Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: /+X1Au32aLnJ/2dge/28VmFDlfXan2g3u5nZCIUAZKI=
Subject key identifier: 94:9D:14:24:E0:48:EC:20:C2:86:B9:BF:D1:DB:F6:40:FC:7B:14:15
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 019D273AA0B267E5F2ADB542EBCF90D4AD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 13B5
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: Ncdi86qG3HQ9DUgWZbEHaW9PcFU.asa (hash: fyniArHiC1WFFBjWeWSZsDgdpxc01uvZWE1DTfuzr84=)
2: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: VvFGyTKogNEtdPEJuJ8ZpraNepUmv8n76KLiWM70uLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a0:b2:67:e5:f2:ad:b5:42:eb:cf:90:d4:ad:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=949d1424e048ec20c286b9bfd1dbf640fc7b1415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:9b:7e:74:92:d1:6c:75:15:42:f1:20:a3:
7b:0c:93:df:0f:ea:40:0a:d8:55:dd:f4:18:17:3e:
1c:35:de:f3:15:9d:4d:ee:0b:d5:cb:cc:78:58:48:
bc:c4:e1:37:59:94:3e:25:19:2c:5a:02:08:33:e5:
e0:ed:bd:75:93:64:b7:bb:fa:a4:69:84:08:90:c1:
fb:86:ea:bf:9e:fa:a0:31:a1:de:44:20:7f:c5:a8:
e9:dc:57:37:85:3c:46:66:b5:76:bc:e0:09:72:78:
48:41:6a:86:a9:63:9a:e1:f3:04:68:1b:3f:be:f9:
c3:5f:62:5c:4d:63:27:3e:e5:d9:97:86:a8:c9:df:
47:db:2e:f0:e7:55:38:3b:33:aa:ee:b4:ca:80:38:
1e:60:22:46:01:f2:d4:b3:e4:db:67:3b:46:b1:0f:
a3:44:79:9e:cf:42:b3:a3:6a:cc:8c:02:e3:f1:3a:
6a:35:a0:61:71:16:90:4a:98:cf:b0:90:62:47:aa:
62:e0:37:5f:43:93:00:3c:02:8a:4f:ca:83:97:a6:
ae:20:bd:f7:08:2b:0a:e3:02:84:d8:17:97:92:23:
1f:60:a4:71:4f:db:3f:71:51:78:be:1f:d9:1b:7f:
8f:73:4a:5e:02:80:b7:fe:3c:1b:e5:ed:da:06:30:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:14:24:E0:48:EC:20:C2:86:B9:BF:D1:DB:F6:40:FC:7B:14:15
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b2:5a:11:51:2d:9d:54:92:0b:03:97:cb:28:ff:c2:36:11:
3a:d6:f5:78:b8:4a:35:9f:91:2e:a9:d2:f1:21:5a:f7:62:8f:
42:c3:31:8f:be:0c:36:cf:5f:8a:a5:86:eb:68:25:30:41:77:
80:33:1f:23:a5:b3:13:ff:d5:53:5a:b3:4c:6f:65:6c:23:04:
7a:79:e4:0b:11:87:30:0c:dc:4b:b1:50:e8:af:15:37:2c:80:
78:99:c8:a9:fc:c8:1c:37:7f:62:e8:35:e9:bc:a8:3a:2b:6c:
e6:25:fb:7d:89:3d:f2:5b:61:37:66:85:01:7f:83:4f:1b:ac:
9f:19:6a:54:1d:39:42:b7:3e:9a:ec:79:3e:71:89:76:88:a3:
97:be:5e:ad:74:c8:fd:cc:b1:c7:47:ac:41:2f:d7:64:61:f8:
4b:91:7c:66:d8:be:a1:f7:77:8a:32:d2:78:4f:29:b3:a4:9c:
b1:11:6d:1b:df:f8:f3:04:cc:ee:88:b8:70:f4:7f:30:fe:c6:
a4:08:a9:0c:b9:53:ee:35:ca:ed:54:42:30:08:15:44:ce:06:
d4:b8:cb:17:ee:13:57:7f:55:cb:95:fa:be:37:7c:76:2b:0d:
d1:87:2a:31:11:fe:6f:1b:59:95:51:65:8b:aa:de:6b:a6:9e:
2d:cf:d8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqCyZ+XyrbVC68+Q1K2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2E5NWQ2ZjkxYjY3NmI5ZDcxYWI4YWUxMTQxOTQxOGRl
M2MzMGUwHhcNMjYwMzI1MjMwMDQ2WhcNMjYwMzI2MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg5NDlkMTQyNGUwNDhlYzIwYzI4NmI5YmZkMWRiZjY0MGZjN2IxNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KbfnSS0Wx1FULxIKN7DJPfD+pA
CthV3fQYFz4cNd7zFZ1N7gvVy8x4WEi8xOE3WZQ+JRksWgIIM+Xg7b11k2S3u/qk
aYQIkMH7huq/nvqgMaHeRCB/xajp3Fc3hTxGZrV2vOAJcnhIQWqGqWOa4fMEaBs/
vvnDX2JcTWMnPuXZl4aoyd9H2y7w51U4OzOq7rTKgDgeYCJGAfLUs+TbZztGsQ+j
RHmez0Kzo2rMjALj8TpqNaBhcRaQSpjPsJBiR6pi4DdfQ5MAPAKKT8qDl6auIL33
CCsK4wKE2BeXkiMfYKRxT9s/cVF4vh/ZG3+Pc0peAoC3/jwb5e3aBjAOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSdFCTgSOwgwoa5v9Hb9kD8exQVMB8GA1UdIwQY
MBaAFEJ6ldb5G2drnXGriuEUGUGN48MOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NGY5OTktZDI2Zi00NjA2LWEzMjYt
Y2U3YTUxYWEzMzE0LzEvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NGY5OTktZDI2Zi00NjA2LWEzMjYtY2U3YTUxYWEzMzE0
LzEvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLJaEVEt
nVSSCwOXyyj/wjYROtb1eLhKNZ+RLqnS8SFa92KPQsMxj74MNs9fiqWG62glMEF3
gDMfI6WzE//VU1qzTG9lbCMEennkCxGHMAzcS7FQ6K8VNyyAeJnIqfzIHDd/Yug1
6byoOits5iX7fYk98lthN2aFAX+DTxusnxlqVB05Qrc+mux5PnGJdoijl75erXTI
/cyxx0esQS/XZGH4S5F8Zti+ofd3ijLSeE8ps6ScsRFtG9/48wTM7oi4cPR/MP7G
pAipDLlT7jXK7VRCMAgVRM4G1LjLF+4TV39Vy5X6vjd8disN0YcqMRH+bxtZlVFl
i6rea6aeLc/YBA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:23 2026 by rpki-client