Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: 7xg3JVd3SsPW9TPdl/ACb39wp1POSVEyBGImpJ/Eg20=
Subject key identifier: F0:AA:D9:AA:8C:0C:7C:D5:67:21:3B:2F:8C:8C:B1:63:A7:97:1A:69
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019D2960C118C752E5000EAC7BD2EF1E1C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 18EB
Signing time: Thu 26 Mar 2026 09:01:39 +0000
Manifest this update: Thu 26 Mar 2026 09:01:39 +0000
Manifest next update: Fri 27 Mar 2026 09:01:39 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: mJsb+Ls1+zY2UDXUQZYbj1rV5AmgX+7T+zLoDCm1Qrc=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c1:18:c7:52:e5:00:0e:ac:7b:d2:ef:1e:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Mar 26 09:01:39 2026 GMT
Not After : Mar 27 09:01:39 2026 GMT
Subject: CN=f0aad9aa8c0c7cd567213b2f8c8cb163a7971a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:c7:fa:73:62:37:d6:5c:01:48:6a:29:68:
7e:e7:bf:fd:40:72:54:1d:3a:a1:d7:9a:01:8a:b7:
23:70:68:9c:2d:fd:c3:7f:a8:24:9b:91:82:6b:e0:
61:7e:3b:65:4a:96:e8:cb:fa:7d:4a:4c:49:4c:da:
af:b6:1e:90:f5:95:10:33:14:01:49:2d:95:5f:7a:
a6:f8:fa:eb:ba:ae:f4:08:e7:72:66:e2:f6:43:70:
6c:9c:ef:17:1c:1d:a7:6d:2d:a4:3f:cb:b4:a1:2d:
49:6e:e9:0e:8e:85:ca:00:2d:2c:5b:69:73:8e:13:
f3:ad:f7:ff:f2:1b:d3:4b:2c:01:ef:13:6d:be:d9:
16:c3:e1:a9:23:50:b9:44:35:00:e5:c8:4f:59:fb:
79:b4:a2:45:31:20:60:d9:cb:21:11:2f:66:ea:62:
e1:da:da:a1:24:9e:7b:40:ab:2e:87:c1:c0:60:13:
0c:b0:bb:42:c9:57:7d:b0:c1:5c:cc:d1:28:d7:8a:
ca:70:7f:f2:b4:3b:7c:d9:17:20:54:38:9d:c7:4a:
71:ef:b0:ba:7d:bf:8a:63:0a:e3:a8:13:35:b1:65:
59:b1:15:32:db:1d:58:53:40:03:65:e7:89:b3:5e:
b9:5a:8c:30:54:d7:d7:e7:c6:18:ec:52:9f:e9:79:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:D9:AA:8C:0C:7C:D5:67:21:3B:2F:8C:8C:B1:63:A7:97:1A:69
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:83:f7:4a:50:04:40:2b:19:0e:2a:24:ac:4b:d3:9d:08:a5:
fe:43:02:3d:5e:44:85:93:17:8d:ef:5e:b5:d6:74:48:bc:d8:
17:5b:11:1f:4c:c2:cf:4b:08:49:c5:e2:7d:4e:9d:45:6b:5b:
d1:80:b6:94:af:49:26:7c:5b:0a:4b:95:3b:71:a7:27:6e:49:
99:ec:4c:ba:19:67:ae:6c:07:25:1f:24:b3:50:a4:48:ea:06:
cf:69:aa:bd:92:38:be:7c:47:3d:7e:f5:ea:0f:a5:11:34:f9:
cc:77:70:5e:d4:c6:8c:49:96:c0:c4:fe:90:a6:d6:cc:a1:ce:
4c:f2:ef:92:23:b6:c3:20:59:6c:a8:92:62:64:8d:02:d4:7c:
71:16:c6:b2:2d:80:43:ac:34:93:b5:81:64:b3:b8:40:d2:c8:
f7:7f:f2:11:03:93:7f:5d:44:82:41:0c:47:27:44:78:ea:f8:
a9:ce:82:4b:f4:de:c9:52:51:eb:84:61:40:6b:bb:71:89:02:
d3:ce:69:11:38:31:81:f5:ef:67:3a:8d:07:a9:e7:d9:3c:6a:
cd:64:18:4f:10:79:e3:dd:31:e9:c1:50:b6:02:92:c4:ff:5e:
16:ad:76:df:ca:4a:f7:e2:49:91:fa:cd:5b:46:a6:d2:d5:8e:
57:be:3b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYMEYx1LlAA6se9LvHhxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjYwMzI2MDkwMTM5WhcNMjYwMzI3MDkwMTM5WjAzMTEwLwYDVQQD
EyhmMGFhZDlhYThjMGM3Y2Q1NjcyMTNiMmY4YzhjYjE2M2E3OTcxYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTjH+nNiN9ZcAUhqKWh+57/9QHJU
HTqh15oBircjcGicLf3Df6gkm5GCa+BhfjtlSpboy/p9SkxJTNqvth6Q9ZUQMxQB
SS2VX3qm+Prruq70COdyZuL2Q3BsnO8XHB2nbS2kP8u0oS1JbukOjoXKAC0sW2lz
jhPzrff/8hvTSywB7xNtvtkWw+GpI1C5RDUA5chPWft5tKJFMSBg2cshES9m6mLh
2tqhJJ57QKsuh8HAYBMMsLtCyVd9sMFczNEo14rKcH/ytDt82RcgVDidx0px77C6
fb+KYwrjqBM1sWVZsRUy2x1YU0ADZeeJs165WowwVNfX58YY7FKf6XnoCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCq2aqMDHzVZyE7L4yMsWOnlxppMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA14P3SlAE
QCsZDiokrEvTnQil/kMCPV5EhZMXje9etdZ0SLzYF1sRH0zCz0sIScXifU6dRWtb
0YC2lK9JJnxbCkuVO3GnJ25JmexMuhlnrmwHJR8ks1CkSOoGz2mqvZI4vnxHPX71
6g+lETT5zHdwXtTGjEmWwMT+kKbWzKHOTPLvkiO2wyBZbKiSYmSNAtR8cRbGsi2A
Q6w0k7WBZLO4QNLI93/yEQOTf11EgkEMRydEeOr4qc6CS/TeyVJR64RhQGu7cYkC
085pETgxgfXvZzqNB6nn2TxqzWQYTxB5490x6cFQtgKSxP9eFq1238pK9+JJkfrN
W0am0tWOV747LQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:08 2026 by rpki-client