Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: O7CsaKHIwMpa3Nl9xHzO1Mg7JCef+u/R1nHdqEPpSk0=
Subject key identifier: 3E:25:1B:41:BB:DC:A7:C1:B1:88:50:B8:2F:B1:1B:28:D2:FB:CA:03
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019D2A3C3ADF393121FC5F4A55A99451FAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 156F
Signing time: Thu 26 Mar 2026 13:01:23 +0000
Manifest this update: Thu 26 Mar 2026 13:01:23 +0000
Manifest next update: Fri 27 Mar 2026 13:01:23 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: zZcnFpq/gQ68YEtm6+HgZWaExdvsDnQyW4LZeVPDDYc=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:3a:df:39:31:21:fc:5f:4a:55:a9:94:51:fa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Mar 26 13:01:23 2026 GMT
Not After : Mar 27 13:01:23 2026 GMT
Subject: CN=3e251b41bbdca7c1b18850b82fb11b28d2fbca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:dd:b8:25:e7:17:31:3f:50:0c:52:9d:41:
9d:2b:73:25:42:dc:d7:e1:81:b8:d6:ea:c7:c7:dc:
e0:38:70:76:7d:d1:fe:00:10:49:71:ec:3c:51:ce:
27:1b:50:08:66:a7:7e:31:c7:1d:b6:fa:59:51:97:
82:81:f4:46:2b:18:f1:e3:64:98:c1:6f:1f:6c:26:
58:ac:18:bc:58:58:32:6b:98:8b:fc:31:87:65:4d:
b2:d2:db:0a:a3:ef:84:28:23:77:19:ce:77:d0:d2:
55:8e:6d:1a:fa:c3:42:29:6b:3f:87:04:f5:05:d7:
80:79:5c:b7:7c:7d:c3:d7:ce:4b:83:ab:59:1f:9e:
e6:9e:a8:9e:9e:74:83:3b:6c:65:bf:66:d4:78:c0:
ef:47:c5:9a:b9:e2:11:e1:05:c9:44:f6:85:f3:f5:
dd:f2:98:0d:77:a9:2f:16:ce:ef:99:ed:04:dc:42:
44:8c:86:a7:b5:da:8f:27:33:0f:c0:f8:43:26:7e:
d0:eb:90:cb:1f:98:ac:81:27:0a:46:54:35:c4:13:
50:7f:85:3a:d7:dd:01:ac:3d:e6:3e:d0:2f:b9:97:
77:30:f4:ac:25:65:6e:55:32:f6:1f:6d:6d:ef:2a:
f1:6d:8b:1b:f4:44:2f:ce:f9:70:eb:42:a9:5e:60:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:25:1B:41:BB:DC:A7:C1:B1:88:50:B8:2F:B1:1B:28:D2:FB:CA:03
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:67:39:18:f6:a1:ef:a5:50:aa:b5:da:fe:52:d9:cf:4e:
54:36:19:d4:25:12:60:fd:9a:1c:42:f2:9d:2d:e8:a9:b1:3c:
0a:ba:24:72:86:3f:de:20:51:09:cf:b9:97:23:e2:d0:b2:98:
e3:6d:6c:55:b4:87:7c:ad:e3:1f:64:3d:d9:d1:db:57:ce:7b:
bb:fa:8c:1d:d1:5c:3c:c2:94:e7:80:4f:94:9c:17:18:fc:8c:
ac:07:1e:91:48:10:2c:96:dc:85:db:82:ed:77:4e:f9:f3:aa:
b7:68:0d:99:74:41:bd:10:e5:aa:f2:a7:cc:04:a3:37:1b:e7:
ea:ae:28:dc:db:e3:ea:4b:53:70:b9:90:2f:86:30:2f:20:bb:
44:1e:f5:57:09:35:dd:e8:46:0b:d9:e3:ee:36:5a:8b:8d:48:
c1:72:5e:89:ed:11:8a:ee:0d:96:f3:83:de:4b:b5:e1:07:11:
ec:43:15:b5:87:56:fc:32:67:83:48:88:c7:b2:ad:ad:50:3f:
cf:1f:e5:2a:cc:6a:1c:f4:69:7e:6a:df:19:eb:95:a6:12:43:
77:9e:ad:7b:35:54:ea:16:62:d0:ed:2f:38:38:3e:44:ad:48:
a4:5c:b5:e5:0f:99:1b:bb:bf:6b:5e:71:11:80:a4:24:b0:9f:
7c:3c:ff:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPDrfOTEh/F9KVamUUfrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDNlM2Y3MDI0NTg5Yjk2MmFkZTgxY2Y0NDU2MzA2ZjRk
MzVlNjgwHhcNMjYwMzI2MTMwMTIzWhcNMjYwMzI3MTMwMTIzWjAzMTEwLwYDVQQD
EygzZTI1MWI0MWJiZGNhN2MxYjE4ODUwYjgyZmIxMWIyOGQyZmJjYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN7duCXnFzE/UAxSnUGdK3MlQtzX
4YG41urHx9zgOHB2fdH+ABBJcew8Uc4nG1AIZqd+MccdtvpZUZeCgfRGKxjx42SY
wW8fbCZYrBi8WFgya5iL/DGHZU2y0tsKo++EKCN3Gc530NJVjm0a+sNCKWs/hwT1
BdeAeVy3fH3D185Lg6tZH57mnqiennSDO2xlv2bUeMDvR8WaueIR4QXJRPaF8/Xd
8pgNd6kvFs7vme0E3EJEjIantdqPJzMPwPhDJn7Q65DLH5isgScKRlQ1xBNQf4U6
190BrD3mPtAvuZd3MPSsJWVuVTL2H21t7yrxbYsb9EQvzvlw60KpXmAbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4lG0G73KfBsYhQuC+xGyjS+8oDMB8GA1UdIwQY
MBaAFEBD4/cCRYm5Yq3oHPRFYwb0015oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUt
OGVmODg4N2UyZDFjLzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUtOGVmODg4N2UyZDFj
LzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZZnORj2
oe+lUKq12v5S2c9OVDYZ1CUSYP2aHELynS3oqbE8CrokcoY/3iBRCc+5lyPi0LKY
421sVbSHfK3jH2Q92dHbV857u/qMHdFcPMKU54BPlJwXGPyMrAcekUgQLJbchduC
7XdO+fOqt2gNmXRBvRDlqvKnzASjNxvn6q4o3Nvj6ktTcLmQL4YwLyC7RB71Vwk1
3ehGC9nj7jZai41IwXJeie0Riu4NlvOD3ku14QcR7EMVtYdW/DJng0iIx7KtrVA/
zx/lKsxqHPRpfmrfGeuVphJDd56tezVU6hZi0O0vODg+RK1IpFy15Q+ZG7u/a15x
EYCkJLCffDz/rQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:08:40 2026 by rpki-client