Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
File: Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft (raw, json)
Hash identifier: 19mVX11pOi6t3hozELfxyokRwMm60kU1C6Z8AhYeJao=
Subject key identifier: 77:D3:9A:08:47:CB:FC:2A:AA:14:1B:11:D7:7F:CD:E9:9B:77:53:22
Authority key identifier: 42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
Certificate issuer: /CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Certificate serial: 019D26284C630040F72AC1DEBB1BFEF3A9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
Manifest number: 08DD
Signing time: Wed 25 Mar 2026 18:01:08 +0000
Manifest this update: Wed 25 Mar 2026 18:01:08 +0000
Manifest next update: Thu 26 Mar 2026 18:01:08 +0000
Files and hashes: 1: GDoBWX1Zlup6n9R7-4KowHMAH2c.roa (hash: zITFjtSHZtBX6uRd3C9BycIhrxB4/nE70BUhqc7LIiw=)
2: Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl (hash: wTZdL4G8ohIDv4MFbV7GItMUo16BFZweAJUW7IcxuzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:4c:63:00:40:f7:2a:c1:de:bb:1b:fe:f3:a9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427df95ee10a2ad4eaf082dfac159838b37d3450
Validity
Not Before: Mar 25 18:01:08 2026 GMT
Not After : Mar 26 18:01:08 2026 GMT
Subject: CN=77d39a0847cbfc2aaa141b11d77fcde99b775322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:89:4b:0f:1b:1b:e2:60:cf:f8:2b:3b:f5:
13:b2:3e:c4:25:29:1a:bc:09:ed:30:29:29:c1:17:
39:21:56:fe:cd:a1:fb:94:64:1b:92:75:84:7f:42:
39:f4:55:35:f9:cb:1a:b1:a4:e0:e0:a6:f6:93:b3:
84:dd:15:d1:df:1b:40:41:05:13:66:80:25:85:a9:
88:38:8f:e0:61:87:00:75:fd:3b:8a:9a:38:21:2e:
92:27:6a:69:f9:b2:02:cc:1b:c5:e5:4d:95:0c:36:
3c:1e:27:8d:e1:b9:70:c5:b2:55:6e:cf:dc:f2:cd:
14:6a:1e:c6:49:56:94:ea:58:70:14:e6:ed:0f:ee:
ad:db:ad:4c:db:af:95:f9:85:3b:2a:49:cc:85:1a:
f0:f7:f1:d9:ed:2c:c2:5c:cc:1b:7b:58:66:9b:33:
8c:a8:94:0b:15:31:0c:75:4f:68:10:d1:12:6c:09:
b0:72:30:48:e2:bd:c7:f6:6b:0f:9e:5f:1d:c7:87:
f1:23:a5:5c:b9:e6:61:52:42:70:65:18:67:9c:86:
93:66:3a:e7:8f:96:71:ee:a8:f5:1b:3c:a3:0e:69:
02:c1:2e:b7:bd:c6:f3:3f:20:af:2e:5b:0c:23:73:
59:59:63:89:2f:8c:07:ca:eb:d8:3a:0f:72:c5:d2:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:9A:08:47:CB:FC:2A:AA:14:1B:11:D7:7F:CD:E9:9B:77:53:22
X509v3 Authority Key Identifier:
keyid:42:7D:F9:5E:E1:0A:2A:D4:EA:F0:82:DF:AC:15:98:38:B3:7D:34:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn35XuEKKtTq8ILfrBWYOLN9NFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a3068-ea9d-4966-be55-7943d9a79bd2/1/Qn35XuEKKtTq8ILfrBWYOLN9NFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:92:ec:4b:59:be:b8:66:14:53:8e:87:bd:35:b5:8d:ad:82:
5c:73:90:1e:88:17:9f:8b:9c:c2:27:fd:4e:1a:da:0a:29:ad:
2f:3a:76:66:fb:42:9a:e2:af:c1:f6:2d:36:4a:e0:ba:c4:fb:
97:03:d2:6b:2f:43:62:9d:ba:54:48:ef:a9:ff:8f:f8:4a:90:
b5:c7:a9:89:4f:74:27:bf:94:8b:b8:61:20:bf:56:b8:fd:6a:
6d:a1:02:b3:bc:9a:c4:4c:0f:0f:f3:8c:6b:9f:0d:6f:8e:ee:
6a:46:32:6b:dd:6c:27:81:ae:80:d2:f0:9f:62:d7:fa:a3:b0:
53:9d:9f:f4:26:8d:f6:21:b0:89:39:af:fa:68:e9:4b:9e:7b:
92:65:6a:da:50:89:5e:a7:68:a5:66:ea:0b:95:d6:46:d0:6b:
30:ac:c7:d7:0d:6a:93:b3:2d:a1:2f:cc:59:52:78:3d:98:e7:
46:2d:30:96:a1:dc:a0:7f:0a:39:fa:5b:ef:72:fe:eb:71:4c:
92:13:1b:05:cd:c3:78:bc:c3:0a:00:72:3d:b4:1b:b6:a2:5d:
bd:b0:3c:ac:96:95:9b:7c:8e:e0:fa:72:f2:aa:4b:69:98:8c:
c7:8f:09:13:00:d6:de:34:e0:5c:09:df:fe:ae:68:02:19:c4:
6b:5a:cf:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKExjAED3KsHeuxv+86nzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2RmOTVlZTEwYTJhZDRlYWYwODJkZmFjMTU5ODM4YjM3
ZDM0NTAwHhcNMjYwMzI1MTgwMTA4WhcNMjYwMzI2MTgwMTA4WjAzMTEwLwYDVQQD
Eyg3N2QzOWEwODQ3Y2JmYzJhYWExNDFiMTFkNzdmY2RlOTliNzc1MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksWJSw8bG+Jgz/grO/UTsj7EJSka
vAntMCkpwRc5IVb+zaH7lGQbknWEf0I59FU1+csasaTg4Kb2k7OE3RXR3xtAQQUT
ZoAlhamIOI/gYYcAdf07ipo4IS6SJ2pp+bICzBvF5U2VDDY8HieN4blwxbJVbs/c
8s0Uah7GSVaU6lhwFObtD+6t261M26+V+YU7KknMhRrw9/HZ7SzCXMwbe1hmmzOM
qJQLFTEMdU9oENESbAmwcjBI4r3H9msPnl8dx4fxI6VcueZhUkJwZRhnnIaTZjrn
j5Zx7qj1GzyjDmkCwS63vcbzPyCvLlsMI3NZWWOJL4wHyuvYOg9yxdJcawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfTmghHy/wqqhQbEdd/zembd1MiMB8GA1UdIwQY
MBaAFEJ9+V7hCirU6vCC36wVmDizfTRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW4zNVh1RUtLdFRxOElMZnJCV1lPTE45TkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTMwNjgtZWE5ZC00OTY2LWJlNTUt
Nzk0M2Q5YTc5YmQyLzEvUW4zNVh1RUtLdFRxOElMZnJCV1lPTE45TkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTMwNjgtZWE5ZC00OTY2LWJlNTUtNzk0M2Q5YTc5YmQy
LzEvUW4zNVh1RUtLdFRxOElMZnJCV1lPTE45TkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZLsS1m+
uGYUU46HvTW1ja2CXHOQHogXn4ucwif9ThraCimtLzp2ZvtCmuKvwfYtNkrgusT7
lwPSay9DYp26VEjvqf+P+EqQtcepiU90J7+Ui7hhIL9WuP1qbaECs7yaxEwPD/OM
a58Nb47uakYya91sJ4GugNLwn2LX+qOwU52f9CaN9iGwiTmv+mjpS557kmVq2lCJ
XqdopWbqC5XWRtBrMKzH1w1qk7MtoS/MWVJ4PZjnRi0wlqHcoH8KOfpb73L+63FM
khMbBc3DeLzDCgByPbQbtqJdvbA8rJaVm3yO4Ppy8qpLaZiMx48JEwDW3jTgXAnf
/q5oAhnEa1rPRw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:41 2026 by rpki-client