Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: +1u2EryajbFSBi4VM60T2z41z6Zv1kXNr6/Ti8ItRdg=
Subject key identifier: E6:13:89:D4:D9:FD:D1:FB:76:DB:6F:81:CA:A8:2D:89:46:8D:63:6F
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 019D25B9FE180F2192226ABF8EB67B528271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0F14
Signing time: Wed 25 Mar 2026 16:00:39 +0000
Manifest this update: Wed 25 Mar 2026 16:00:39 +0000
Manifest next update: Thu 26 Mar 2026 16:00:39 +0000
Files and hashes: 1: JLgki92L26vgomF3wfSSuh1nDvo.roa (hash: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I=)
2: NcpN8sW8qQBrAdmBdPAjvFVJbQ4.asa (hash: YF9c0azhuf6/qBJm+KdWT2V2rii+OM05USUNERyUwKo=)
3: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (hash: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ=)
4: m6hIErNMpBZVw2qZHKcW2BJUVwg.roa (hash: CKojvhqXdroeSLPSwIAOGazGVtOAtTG05hf6NLW4WCs=)
5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: 3vPaB0VHdXAxYbcQgsSy15DlbgWRshIL5/2mXj1jYnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b9:fe:18:0f:21:92:22:6a:bf:8e:b6:7b:52:82:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Mar 25 16:00:39 2026 GMT
Not After : Mar 26 16:00:39 2026 GMT
Subject: CN=e61389d4d9fdd1fb76db6f81caa82d89468d636f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:88:e5:6e:57:16:10:b4:88:8e:79:df:52:
e2:5f:79:99:1f:5b:1d:6c:5e:60:93:8b:67:17:0a:
6b:7f:87:0c:9b:1a:d6:2a:6a:24:46:d9:4e:fe:8a:
69:15:f9:43:2d:b2:4f:7c:1f:81:bb:75:5e:ed:a0:
64:d9:71:8f:c9:22:cf:49:76:56:06:1a:86:79:d9:
20:ca:3f:7b:06:b2:b2:05:50:97:f5:8d:40:75:2e:
6c:11:68:e1:35:a3:c2:d3:6a:a3:c3:0f:a7:13:aa:
b1:41:b9:c7:2b:e5:f9:8a:55:b4:47:ca:e5:6d:14:
0f:ed:3a:c1:8e:ae:59:1f:c8:89:f8:3e:25:d1:80:
d0:20:c2:04:fc:6c:9b:84:c9:77:30:ae:23:17:2d:
ab:4a:e4:01:88:52:aa:ea:c3:89:5c:14:05:d4:4c:
46:c1:39:22:85:3e:13:83:13:6e:2a:0c:4a:bd:6f:
eb:a3:27:b1:ff:07:7c:b0:b8:65:3a:51:a3:c5:47:
a2:85:6b:29:03:b1:39:33:ad:3d:a1:fe:69:45:ce:
e0:0d:10:da:7d:73:d5:17:49:ac:5a:a2:ef:fd:8d:
ff:ac:22:e9:c7:29:77:08:f9:77:f7:81:0e:7b:85:
3a:3a:df:8f:ab:af:c6:dd:e0:b3:51:a7:e4:dc:2e:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:13:89:D4:D9:FD:D1:FB:76:DB:6F:81:CA:A8:2D:89:46:8D:63:6F
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:80:ad:25:63:b6:3d:a3:97:78:5e:e3:e3:3d:99:f5:bc:
56:7a:a5:08:fc:07:88:0a:f1:21:25:2a:67:ef:18:34:8c:e2:
8a:50:1e:f1:c6:1e:d3:4b:8b:3d:34:83:09:0c:9a:0f:66:2a:
09:1a:77:aa:27:05:f4:e2:eb:3a:44:c9:d3:d2:47:7f:d4:64:
c8:4c:88:b5:6c:44:c9:4e:8f:b3:45:5a:56:a4:a1:c8:f2:14:
b1:01:a9:e9:c1:87:69:99:78:bc:91:b4:5c:df:6a:2b:11:02:
c1:2d:ef:77:2e:21:b6:4a:25:3a:86:86:1e:6c:6b:4b:80:d2:
24:e2:86:fd:cb:89:99:12:23:a9:2d:3c:86:09:f5:17:bf:d1:
48:b1:6e:44:70:0b:cf:9f:c6:89:26:66:d2:72:3a:3b:db:a2:
25:a2:6d:e2:f6:c6:8a:ca:60:ed:36:38:69:3e:7a:36:8f:e7:
95:b2:81:f8:97:67:1e:cd:96:0a:c3:10:21:02:dd:29:0a:7a:
73:6a:8d:8a:8a:14:6e:2b:f2:34:29:3f:9a:ea:ba:a7:a5:63:
4f:28:34:1d:d1:44:c5:ea:a9:23:1f:67:65:b1:b6:4f:07:77:
c4:9c:b9:b2:86:ac:c0:52:f6:cb:e4:24:a3:f4:97:67:ce:27:
8a:c6:a2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luf4YDyGSImq/jrZ7UoJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1
YzZkZmUwHhcNMjYwMzI1MTYwMDM5WhcNMjYwMzI2MTYwMDM5WjAzMTEwLwYDVQQD
EyhlNjEzODlkNGQ5ZmRkMWZiNzZkYjZmODFjYWE4MmQ4OTQ2OGQ2MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DSI5W5XFhC0iI5531LiX3mZH1sd
bF5gk4tnFwprf4cMmxrWKmokRtlO/oppFflDLbJPfB+Bu3Ve7aBk2XGPySLPSXZW
BhqGedkgyj97BrKyBVCX9Y1AdS5sEWjhNaPC02qjww+nE6qxQbnHK+X5ilW0R8rl
bRQP7TrBjq5ZH8iJ+D4l0YDQIMIE/GybhMl3MK4jFy2rSuQBiFKq6sOJXBQF1ExG
wTkihT4TgxNuKgxKvW/royex/wd8sLhlOlGjxUeihWspA7E5M609of5pRc7gDRDa
fXPVF0msWqLv/Y3/rCLpxyl3CPl394EOe4U6Ot+Pq6/G3eCzUafk3C5/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYTidTZ/dH7dttvgcqoLYlGjWNvMB8GA1UdIwQY
MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt
ZjhhZmZlZjExMmQ4LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4
LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdeArSVj
tj2jl3he4+M9mfW8VnqlCPwHiArxISUqZ+8YNIziilAe8cYe00uLPTSDCQyaD2Yq
CRp3qicF9OLrOkTJ09JHf9RkyEyItWxEyU6Ps0VaVqShyPIUsQGp6cGHaZl4vJG0
XN9qKxECwS3vdy4htkolOoaGHmxrS4DSJOKG/cuJmRIjqS08hgn1F7/RSLFuRHAL
z5/GiSZm0nI6O9uiJaJt4vbGispg7TY4aT56No/nlbKB+JdnHs2WCsMQIQLdKQp6
c2qNiooUbivyNCk/muq6p6VjTyg0HdFExeqpIx9nZbG2Twd3xJy5soaswFL2y+Qk
o/SXZ84nisaiwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:29 2026 by rpki-client