Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: j6TqOssYKuKr+UBBIajsoHfsck+FxGzc69RamsPYNSo=
Subject key identifier: 3E:3D:9A:8C:70:0B:A2:60:52:FD:35:75:81:4E:8C:BB:E5:63:90:31
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 019D341A70D62BD0C4CAF687A115FA5701B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: 0318
Signing time: Sat 28 Mar 2026 11:00:41 +0000
Manifest this update: Sat 28 Mar 2026 11:00:41 +0000
Manifest next update: Sun 29 Mar 2026 11:00:41 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: zj0Txii/dDOkvXHBcp86XKBYC+WQVc6Nf5CWygOahcY=)
2: wmkrs-T4Qk-NyFJuLfe4BJQMXMw.roa (hash: ENCrMS/ggVPvYnMViHVPfzOMTrIXGPczqg+j9lYLbks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:70:d6:2b:d0:c4:ca:f6:87:a1:15:fa:57:01:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Mar 28 11:00:41 2026 GMT
Not After : Mar 29 11:00:41 2026 GMT
Subject: CN=3e3d9a8c700ba26052fd3575814e8cbbe5639031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:09:15:4e:a7:80:a7:ed:8f:39:a7:10:bd:
7e:5a:6b:f1:85:ba:34:20:0b:25:0a:ff:fb:cb:59:
b3:d3:e3:d3:85:b6:f6:db:8b:b5:2a:85:45:0c:70:
94:ba:28:ef:b3:92:74:9f:b9:8b:a8:da:01:fb:64:
1b:59:c9:1e:b1:f0:69:4c:9c:9f:92:85:f8:8e:91:
45:0f:d5:fd:df:37:9c:24:26:3e:97:ed:64:32:79:
00:ff:4c:14:57:34:21:37:0d:17:e1:69:ed:b0:31:
0f:44:0e:bc:58:07:49:52:6c:da:90:b8:bd:c3:8e:
39:07:b3:1a:05:01:b3:43:77:37:48:3f:12:0c:d4:
62:76:17:65:d8:af:8d:9e:4b:28:43:61:60:4f:44:
a3:24:9e:d2:4d:9a:2c:98:92:15:2d:cf:4e:b8:30:
26:bf:9a:fd:f4:29:93:d9:0f:eb:ff:48:d7:26:7a:
ee:ee:a9:26:9c:12:57:07:23:ec:18:16:6c:77:ac:
fa:0b:c9:78:37:81:45:61:8e:d1:c1:4d:0a:24:66:
83:7d:7c:56:0e:29:8b:75:54:db:0e:b6:5c:23:d7:
ee:a2:14:12:90:b2:e0:3b:93:ee:78:e6:71:d7:f3:
ca:96:22:6b:c4:9b:9b:94:c4:05:4d:3a:09:f6:e0:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:9A:8C:70:0B:A2:60:52:FD:35:75:81:4E:8C:BB:E5:63:90:31
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:63:3b:2a:9a:3b:af:a2:c6:c1:06:45:4c:87:16:01:41:da:
02:9e:5d:5a:9e:b7:be:35:55:ed:05:64:51:53:d2:65:cf:36:
55:7c:3b:b4:4c:a0:fb:82:09:f5:e5:63:db:a8:2d:06:ad:cf:
fb:ba:b5:8f:d0:71:ff:5d:6e:24:b6:9c:f0:63:88:35:a3:12:
13:fc:5e:2c:e5:5a:b2:30:5e:5b:d8:4a:60:85:d1:79:ac:28:
cd:76:0f:20:a4:a5:58:89:0a:dc:1e:9f:af:1b:f9:5f:4b:8a:
7b:6a:5f:56:43:95:6b:c9:72:27:67:d8:a9:77:d9:0f:a7:3a:
cc:be:8b:ca:08:d8:f7:2e:98:ad:c5:14:8a:e8:d3:d8:e4:b9:
2e:b2:4d:69:c9:37:11:70:c8:0c:c3:09:49:b9:ca:a5:1e:4d:
0d:21:e5:ac:f6:a4:82:e1:4b:c9:43:8e:2e:2d:20:57:8a:35:
b7:ee:b7:94:25:7c:35:5e:ae:29:4b:6b:52:93:fa:0e:fb:a4:
b6:b4:bb:92:38:e8:32:11:a6:aa:41:53:ff:88:dc:14:da:e9:
9d:41:2c:77:b1:63:f0:8b:ad:94:e9:79:3b:6a:84:e8:3c:d0:
83:b0:80:b3:15:e4:8b:88:83:8b:5b:2a:a3:86:87:cc:c9:a0:
44:65:63:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00GnDWK9DEyvaHoRX6VwG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWRkMDhkNzUyNDlhMDY3ZGJiYzYzMTdiZTViYTZlM2Y0
ZDVmYzkwHhcNMjYwMzI4MTEwMDQxWhcNMjYwMzI5MTEwMDQxWjAzMTEwLwYDVQQD
EygzZTNkOWE4YzcwMGJhMjYwNTJmZDM1NzU4MTRlOGNiYmU1NjM5MDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGkJFU6ngKftjzmnEL1+Wmvxhbo0
IAslCv/7y1mz0+PThbb224u1KoVFDHCUuijvs5J0n7mLqNoB+2QbWckesfBpTJyf
koX4jpFFD9X93zecJCY+l+1kMnkA/0wUVzQhNw0X4WntsDEPRA68WAdJUmzakLi9
w445B7MaBQGzQ3c3SD8SDNRidhdl2K+NnksoQ2FgT0SjJJ7STZosmJIVLc9OuDAm
v5r99CmT2Q/r/0jXJnru7qkmnBJXByPsGBZsd6z6C8l4N4FFYY7RwU0KJGaDfXxW
DimLdVTbDrZcI9fuohQSkLLgO5PueOZx1/PKliJrxJublMQFTToJ9uC5UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD49moxwC6JgUv01dYFOjLvlY5AxMB8GA1UdIwQY
MBaAFEKt0I11JJoGfbvGMXvlum4/TV/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTIt
Y2QzYzE2MGE2ZjQ2LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTItY2QzYzE2MGE2ZjQ2
LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGM7Kpo7
r6LGwQZFTIcWAUHaAp5dWp63vjVV7QVkUVPSZc82VXw7tEyg+4IJ9eVj26gtBq3P
+7q1j9Bx/11uJLac8GOINaMSE/xeLOVasjBeW9hKYIXReawozXYPIKSlWIkK3B6f
rxv5X0uKe2pfVkOVa8lyJ2fYqXfZD6c6zL6LygjY9y6YrcUUiujT2OS5LrJNack3
EXDIDMMJSbnKpR5NDSHlrPakguFLyUOOLi0gV4o1t+63lCV8NV6uKUtrUpP6Dvuk
trS7kjjoMhGmqkFT/4jcFNrpnUEsd7Fj8IutlOl5O2qE6DzQg7CAsxXki4iDi1sq
o4aHzMmgRGVjkw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:26 2026 by rpki-client