Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: e3JwTotaJP/uHsVJ35O0xzHxUQBVE5fQR5GKcXKXzH0=
Subject key identifier: A7:20:C0:24:84:54:4D:57:41:DB:C7:8C:5E:A9:BC:E8:B5:E6:2C:9E
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019D2BBC610E1E4525D47C27520A09A69CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0A3B
Signing time: Thu 26 Mar 2026 20:00:59 +0000
Manifest this update: Thu 26 Mar 2026 20:00:59 +0000
Manifest next update: Fri 27 Mar 2026 20:00:59 +0000
Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=)
2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: 9xiQfwoyAfRP5tnxwbc1/Y/U8UB0dvf/XHB1c3peMI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:61:0e:1e:45:25:d4:7c:27:52:0a:09:a6:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Mar 26 20:00:59 2026 GMT
Not After : Mar 27 20:00:59 2026 GMT
Subject: CN=a720c02484544d5741dbc78c5ea9bce8b5e62c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:a6:bd:4f:5d:e1:1c:64:10:aa:7a:dc:ae:
10:33:02:0d:8b:7c:71:48:9f:83:72:36:22:7c:ce:
a5:39:17:d1:11:ec:c2:e5:af:d8:98:7e:a1:c8:0f:
8d:38:06:3d:f4:af:ff:ff:d7:0a:57:eb:59:7a:4c:
54:d2:f0:47:30:b0:af:5d:58:46:78:0e:b1:aa:f2:
8c:98:d1:93:27:5b:a5:b2:a8:49:42:38:15:6e:b4:
c3:88:4a:47:61:79:a1:e1:83:5e:02:93:f9:79:6a:
41:b0:5e:22:ef:04:97:a2:81:df:0a:25:59:63:71:
fa:58:3b:71:d4:b4:9d:b8:60:14:9f:c1:c2:38:53:
41:a0:3c:e1:cf:a6:a9:70:27:57:98:38:22:8d:4e:
70:7b:ff:f8:b8:a6:f7:50:3e:2b:2e:89:75:b2:c5:
ad:19:c8:63:fd:c9:a9:d8:ae:06:e2:55:58:68:5c:
10:4e:34:53:5c:92:65:98:dc:ae:f2:b1:d6:b2:9f:
45:0b:7f:79:e7:51:7d:9e:1a:c5:79:f7:b6:11:d7:
e0:dd:2f:2e:23:1e:78:6a:f5:d7:b0:52:4a:6e:b1:
8e:2a:34:be:ef:52:02:03:2c:99:53:4a:15:1b:1b:
64:1c:3d:14:a9:de:26:a8:40:56:90:1a:67:47:13:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:20:C0:24:84:54:4D:57:41:DB:C7:8C:5E:A9:BC:E8:B5:E6:2C:9E
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0b:34:a5:3a:78:6b:07:77:cf:0a:ea:f5:76:76:6b:5a:eb:
ef:62:40:1f:38:1d:62:67:d5:25:7c:d0:fe:1f:eb:43:2c:22:
d7:03:38:21:cf:37:a1:9b:db:81:c0:d8:75:16:77:9f:ed:5f:
a9:1a:60:bb:fa:34:4f:b2:b8:e2:0b:44:de:53:42:1c:be:c3:
62:e6:ab:7a:d6:c5:40:b7:d7:57:08:6a:b3:64:41:8e:f6:32:
55:ea:16:c7:46:66:e1:04:79:d7:58:44:80:ec:30:5d:97:95:
3b:a0:4f:b9:32:5e:cc:54:30:67:f4:72:99:83:af:f4:8b:eb:
c3:26:b0:40:e7:2c:e2:8f:d8:57:da:b1:d2:ca:a1:30:b2:c7:
c6:d0:56:45:bf:b9:d5:e6:54:65:f4:07:10:03:f9:03:8e:7d:
b0:24:76:c1:e2:a3:48:8b:97:b5:ab:70:e4:97:ee:66:99:17:
55:50:c3:f0:40:24:77:0d:51:d4:69:38:b9:2f:f7:3b:40:33:
c6:2f:a5:63:e0:4e:75:f5:37:d0:a8:59:c0:c2:d2:a4:c5:62:
c0:e6:9b:96:58:cc:65:d4:c5:3a:c8:67:96:d1:dd:98:d0:15:
f8:d4:83:8e:97:38:8e:76:c0:52:6c:bd:8e:db:cc:b3:1f:0a:
cc:11:9d:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rvGEOHkUl1HwnUgoJppz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0
YWUyOWQwHhcNMjYwMzI2MjAwMDU5WhcNMjYwMzI3MjAwMDU5WjAzMTEwLwYDVQQD
EyhhNzIwYzAyNDg0NTQ0ZDU3NDFkYmM3OGM1ZWE5YmNlOGI1ZTYyYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8emmvU9d4RxkEKp63K4QMwINi3xx
SJ+DcjYifM6lORfREezC5a/YmH6hyA+NOAY99K///9cKV+tZekxU0vBHMLCvXVhG
eA6xqvKMmNGTJ1ulsqhJQjgVbrTDiEpHYXmh4YNeApP5eWpBsF4i7wSXooHfCiVZ
Y3H6WDtx1LSduGAUn8HCOFNBoDzhz6apcCdXmDgijU5we//4uKb3UD4rLol1ssWt
Gchj/cmp2K4G4lVYaFwQTjRTXJJlmNyu8rHWsp9FC39551F9nhrFefe2Edfg3S8u
Ix54avXXsFJKbrGOKjS+71ICAyyZU0oVGxtkHD0Uqd4mqEBWkBpnRxMkUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcgwCSEVE1XQdvHjF6pvOi15iyeMB8GA1UdIwQY
MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt
ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0
LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgs0pTp4
awd3zwrq9XZ2a1rr72JAHzgdYmfVJXzQ/h/rQywi1wM4Ic83oZvbgcDYdRZ3n+1f
qRpgu/o0T7K44gtE3lNCHL7DYuaretbFQLfXVwhqs2RBjvYyVeoWx0Zm4QR511hE
gOwwXZeVO6BPuTJezFQwZ/RymYOv9IvrwyawQOcs4o/YV9qx0sqhMLLHxtBWRb+5
1eZUZfQHEAP5A459sCR2weKjSIuXtatw5JfuZpkXVVDD8EAkdw1R1Gk4uS/3O0Az
xi+lY+BOdfU30KhZwMLSpMViwOablljMZdTFOshnltHdmNAV+NSDjpc4jnbAUmy9
jtvMsx8KzBGd2w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:14 2026 by rpki-client