3a:ce:1a:2b:
a8:b6:7e:86:b1:65:4b:76:2c:3c:4f:15:30:ff:b6:80:4a:56:
94:80:1b:10:4f:45:f2:1e:fe:6f:9f:d4:10:c4:d1:e6:60:5b:
e3:4e:77:a1:f8:41:f2:21:ee:69:37:7b:a3:64:32:57:f6:c8:
f6:03:cc:17:82:d7:b2:06:a6:62:6f:8d:7b:59:f8:f9:ef:c5:
9b:08:1c:98:4c:3f:c7:df:23:8b:b1:07:1d:52:77:d9:ff:16:
08:57:d3:9f:62:35:a8:7d:b9:1a:01:28:59:01:13:1f:f2:a7:
5a:8e:70:90:3c:26:9e:4c:87:89:84:09:b4:e4:08:7a:0f:9d:
df:d7:4e:e9:56:a0:74:97:ec:cc:4a:7d:24:a1:56:b8:6b:7e:
45:ff:a5:03:b8:bd:a6:27:24:d4:20:f4:8b:d5:38:db:91:9e:
f6:86:6c:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plzJ4MWEb2zTh96zr1WWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1
YzZkZmUwHhcNMjYwMzI2MTAwMTA3WhcNMjYwMzI3MTAwMTA3WjAzMTEwLwYDVQQD
EygyYzAyMTUzMDRlZjI1ZDk4YzU4ZTMzNzE5MzY3ZmFmMjk0NzJhMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVFTObR9SLyI6Rd8S2ZewjUNZzi
4lAXnNYCpzd3kV6bXyL7Af3ufoHlBRgk75IOH0CF7rDthcKTKRqkEW91tbEiWtGU
rSH0yb+Q/7zwPmwZsQowpH7BbqUCa/fYXPyo9AmqXemtHPgkrpvat/hnq02N7Y51
BpKr9+lDrIlffSkKYR+s74bWQQR8uz35rVdIaFttlb+RTJ8EjtZzZ52SqVHS0LbR
5Y0gYhLqC9JbD0XkLZmS6P4l6gyOVeM6mBMN9uRNkgm4a/ngUUX2wd+irpRd+5K7
HQDNZ02CeIlZ81eRPsj1Ci6/KYwopuj4AXBDmjHfBhbsJx7TeoG/trv+YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwCFTBO8l2YxY4zcZNn+vKUcqA+MB8GA1UdIwQY
MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt
ZjhhZmZlZjExMmQ4LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4
LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQrxtNvm
Osj9ArhtFzHus6zjWZgEQV1pLUn1MDKGFfenKYsP65B4IWuRvdknF4+2gpSNPeBD
8ZdDNxRe5Q6msw3nP00WL6l4F91vWfjUA35jed0QRUo6zhorqLZ+hrFlS3YsPE8V
MP+2gEpWlIAbEE9F8h7+b5/UEMTR5mBb4053ofhB8iHuaTd7o2QyV/bI9gPMF4LX
sgamYm+Ne1n4+e/FmwgcmEw/x98ji7EHHVJ32f8WCFfTn2I1qH25GgEoWQETH/Kn
Wo5wkDwmnkyHiYQJtOQIeg+d39dO6VagdJfszEp9JKFWuGt+Rf+lA7i9pick1CD0
i9U425Ge9oZsSg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:11 2026 by rpki-client