Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
File: Q4T2-m3sztVXioWlHgvWVwHqNOw.mft (raw, json)
Hash identifier: zOwkWyEFjQTr7hgnzb08MHjrCtOcMCaUYOBdi7NEItE=
Subject key identifier: 26:74:C1:95:F4:5E:4E:C2:2D:E0:F6:35:67:27:34:E9:77:78:E7:96
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 019D2884AF1E0940E8A1F9B506B8109B6ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
Manifest number: 189B
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: GlqGr2JXY3PhL5VUlM1NVcQhR0w.roa (hash: eNE9wH9uFmshNKZCXrztw6ppTkQy/INcRXUojDA/i0Q=)
2: MNCcfOf0YS36WqFOiIyVG7kT7lw.roa (hash: xDxtOXtE08yNKWuVaze/oNgNsHgsu08VrPvfwX+Etss=)
3: Q4T2-m3sztVXioWlHgvWVwHqNOw.crl (hash: GYA8TJfO8p4W3duICp0t9VjbpRT42FVOECTfDuScNV4=)
4: WjEJKBNSHVEcN3ymO9d7rBHNhsg.roa (hash: /ukNM+uY+q4nZGfneifUiM0pEWc8ClpbPhjLj7YvUSQ=)
5: ZkpkKq6oEr-_I6JVpG2CjygiNpU.roa (hash: iZ1/Xaqf4kk2t//5gAR8BRoA23b+RGLpyfieDXD6saI=)
6: fh7S3k35orygy_NxNIqp6F0-sJI.roa (hash: XfQHhVDUDcNs2QAWWCjGzgrFd34jfifMCK0Ay/ulRf8=)
7: uNc9xxeMsmhjoPp_AoWS-X6p82U.roa (hash: Ic5jIOaYkijIZKE1wsb+bGe4vb/8GZ2qRJh6Qu5nzIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:af:1e:09:40:e8:a1:f9:b5:06:b8:10:9b:6e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=2674c195f45e4ec22de0f635672734e97778e796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:a3:00:1a:77:d1:2a:20:be:12:b8:50:9c:
20:74:25:63:32:ef:02:97:20:7e:4d:36:7a:68:40:
c7:40:d5:32:8a:20:68:d3:1b:13:48:66:3b:c6:99:
fa:e2:01:68:89:48:26:41:07:f3:7e:fb:c7:a0:16:
0c:58:44:33:44:1f:dd:14:1f:11:cc:c2:10:bf:05:
8a:3f:86:61:4e:3b:8f:01:5a:05:bd:3b:23:7f:1f:
51:29:47:f9:e7:dd:0a:60:bf:c3:ee:2c:16:e6:f9:
fd:ab:c0:df:d5:5a:ed:e2:33:49:b5:23:12:2a:12:
90:fe:66:8e:75:db:6f:a3:7e:64:0f:98:f6:c1:31:
83:b1:c8:48:94:b9:92:d1:4b:cf:e2:70:fc:c4:d8:
9f:7b:51:ac:7a:15:cc:44:48:5e:c0:94:10:9f:90:
fa:8f:cb:73:c6:49:6b:c8:82:bf:c2:28:5c:12:ae:
f6:27:df:09:ad:9a:5d:83:b4:a7:40:19:7d:01:a7:
c6:0f:4c:b5:dc:c1:1c:be:7e:47:83:24:24:86:a1:
4b:86:14:03:61:25:dd:3c:47:63:34:13:ef:f9:5c:
e6:75:24:90:3e:ff:1a:79:1a:0f:b2:86:3d:01:52:
5a:d1:40:b1:e9:ec:23:8b:3b:57:e4:eb:1e:8e:ad:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:74:C1:95:F4:5E:4E:C2:2D:E0:F6:35:67:27:34:E9:77:78:E7:96
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3e:7f:39:e0:83:61:93:6d:8b:9f:d0:93:b5:74:79:05:0c:
98:95:79:27:1d:2c:e8:3f:6d:88:54:e6:51:a3:9c:c2:fc:fe:
49:fd:9d:40:2e:50:09:2a:81:a1:54:8d:2c:d8:1a:f6:e2:5e:
21:0b:41:06:c9:c7:4c:f3:1b:60:aa:e3:9d:e7:10:5f:6c:51:
db:48:2e:40:59:12:df:7f:a8:00:8a:91:39:89:2e:a9:85:11:
71:7c:f6:7a:a7:6d:e7:b1:df:3e:b4:ed:54:94:44:c0:a7:26:
37:18:43:ad:8c:e3:07:92:3d:22:bf:69:9c:7e:b3:1e:75:98:
ce:05:a8:fa:23:7a:97:3c:ef:bc:d1:e0:1e:2e:5a:c8:7a:d3:
e7:9d:0c:bb:c0:2c:14:62:56:99:6f:f4:01:e6:1f:ef:f8:2e:
bc:4e:07:85:f4:c7:a9:8d:b9:24:72:e9:57:ed:76:a5:9a:ef:
9a:fe:21:58:73:76:b2:62:a6:35:07:1b:fb:09:c0:24:ca:68:
a1:81:ab:4f:04:bd:6b:9d:32:a3:e4:52:37:59:f4:9e:43:3f:
8a:81:40:89:c6:e4:57:bb:49:c2:ff:1d:95:12:15:08:67:11:
40:b5:be:d9:ac:01:5a:23:fe:f0:78:ab:1a:11:4a:65:33:4d:
d1:55:49:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohK8eCUDoofm1BrgQm27YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl
YTM0ZWMwHhcNMjYwMzI2MDUwMTE3WhcNMjYwMzI3MDUwMTE3WjAzMTEwLwYDVQQD
EygyNjc0YzE5NWY0NWU0ZWMyMmRlMGY2MzU2NzI3MzRlOTc3NzhlNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHqjABp30SogvhK4UJwgdCVjMu8C
lyB+TTZ6aEDHQNUyiiBo0xsTSGY7xpn64gFoiUgmQQfzfvvHoBYMWEQzRB/dFB8R
zMIQvwWKP4ZhTjuPAVoFvTsjfx9RKUf5590KYL/D7iwW5vn9q8Df1Vrt4jNJtSMS
KhKQ/maOddtvo35kD5j2wTGDschIlLmS0UvP4nD8xNife1GsehXMREhewJQQn5D6
j8tzxklryIK/wihcEq72J98JrZpdg7SnQBl9AafGD0y13MEcvn5HgyQkhqFLhhQD
YSXdPEdjNBPv+VzmdSSQPv8aeRoPsoY9AVJa0UCx6ewjiztX5Osejq1xywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ0wZX0Xk7CLeD2NWcnNOl3eOeWMB8GA1UdIwQY
MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOD5/OeCD
YZNti5/Qk7V0eQUMmJV5Jx0s6D9tiFTmUaOcwvz+Sf2dQC5QCSqBoVSNLNga9uJe
IQtBBsnHTPMbYKrjnecQX2xR20guQFkS33+oAIqROYkuqYURcXz2eqdt57HfPrTt
VJREwKcmNxhDrYzjB5I9Ir9pnH6zHnWYzgWo+iN6lzzvvNHgHi5ayHrT550Mu8As
FGJWmW/0AeYf7/guvE4HhfTHqY25JHLpV+12pZrvmv4hWHN2smKmNQcb+wnAJMpo
oYGrTwS9a50yo+RSN1n0nkM/ioFAicbkV7tJwv8dlRIVCGcRQLW+2awBWiP+8Hir
GhFKZTNN0VVJ7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:01 2026 by rpki-client