Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: 2UtlgX9ZukW0fV32E9HGzoCGrrGpIE4UyaTwLcwdxYs=
Subject key identifier: 7F:15:F6:DC:DB:47:60:E6:6E:0A:83:F5:D9:C5:99:73:45:3C:92:49
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 019D2AA9A62CDAF10799D05E404BC455F56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0E5C
Signing time: Thu 26 Mar 2026 15:00:54 +0000
Manifest this update: Thu 26 Mar 2026 15:00:54 +0000
Manifest next update: Fri 27 Mar 2026 15:00:54 +0000
Files and hashes: 1: 2UrjK_FlsYX5StVCQ2WmRFfnp6U.roa (hash: jZ7AryuTGRinL/OIX+iNfd8KYT9tdCnaqxvwfiWTks8=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: RLPfOMCSKIVvkQc2viACaDemnxfz9y7gr5YpibDNCcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:a6:2c:da:f1:07:99:d0:5e:40:4b:c4:55:f5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Mar 26 15:00:54 2026 GMT
Not After : Mar 27 15:00:54 2026 GMT
Subject: CN=7f15f6dcdb4760e66e0a83f5d9c59973453c9249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:00:c2:01:1b:53:ce:77:86:fc:a1:1d:0e:
80:cc:1f:e3:7d:9b:da:48:c9:0b:6a:e4:f4:29:a6:
13:82:33:e1:ca:f7:8b:c1:3f:5f:34:4e:32:9e:3d:
92:0b:8e:e0:e2:19:74:32:fd:cf:91:da:d4:63:b6:
93:18:eb:ed:dd:30:35:74:90:b7:2f:19:1e:49:2b:
f4:2a:7b:ab:e3:56:54:ab:4e:cf:03:71:f5:27:63:
4b:81:29:dc:27:b4:11:d6:88:98:fd:21:5c:37:93:
36:c2:d4:99:89:ec:0f:35:f4:24:93:5d:f8:8d:0e:
88:be:73:f5:27:a8:fe:3a:c9:5b:c2:26:b6:26:d4:
c0:bf:76:a0:34:03:64:0a:ed:ce:73:45:d6:ec:f0:
b5:3e:5b:bc:da:61:75:03:00:cc:6c:d7:41:5e:63:
3a:7f:8d:55:f9:df:16:88:bd:c4:56:36:38:94:5b:
db:61:03:30:17:89:3c:8c:6c:46:85:22:5b:f1:4b:
50:9b:cd:c8:89:8c:36:5c:bd:2c:b1:93:da:a7:f3:
ea:22:d2:a2:43:42:06:a3:db:3c:cf:56:1e:08:47:
46:0a:e0:61:ed:84:f2:90:91:e4:b4:71:03:bf:1c:
c2:7b:44:7a:b8:e1:a6:99:a8:79:33:8f:79:df:1a:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:F6:DC:DB:47:60:E6:6E:0A:83:F5:D9:C5:99:73:45:3C:92:49
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bc:ad:67:88:ca:d9:64:4c:b9:4e:c9:60:a3:3b:64:f8:3a:
38:db:8d:81:2e:4b:f0:f5:83:55:eb:6a:58:4a:eb:be:60:47:
9e:e5:9b:5e:ea:f2:d5:92:af:f2:7d:4c:99:15:d1:93:4e:dd:
44:74:77:a8:a6:b2:b7:ab:d9:e8:e1:dc:55:c8:12:fb:b4:b3:
2c:10:99:4b:52:d2:6a:fd:42:ad:e9:7d:5a:66:ec:97:45:16:
11:1e:4a:ba:fa:85:86:51:3c:a9:8c:d4:57:fe:82:6b:5d:9a:
8c:1d:01:68:40:6d:43:57:bb:37:89:76:56:37:94:10:6b:08:
6d:6f:00:c5:16:86:17:4e:4e:00:dc:c8:99:d5:2b:9e:07:44:
2f:c1:27:14:ba:03:ec:f6:8b:56:f8:71:2a:b0:e0:fa:eb:d3:
8f:e9:fa:59:b9:6f:c2:92:e4:68:ef:5b:1f:88:df:2e:e9:41:
a9:c9:ee:0d:c9:18:54:52:c0:be:20:f0:38:c5:86:5b:a9:c0:
0b:9b:c5:40:53:eb:65:f5:85:9b:36:80:ed:85:65:1e:d7:e9:
0e:39:f2:da:b7:15:25:0c:cf:83:43:43:b9:32:a8:73:91:08:
b8:45:af:35:56:d3:79:bd:44:b3:d8:32:36:fb:78:18:41:ae:
f0:4d:ab:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqaYs2vEHmdBeQEvEVfVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmU2ZDAxMDI5OThjMzg2ZjhkODU2ZmE1ZjkxZDdhZDNh
YjRkNzcwHhcNMjYwMzI2MTUwMDU0WhcNMjYwMzI3MTUwMDU0WjAzMTEwLwYDVQQD
Eyg3ZjE1ZjZkY2RiNDc2MGU2NmUwYTgzZjVkOWM1OTk3MzQ1M2M5MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYYAwgEbU853hvyhHQ6AzB/jfZva
SMkLauT0KaYTgjPhyveLwT9fNE4ynj2SC47g4hl0Mv3PkdrUY7aTGOvt3TA1dJC3
LxkeSSv0Knur41ZUq07PA3H1J2NLgSncJ7QR1oiY/SFcN5M2wtSZiewPNfQkk134
jQ6IvnP1J6j+Oslbwia2JtTAv3agNANkCu3Oc0XW7PC1Plu82mF1AwDMbNdBXmM6
f41V+d8WiL3EVjY4lFvbYQMwF4k8jGxGhSJb8UtQm83IiYw2XL0ssZPap/PqItKi
Q0IGo9s8z1YeCEdGCuBh7YTykJHktHEDvxzCe0R6uOGmmah5M4953xqi4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8V9tzbR2DmbgqD9dnFmXNFPJJJMB8GA1UdIwQY
MBaAFEH+bQECmYw4b42Fb6X5HXrTq013MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMmZlMDMtYTJkNC00YWI0LTk0YmEt
OGNiNmQwZTVjY2UyLzEvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xMmZlMDMtYTJkNC00YWI0LTk0YmEtOGNiNmQwZTVjY2Uy
LzEvUWY1dEFRS1pqRGh2allWdnBma2RldE9yVFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrytZ4jK
2WRMuU7JYKM7ZPg6ONuNgS5L8PWDVetqWErrvmBHnuWbXury1ZKv8n1MmRXRk07d
RHR3qKayt6vZ6OHcVcgS+7SzLBCZS1LSav1Crel9Wmbsl0UWER5KuvqFhlE8qYzU
V/6Ca12ajB0BaEBtQ1e7N4l2VjeUEGsIbW8AxRaGF05OANzImdUrngdEL8EnFLoD
7PaLVvhxKrDg+uvTj+n6WblvwpLkaO9bH4jfLulBqcnuDckYVFLAviDwOMWGW6nA
C5vFQFPrZfWFmzaA7YVlHtfpDjny2rcVJQzPg0NDuTKoc5EIuEWvNVbTeb1Es9gy
Nvt4GEGu8E2rjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:39 2026 by rpki-client