Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: Y3WLNBvVxVk/bFm28xgTTfyLwBadOHeQZQWvSgnllXE=
Subject key identifier: 54:86:F7:5D:15:42:17:9C:B2:EA:D7:41:BF:6F:DE:3F:7B:5F:01:C2
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 019D273B2A48E707A9485CDF716AF16911D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0F67
Signing time: Wed 25 Mar 2026 23:01:21 +0000
Manifest this update: Wed 25 Mar 2026 23:01:21 +0000
Manifest next update: Thu 26 Mar 2026 23:01:21 +0000
Files and hashes: 1: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: kxTifjm6kdLAmhqfictfwfvO8VNwx9phS0eEeFXXrjc=)
2: sXlHt8dVvMvRDk-z4mx7yfN18pA.roa (hash: JcovqlIDNXFTAcILNhi0OUki1VVI3DETXQCJ5bTmzq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2a:48:e7:07:a9:48:5c:df:71:6a:f1:69:11:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Mar 25 23:01:21 2026 GMT
Not After : Mar 26 23:01:21 2026 GMT
Subject: CN=5486f75d1542179cb2ead741bf6fde3f7b5f01c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:a3:6e:53:60:6c:c3:81:e3:7a:65:a6:8c:
49:25:43:43:e2:3a:ce:ad:b4:4b:ed:a6:f5:87:38:
87:3f:9a:17:05:be:af:c8:c2:a4:57:e6:80:a8:e3:
e3:7f:72:d6:00:61:6b:ea:44:3f:08:11:a6:ca:f0:
eb:d3:84:38:b7:7e:e9:38:cd:81:f2:f2:52:c3:0a:
93:39:7a:a2:85:6d:4e:eb:6a:9b:f1:49:24:2f:04:
10:6c:fc:22:88:49:8a:9c:94:4b:25:1e:49:11:c3:
5c:16:13:8b:22:2c:6b:0c:ff:89:49:18:7f:3b:90:
51:48:3d:b5:7e:da:2b:0c:77:8e:02:72:2e:4e:f6:
f1:47:1f:75:4f:03:a1:78:f7:e0:01:f1:4f:ad:47:
09:65:fa:f3:ba:ab:25:01:f9:ac:45:fa:cf:ed:30:
ae:86:4a:77:8a:5e:8e:7f:02:06:95:86:db:ba:5c:
f1:b1:a4:27:bc:01:8e:07:bd:c1:7a:fb:8d:58:22:
47:44:44:49:9d:8f:2c:e0:ba:68:0c:ad:73:8c:34:
db:81:5f:a9:a5:1c:d8:c4:1d:4c:12:4b:ef:25:00:
7e:8c:8c:d9:97:88:f6:c4:4f:22:99:a6:03:bc:62:
31:e6:5c:15:b6:ad:c2:35:db:17:a8:bd:f9:8a:24:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:F7:5D:15:42:17:9C:B2:EA:D7:41:BF:6F:DE:3F:7B:5F:01:C2
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d5:ad:03:ea:f8:1b:0d:51:2a:75:2c:d3:56:f3:65:c4:5d:
5a:59:c9:fb:cc:8b:17:05:18:5b:03:88:49:7c:81:52:f7:0c:
83:38:73:35:7e:bd:82:32:49:9a:4e:20:81:ea:2f:83:5d:43:
89:20:27:3f:29:95:42:de:d2:d1:d2:56:3f:9b:7b:c3:83:7a:
46:74:3d:00:1b:38:7c:06:1c:6e:13:fd:a8:9d:7b:b9:42:e8:
91:17:91:0f:c5:85:74:e4:2b:de:47:2e:74:76:80:35:2d:98:
a9:e0:e1:d8:9f:dc:45:ab:47:5d:a6:de:83:87:88:94:0a:33:
09:26:82:85:e3:e1:1c:e6:a3:d2:07:7a:e1:29:69:ec:56:cf:
ec:33:b6:93:f8:b2:5f:a5:af:04:bf:b0:8c:a5:6a:d3:46:be:
10:de:ea:7a:25:77:68:08:58:6c:fa:5d:7c:fe:f8:9c:d0:62:
0f:c8:4b:35:80:ba:d1:20:4d:af:cf:c4:46:f9:99:80:96:9a:
4c:f9:da:31:23:88:24:74:38:62:b1:37:b1:e7:30:8c:d1:bd:
46:61:ac:2e:1c:e8:4f:2c:31:d8:ed:13:1b:4f:ef:8d:cf:47:
68:47:82:15:6f:ae:ca:d2:cf:4b:d3:6a:d3:c7:79:13:16:b3:
fb:77:69:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOypI5wepSFzfcWrxaRHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNDY2ODYwMDhhOGMxMDFlODRlYTg3ODMxOGFlNThlYjcx
Y2VjODIwHhcNMjYwMzI1MjMwMTIxWhcNMjYwMzI2MjMwMTIxWjAzMTEwLwYDVQQD
Eyg1NDg2Zjc1ZDE1NDIxNzljYjJlYWQ3NDFiZjZmZGUzZjdiNWYwMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaOjblNgbMOB43plpoxJJUND4jrO
rbRL7ab1hziHP5oXBb6vyMKkV+aAqOPjf3LWAGFr6kQ/CBGmyvDr04Q4t37pOM2B
8vJSwwqTOXqihW1O62qb8UkkLwQQbPwiiEmKnJRLJR5JEcNcFhOLIixrDP+JSRh/
O5BRSD21ftorDHeOAnIuTvbxRx91TwOhePfgAfFPrUcJZfrzuqslAfmsRfrP7TCu
hkp3il6OfwIGlYbbulzxsaQnvAGOB73BevuNWCJHRERJnY8s4LpoDK1zjDTbgV+p
pRzYxB1MEkvvJQB+jIzZl4j2xE8imaYDvGIx5lwVtq3CNdsXqL35iiSWjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSG910VQhecsurXQb9v3j97XwHCMB8GA1UdIwQY
MBaAFKtGaGAIqMEB6E6oeDGK5Y63HOyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmIt
ZjMzNjNjYmQ0MjRjLzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmItZjMzNjNjYmQ0MjRj
LzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtWtA+r4
Gw1RKnUs01bzZcRdWlnJ+8yLFwUYWwOISXyBUvcMgzhzNX69gjJJmk4ggeovg11D
iSAnPymVQt7S0dJWP5t7w4N6RnQ9ABs4fAYcbhP9qJ17uULokReRD8WFdOQr3kcu
dHaANS2YqeDh2J/cRatHXabeg4eIlAozCSaChePhHOaj0gd64Slp7FbP7DO2k/iy
X6WvBL+wjKVq00a+EN7qeiV3aAhYbPpdfP74nNBiD8hLNYC60SBNr8/ERvmZgJaa
TPnaMSOIJHQ4YrE3secwjNG9RmGsLhzoTywx2O0TG0/vjc9HaEeCFW+uytLPS9Nq
08d5Exaz+3dptw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:07 2026 by rpki-client