Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: d2x8CaMIzfnnlhT0c8pMkdT3lKIkCjwJzFeTMhyOq+Q=
Subject key identifier: 13:A3:39:33:12:B7:86:0D:5D:29:1A:89:F7:4E:BD:CF:E7:CA:4A:3B
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019D2583EDA4B70E1D75D168B71DFFD3A2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 078D
Signing time: Wed 25 Mar 2026 15:01:36 +0000
Manifest this update: Wed 25 Mar 2026 15:01:36 +0000
Manifest next update: Thu 26 Mar 2026 15:01:36 +0000
Files and hashes: 1: 74Dpz122mMMut7bbXL6kEu6zz8E.roa (hash: p7VXpGGYO1rsvZkHdjohiYrbdkLflYguUEoDUa4uT/I=)
2: NHpHHZAIDzgwPpSy6ezW1FtmeD8.roa (hash: np0ySnVq+ohTQoZSQT/qPIOylTE9F9ExAUt5D1kOcwE=)
3: NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa (hash: Q/BQlYDMNejEhVFqRZbNSInpb1ogvcV67Q6DhAARUbc=)
4: NbeD14QOQVqxpCNvyr8gH_GQtrc.roa (hash: oswI2CSKNyAXKvPvhJzaCytbyJezZyC2UppT7NbsjUk=)
5: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: oo1xkBd92webzqgmZ93vPB5P7udyZwEnv9mAwIi2kq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ed:a4:b7:0e:1d:75:d1:68:b7:1d:ff:d3:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Mar 25 15:01:36 2026 GMT
Not After : Mar 26 15:01:36 2026 GMT
Subject: CN=13a3393312b7860d5d291a89f74ebdcfe7ca4a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:42:36:b6:58:d9:05:ae:5f:78:39:59:a6:df:
4f:a4:58:76:02:61:a4:47:0f:dd:24:29:02:a9:d9:
49:ed:a8:45:ee:39:b9:d0:af:98:03:75:8a:fb:77:
d4:8f:19:9a:8b:6e:17:a2:c2:70:a8:0e:22:37:65:
dc:85:f0:d3:89:75:b6:36:ee:db:c7:dd:fc:6e:9e:
b0:cf:b1:d3:31:00:d6:c2:30:3d:ba:98:87:14:33:
62:71:3e:d6:cc:e0:ea:a2:6d:94:ee:6f:58:ab:78:
f9:8d:8c:02:28:13:33:d1:3f:18:32:b2:c0:7f:b2:
20:90:8c:27:79:42:49:41:91:21:f8:be:ab:4e:65:
61:d5:76:58:95:50:85:25:3c:2d:9b:97:62:5a:6e:
e9:fa:38:23:c0:16:c4:29:fd:92:49:b2:da:f1:4a:
84:1e:54:9f:43:6d:06:1d:83:6d:a2:4c:ae:40:34:
47:5e:5a:12:89:14:5c:d2:04:7a:e1:e3:40:33:08:
e1:1e:74:8b:40:99:79:bf:b5:36:25:72:27:57:08:
38:e9:8b:4d:cd:89:06:b4:ea:7b:8b:b7:3c:0b:41:
59:85:e2:78:67:e4:07:c7:5c:d4:7b:79:50:e5:cb:
98:27:be:3c:1b:36:35:d1:56:8a:5c:e9:8c:09:ce:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:39:33:12:B7:86:0D:5D:29:1A:89:F7:4E:BD:CF:E7:CA:4A:3B
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9c:ae:79:df:ac:b9:99:90:f6:f4:dd:05:cf:85:da:3b:e4:
dc:c0:59:01:8a:24:72:96:17:3a:d5:c9:1c:76:a9:c6:0b:3c:
19:6d:21:bc:96:2a:8a:25:64:10:1b:34:b2:db:56:d1:cb:84:
01:14:25:1c:07:29:97:d5:c5:cd:ca:a4:7e:4a:47:72:b3:4a:
e8:5c:b9:3f:dc:5d:e0:68:14:b8:c3:73:f2:6f:17:ba:e4:4f:
f0:cc:97:a6:1d:19:e9:6a:67:6b:6c:ce:3a:b8:9c:ed:26:b6:
70:11:24:ea:14:a1:8d:98:08:b5:e5:49:d0:6a:69:56:cf:d3:
a0:2e:eb:3a:4c:ec:d8:52:2c:9a:4f:83:66:98:13:e2:69:79:
7e:2c:76:78:5f:e4:2c:19:b3:b1:26:3c:87:3b:96:1b:58:5f:
81:48:d1:98:13:32:98:c3:56:db:9e:5d:5e:16:5e:31:66:42:
3c:05:dd:42:e4:c1:6a:52:79:ab:3e:a8:15:85:77:60:4e:9b:
95:50:4e:bc:68:77:9f:3e:56:24:93:7e:c2:92:f6:41:37:8f:
13:fa:c1:4a:27:3a:60:5d:6a:36:fa:e6:05:d8:48:07:6c:93:
bc:b9:37:b0:bd:5b:24:72:6d:cb:c0:5d:17:94:68:4d:98:21:
69:a7:8e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg+2ktw4dddFotx3/06LdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw
MzBjOWQwHhcNMjYwMzI1MTUwMTM2WhcNMjYwMzI2MTUwMTM2WjAzMTEwLwYDVQQD
EygxM2EzMzkzMzEyYjc4NjBkNWQyOTFhODlmNzRlYmRjZmU3Y2E0YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EI2tljZBa5feDlZpt9PpFh2AmGk
Rw/dJCkCqdlJ7ahF7jm50K+YA3WK+3fUjxmai24XosJwqA4iN2XchfDTiXW2Nu7b
x938bp6wz7HTMQDWwjA9upiHFDNicT7WzODqom2U7m9Yq3j5jYwCKBMz0T8YMrLA
f7IgkIwneUJJQZEh+L6rTmVh1XZYlVCFJTwtm5diWm7p+jgjwBbEKf2SSbLa8UqE
HlSfQ20GHYNtokyuQDRHXloSiRRc0gR64eNAMwjhHnSLQJl5v7U2JXInVwg46YtN
zYkGtOp7i7c8C0FZheJ4Z+QHx1zUe3lQ5cuYJ748GzY10VaKXOmMCc5gVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOjOTMSt4YNXSkaifdOvc/nyko7MB8GA1UdIwQY
MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt
MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1
LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZyued+s
uZmQ9vTdBc+F2jvk3MBZAYokcpYXOtXJHHapxgs8GW0hvJYqiiVkEBs0sttW0cuE
ARQlHAcpl9XFzcqkfkpHcrNK6Fy5P9xd4GgUuMNz8m8XuuRP8MyXph0Z6Wpna2zO
Oric7Sa2cBEk6hShjZgIteVJ0GppVs/ToC7rOkzs2FIsmk+DZpgT4ml5fix2eF/k
LBmzsSY8hzuWG1hfgUjRmBMymMNW255dXhZeMWZCPAXdQuTBalJ5qz6oFYV3YE6b
lVBOvGh3nz5WJJN+wpL2QTePE/rBSic6YF1qNvrmBdhIB2yTvLk3sL1bJHJty8Bd
F5RoTZghaaeOzQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:45 2026 by rpki-client