Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: TpDaACaFmpES2ELUKxDWO7jE5Bku5QPlsM7JrAZu1LY=
Subject key identifier: 55:59:B2:10:13:3C:21:7D:5C:7C:0B:85:81:8A:7C:67:4C:23:0D:C3
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019D2703D00C46F35CF4DC107FA65EE479D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 1001
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: msSyprq51z2FQzp7tHAP3fjwh9ACTSxykKlmqq9jZAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d0:0c:46:f3:5c:f4:dc:10:7f:a6:5e:e4:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=5559b210133c217d5c7c0b85818a7c674c230dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:71:86:f4:ca:7a:71:52:b9:7e:0d:52:ef:
ae:ee:09:71:67:85:dc:70:66:28:f0:39:26:f1:7a:
3f:08:28:22:3c:9b:11:fc:91:4b:5d:0d:66:ab:b2:
94:41:a5:a5:ff:75:9d:be:b9:23:b8:1b:2a:9c:4d:
bb:01:2e:82:85:dd:19:8a:de:94:7e:dc:ca:1e:1b:
9c:98:75:b3:ed:94:d7:fe:4e:1b:f6:7c:51:40:a2:
e8:68:14:77:04:d4:11:8d:09:db:ad:87:6b:c2:da:
21:bf:51:0d:9f:fb:de:60:83:fc:79:55:46:28:25:
19:f0:24:24:49:81:d7:6f:93:ea:51:d9:2d:25:a2:
ed:28:40:67:22:9b:38:31:61:f5:68:bc:f0:0a:80:
32:8a:7b:39:2b:22:f0:e2:fe:f3:59:bc:ce:73:d1:
f4:2b:d0:e0:57:b7:4c:51:6e:03:a3:56:90:e3:e1:
d2:56:66:8d:db:07:e6:12:8c:4e:19:e4:2f:cb:50:
74:df:35:d3:11:ff:ae:fb:1d:90:1f:bd:81:12:25:
0b:c6:4b:27:e1:1d:19:50:52:a2:99:26:d6:5d:27:
25:bb:2c:63:b6:cf:62:1f:71:9e:91:f7:97:41:81:
44:7a:3f:6a:bf:ad:1a:f4:03:ca:ab:31:48:6c:31:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:B2:10:13:3C:21:7D:5C:7C:0B:85:81:8A:7C:67:4C:23:0D:C3
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2c:19:24:c7:00:ae:7e:45:15:f8:41:63:e3:24:c8:cd:d6:
7d:2d:19:84:99:9d:a6:ec:40:80:21:7c:37:f3:ca:f5:a2:6b:
12:cf:c3:79:47:2a:7a:8b:c9:73:fc:2b:46:6c:b1:9a:bb:9c:
da:0a:d3:36:f0:8d:d6:30:d6:2b:1f:4a:95:c7:81:25:16:d6:
49:82:39:7a:f9:08:ee:5d:6a:bf:69:93:1a:c3:19:f4:f5:30:
69:14:84:07:76:fd:fe:ae:09:2b:57:e6:ee:75:2c:26:ee:54:
bf:ba:26:04:2a:fc:fa:5a:c4:f0:7b:5e:45:5f:38:77:da:bb:
a2:30:54:d6:20:75:5a:d2:85:87:cc:ff:c9:4d:0e:d0:18:f0:
d3:24:1f:fe:7c:da:62:cb:03:76:cd:54:a6:6b:b2:56:90:db:
dc:b3:28:57:3b:e3:ab:af:85:7a:7d:cf:6d:86:2a:9d:60:ee:
ab:e0:41:08:a8:62:12:ef:fa:49:e4:23:14:a7:24:fc:40:a2:
21:92:c7:97:49:5b:ad:5b:6e:e1:3c:62:74:f4:62:59:56:3f:
d9:04:58:b6:f4:4f:47:f9:54:28:53:5f:5c:ff:d0:e4:ea:52:
cd:d8:09:b5:05:a9:43:1f:12:b4:78:5b:a6:f4:00:06:66:0e:
0c:7b:70:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA9AMRvNc9NwQf6Ze5HnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4
NThhNGMwHhcNMjYwMzI1MjIwMDU0WhcNMjYwMzI2MjIwMDU0WjAzMTEwLwYDVQQD
Eyg1NTU5YjIxMDEzM2MyMTdkNWM3YzBiODU4MThhN2M2NzRjMjMwZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOVxhvTKenFSuX4NUu+u7glxZ4Xc
cGYo8Dkm8Xo/CCgiPJsR/JFLXQ1mq7KUQaWl/3WdvrkjuBsqnE27AS6Chd0Zit6U
ftzKHhucmHWz7ZTX/k4b9nxRQKLoaBR3BNQRjQnbrYdrwtohv1ENn/veYIP8eVVG
KCUZ8CQkSYHXb5PqUdktJaLtKEBnIps4MWH1aLzwCoAyins5KyLw4v7zWbzOc9H0
K9DgV7dMUW4Do1aQ4+HSVmaN2wfmEoxOGeQvy1B03zXTEf+u+x2QH72BEiULxksn
4R0ZUFKimSbWXScluyxjts9iH3GekfeXQYFEej9qv60a9APKqzFIbDELPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVZshATPCF9XHwLhYGKfGdMIw3DMB8GA1UdIwQY
MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt
MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0
LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxywZJMcA
rn5FFfhBY+MkyM3WfS0ZhJmdpuxAgCF8N/PK9aJrEs/DeUcqeovJc/wrRmyxmruc
2grTNvCN1jDWKx9KlceBJRbWSYI5evkI7l1qv2mTGsMZ9PUwaRSEB3b9/q4JK1fm
7nUsJu5Uv7omBCr8+lrE8HteRV84d9q7ojBU1iB1WtKFh8z/yU0O0Bjw0yQf/nza
YssDds1UpmuyVpDb3LMoVzvjq6+Fen3PbYYqnWDuq+BBCKhiEu/6SeQjFKck/ECi
IZLHl0lbrVtu4TxidPRiWVY/2QRYtvRPR/lUKFNfXP/Q5OpSzdgJtQWpQx8StHhb
pvQABmYODHtweg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:44 2026 by rpki-client