
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier: RikvzMWClYMnD4OxTn2h8xNGoQ9iHrU918v4PBJN5K4=
Subject key identifier: AB:6C:09:1D:4A:12:A6:06:66:8B:B7:6A:E6:89:BC:E3:D9:AF:DA:38
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial: 019D2AA98BD4754A79AE4FC64B36EB2C6A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number: 075E
Signing time: Thu 26 Mar 2026 15:00:47 +0000
Manifest this update: Thu 26 Mar 2026 15:00:47 +0000
Manifest next update: Fri 27 Mar 2026 15:00:47 +0000
Files and hashes: 1: bin4sOPD5OKGfACXCfj3DQEIKBY.roa (hash: VnhSf12ZJGOlUh0T6+7Mdxo6I0H2lB8E2bDRpPDL8BU=)
2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: IN+hiNGktGwinP7wKe5iAVmyIXqu4EiOnfkcVcyQDq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:8b:d4:75:4a:79:ae:4f:c6:4b:36:eb:2c:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Validity
Not Before: Mar 26 15:00:47 2026 GMT
Not After : Mar 27 15:00:47 2026 GMT
Subject: CN=ab6c091d4a12a606668bb76ae689bce3d9afda38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:1f:78:57:e5:c2:3c:9c:10:f2:e8:51:2f:
e7:ab:34:d8:bd:f0:a0:c8:da:86:70:ac:50:8a:1e:
34:15:7f:04:a0:f2:8a:34:a0:55:97:1f:c2:55:18:
aa:24:88:b2:ac:b8:9f:75:7e:61:54:e9:a9:2f:b2:
5e:32:52:30:50:bf:90:7d:de:d5:ac:17:64:17:f2:
da:72:d7:c3:a3:c9:03:99:41:b4:48:8e:be:1e:cf:
30:66:25:d7:9d:c1:3a:0b:bd:0c:42:28:0c:99:33:
5e:08:7f:cb:02:71:e6:1d:94:4f:b1:f0:bd:a9:e9:
25:b6:c3:26:f3:fa:d9:15:7d:c1:87:2b:6e:92:d0:
4e:3c:19:a5:c7:cf:81:c4:82:3a:1c:7a:04:f4:f6:
57:b5:4f:74:75:63:17:91:ee:fb:7f:08:b1:0d:19:
4a:61:60:d2:06:7c:10:31:b3:ed:e1:36:24:60:27:
f6:19:f3:03:27:29:7b:4c:3f:f2:e9:d6:c5:72:64:
8f:c7:ef:3c:2f:2d:81:91:49:7f:c1:14:26:00:2f:
95:1f:82:a0:45:63:9c:15:56:55:cb:4e:e5:10:cb:
3b:9d:42:24:a7:7f:02:81:49:26:08:8a:32:5e:82:
3f:e1:0b:65:ca:ec:b1:e2:23:2b:4d:42:f0:3d:45:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:09:1D:4A:12:A6:06:66:8B:B7:6A:E6:89:BC:E3:D9:AF:DA:38
X509v3 Authority Key Identifier:
keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:18:3c:05:43:e4:97:ba:6e:06:52:ba:57:7a:60:36:43:
3b:e4:47:36:0a:8e:c2:20:30:3e:37:08:9f:bf:a3:55:b8:f4:
43:d3:b8:fd:5a:76:0f:ce:ba:c9:13:16:f0:ce:de:b9:4a:79:
6e:8e:e2:54:37:95:52:6e:c4:55:10:cf:12:0a:ab:10:ea:b6:
df:b5:ef:10:80:b8:de:2a:97:80:40:41:2c:4a:88:f1:72:fa:
97:bc:ea:35:b8:75:bd:cd:1c:0a:f5:21:6b:29:e2:cd:90:10:
87:1d:82:de:ef:23:e2:bd:03:a4:8f:cb:5e:e5:3e:20:43:2c:
f3:fe:11:26:39:59:eb:bf:c4:46:0d:74:50:7a:fb:60:20:f7:
a4:7c:ea:ec:39:47:01:34:6e:cf:b5:bf:69:c9:17:77:5e:ad:
36:9a:4f:fb:3c:e2:a0:ab:57:55:60:ce:a2:df:3f:d1:0a:cf:
32:18:19:68:9d:b7:de:28:6f:b5:95:00:ce:1f:9b:c6:7d:b0:
3a:22:5e:b6:91:db:93:2c:fb:f8:5d:d8:65:59:c6:3f:c9:53:
ab:3e:ba:9e:09:2f:ff:d4:62:29:f9:92:ad:ab:51:6b:50:8e:
18:ac:e7:a5:e7:63:92:96:df:4a:be:4e:cb:65:6c:a5:b1:27:
6c:dd:83:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqYvUdUp5rk/GSzbrLGpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODYzMjY3YjViNzNkYjA3YzgwZTc0ZDcxNWI2NzM2ZDRm
YmE5ZmIwHhcNMjYwMzI2MTUwMDQ3WhcNMjYwMzI3MTUwMDQ3WjAzMTEwLwYDVQQD
EyhhYjZjMDkxZDRhMTJhNjA2NjY4YmI3NmFlNjg5YmNlM2Q5YWZkYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDQfeFflwjycEPLoUS/nqzTYvfCg
yNqGcKxQih40FX8EoPKKNKBVlx/CVRiqJIiyrLifdX5hVOmpL7JeMlIwUL+Qfd7V
rBdkF/LactfDo8kDmUG0SI6+Hs8wZiXXncE6C70MQigMmTNeCH/LAnHmHZRPsfC9
qekltsMm8/rZFX3BhytuktBOPBmlx8+BxII6HHoE9PZXtU90dWMXke77fwixDRlK
YWDSBnwQMbPt4TYkYCf2GfMDJyl7TD/y6dbFcmSPx+88Ly2BkUl/wRQmAC+VH4Kg
RWOcFVZVy07lEMs7nUIkp38CgUkmCIoyXoI/4Qtlyuyx4iMrTULwPUWRTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtsCR1KEqYGZou3auaJvOPZr9o4MB8GA1UdIwQY
MBaAFKuGMme1tz2wfIDnTXFbZzbU+6n7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jNWJiNjEtYTYxNy00MTRhLWEzNGMt
YTVlNDM1YzE5MGUzLzEvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jNWJiNjEtYTYxNy00MTRhLWEzNGMtYTVlNDM1YzE5MGUz
LzEvcTRZeVo3VzNQYkI4Z09kTmNWdG5OdFQ3cWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcsYPAVD
5Je6bgZSuld6YDZDO+RHNgqOwiAwPjcIn7+jVbj0Q9O4/Vp2D866yRMW8M7euUp5
bo7iVDeVUm7EVRDPEgqrEOq237XvEIC43iqXgEBBLEqI8XL6l7zqNbh1vc0cCvUh
aynizZAQhx2C3u8j4r0DpI/LXuU+IEMs8/4RJjlZ67/ERg10UHr7YCD3pHzq7DlH
ATRuz7W/ackXd16tNppP+zzioKtXVWDOot8/0QrPMhgZaJ233ihvtZUAzh+bxn2w
OiJetpHbkyz7+F3YZVnGP8lTqz66ngkv/9RiKfmSratRa1COGKznpedjkpbfSr5O
y2VspbEnbN2DOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:31 2026 by rpki-client