Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: QEDStAf2yZ/4SyZKEFgSLara4wzx+0GBRQdY9LcfM8c=
Subject key identifier: 31:0D:EE:CE:43:18:07:F0:CC:54:08:7C:1A:14:76:A3:88:24:B0:25
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 019D288464FCAF61F742772A50B6627D8411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 011E
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: YSFgX9GBidfIh+m8+nBUHl8QHyrJa0iWBStjMvK25gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:64:fc:af:61:f7:42:77:2a:50:b6:62:7d:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=310deece431807f0cc54087c1a1476a38824b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:3b:42:11:4e:b1:a5:d5:e6:34:b5:a5:a0:
d3:b4:5b:a3:c3:64:9c:cf:f2:13:10:89:0e:51:70:
b3:31:44:fa:f8:ed:f6:5a:27:81:bd:2e:25:cf:51:
6c:a6:ea:7e:c3:05:44:12:5f:05:64:e1:3c:bd:8b:
d4:61:b8:a6:d1:c4:57:fa:56:36:8a:18:4f:97:79:
45:59:8d:0b:71:6c:ea:b4:7b:27:0c:f3:75:08:7d:
4e:65:41:5a:9d:45:b2:ac:90:e9:a4:24:e2:5c:e0:
e1:d8:3b:91:11:5c:39:1c:93:1b:e4:cb:9f:47:34:
7c:c9:16:ce:95:91:43:6a:7c:cc:68:00:66:56:05:
f6:91:86:34:5d:f3:be:fd:1e:94:18:81:31:fd:47:
c1:5e:cf:2a:44:f8:9d:c3:93:11:aa:4e:46:a5:bc:
f4:6b:bf:bb:38:e3:80:0b:a4:c2:81:b8:1d:a3:9a:
ea:a3:ba:26:f1:af:79:1c:8a:28:5a:4f:3c:64:a7:
b1:a7:52:1d:3a:9a:0d:24:2f:07:83:11:31:16:8e:
cf:b0:2d:90:b2:2b:f4:4e:6a:31:ab:dc:70:db:8f:
95:2a:2d:12:ee:84:9c:f1:ed:7c:03:67:7d:07:3d:
e9:f4:91:b6:33:41:c5:2d:73:61:a0:7b:5e:7e:28:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:EE:CE:43:18:07:F0:CC:54:08:7C:1A:14:76:A3:88:24:B0:25
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7f:91:a5:3f:d2:fc:14:3e:31:14:5b:9f:c0:58:22:cf:f2:
cc:69:dc:83:35:86:5d:4a:84:39:cd:94:36:df:db:b1:38:a4:
61:e1:f3:3d:e0:41:e9:d6:c2:a5:ab:33:7a:24:b6:80:d2:0a:
ae:79:8f:11:90:1a:4d:95:19:bb:50:b6:73:80:68:3b:fb:9e:
33:9f:aa:70:51:d1:85:8e:7f:97:8c:21:fb:b0:5b:b8:28:63:
76:28:11:82:e7:b2:2f:7b:b4:35:7c:67:10:98:1f:6f:6f:73:
f7:80:87:43:1e:1c:5d:d2:f4:5a:6d:b7:18:54:42:b9:39:ee:
f3:0f:98:e2:e7:52:ac:33:a7:c7:4e:fd:66:32:35:76:a3:b6:
cc:71:89:e8:3a:3d:95:c8:13:08:4e:93:2d:bc:64:e4:b1:f8:
4d:08:2a:c8:94:f3:ad:d8:a0:87:b1:22:d0:81:86:e9:e4:74:
50:96:94:07:74:2d:a4:e5:08:04:9a:c9:ef:42:6c:43:a0:59:
78:dd:6f:0f:37:9b:ba:18:17:1c:1c:d9:a0:32:2b:88:80:e0:
cc:fc:a5:df:29:4b:b6:dc:0b:b8:64:41:60:cf:9e:d4:3d:1c:
fb:a4:09:f3:8f:a0:d0:e7:c7:8b:f8:e9:7f:af:74:5a:bc:fd:
a7:11:b7:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGT8r2H3QncqULZifYQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDQ1ODM5NTNhMDJiYzZhNjY5OWRlOTI3Y2Y0NTcwMDdm
MDU1MjgwHhcNMjYwMzI2MDUwMDU4WhcNMjYwMzI3MDUwMDU4WjAzMTEwLwYDVQQD
EygzMTBkZWVjZTQzMTgwN2YwY2M1NDA4N2MxYTE0NzZhMzg4MjRiMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ87QhFOsaXV5jS1paDTtFujw2Sc
z/ITEIkOUXCzMUT6+O32WieBvS4lz1Fspup+wwVEEl8FZOE8vYvUYbim0cRX+lY2
ihhPl3lFWY0LcWzqtHsnDPN1CH1OZUFanUWyrJDppCTiXODh2DuREVw5HJMb5Muf
RzR8yRbOlZFDanzMaABmVgX2kYY0XfO+/R6UGIEx/UfBXs8qRPidw5MRqk5Gpbz0
a7+7OOOAC6TCgbgdo5rqo7om8a95HIooWk88ZKexp1IdOpoNJC8HgxExFo7PsC2Q
siv0Tmoxq9xw24+VKi0S7oSc8e18A2d9Bz3p9JG2M0HFLXNhoHtefijrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEN7s5DGAfwzFQIfBoUdqOIJLAlMB8GA1UdIwQY
MBaAFKhEWDlToCvGpmmd6SfPRXAH8FUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMt
MTEzODEwYTlmY2FlLzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMtMTEzODEwYTlmY2Fl
LzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3+RpT/S
/BQ+MRRbn8BYIs/yzGncgzWGXUqEOc2UNt/bsTikYeHzPeBB6dbCpaszeiS2gNIK
rnmPEZAaTZUZu1C2c4BoO/ueM5+qcFHRhY5/l4wh+7BbuChjdigRgueyL3u0NXxn
EJgfb29z94CHQx4cXdL0Wm23GFRCuTnu8w+Y4udSrDOnx079ZjI1dqO2zHGJ6Do9
lcgTCE6TLbxk5LH4TQgqyJTzrdigh7Ei0IGG6eR0UJaUB3QtpOUIBJrJ70JsQ6BZ
eN1vDzebuhgXHBzZoDIriIDgzPyl3ylLttwLuGRBYM+e1D0c+6QJ84+g0OfHi/jp
f690Wrz9pxG3qQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:31 2026 by rpki-client