Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: Svoj6l9Dm1W0OjUIac+F2Hcjkr/vZDOJA5H5DEoRk2c=
Subject key identifier: A2:C3:76:21:0B:E6:4E:7A:8F:34:42:09:CB:3D:FB:0C:A2:C0:BB:39
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019D2A04899BE25D1D80E0D6643E48ECB786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0F1D
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: wkjCxpJcLCu/hrDu1FH6NLF1FA311T+3kULFG05Xp0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:89:9b:e2:5d:1d:80:e0:d6:64:3e:48:ec:b7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=a2c376210be64e7a8f344209cb3dfb0ca2c0bb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:62:83:90:ec:b4:65:a1:1d:56:e6:18:75:
47:02:21:df:f6:c8:0f:5d:10:a8:f2:8e:c6:dd:6e:
cc:4b:57:0b:eb:f2:06:f4:67:4e:39:26:f0:14:74:
4a:5e:c8:5e:54:ee:89:7d:59:2d:87:5d:e1:6d:2d:
53:3f:84:ab:91:ac:b9:f7:78:56:0e:33:89:92:e9:
96:f0:86:dc:14:69:89:21:dc:3f:1d:40:31:81:45:
b9:b5:8a:b0:a1:c0:1d:63:1b:be:aa:64:79:d9:b5:
1e:bd:9f:13:e9:bc:7b:88:bd:b1:ee:80:32:48:16:
6c:cc:7a:df:fe:2a:8d:b3:d8:0c:b0:20:36:27:e7:
b6:64:22:91:ec:b5:37:7b:26:81:53:35:59:73:58:
be:47:bc:2e:5c:f5:3d:cb:e2:8b:20:c0:f5:c4:68:
d6:88:54:f7:00:9d:fd:91:f2:ca:39:53:8d:65:06:
fd:eb:8e:06:21:b6:62:51:a3:a4:53:14:54:7f:8d:
1a:c6:44:fd:aa:06:24:97:de:d4:83:98:0e:84:80:
d5:5a:02:08:55:ad:9f:21:49:47:0f:c2:49:52:72:
cc:13:0d:92:0d:98:49:4a:a5:6f:55:b8:1f:bb:6d:
64:6b:56:78:4a:8e:d0:ae:f5:cc:1b:b5:fb:13:88:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:76:21:0B:E6:4E:7A:8F:34:42:09:CB:3D:FB:0C:A2:C0:BB:39
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d3:03:bc:d5:4d:23:ad:19:8d:6a:60:db:ee:34:38:df:6c:
bc:19:68:f1:9d:50:9b:d7:35:b9:9b:4f:d4:f4:f6:95:16:8b:
0d:b5:e3:b2:d3:19:56:c2:a3:1c:a7:e7:4d:f1:f9:56:a7:b2:
a8:a6:c5:9a:0e:fb:4d:75:ce:fd:cd:2a:d1:59:e4:2d:51:fa:
4f:8e:79:7f:43:9c:84:d1:d4:13:1a:f8:6c:89:7a:b2:61:11:
14:b3:b1:18:c1:d4:be:53:02:59:dd:6c:4c:3c:97:11:41:86:
16:e6:b0:bc:a1:89:79:98:72:06:cb:4a:50:98:f5:a7:b9:f3:
07:c8:70:3c:ec:55:35:04:82:d0:76:f6:c9:c8:94:c4:27:32:
74:8d:f5:45:09:3c:4f:c1:32:47:cd:e5:04:a7:2a:5f:37:71:
2d:2f:dc:f0:38:34:8c:eb:df:82:32:11:6b:a1:73:e6:78:ed:
7e:cf:12:8b:67:61:ce:76:f8:89:f2:1c:53:f0:2c:6d:94:fa:
cf:4a:c6:17:fd:ce:bd:73:88:db:7f:ca:ba:6d:39:ad:4f:53:
07:10:fc:43:64:36:ee:6b:ce:83:0a:09:2f:c7:41:c2:a7:5c:
48:fb:fc:9c:17:88:42:fa:50:b1:5d:89:eb:ed:65:45:9f:86:
cc:c0:0e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBImb4l0dgODWZD5I7LeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2
MTljY2QwHhcNMjYwMzI2MTIwMDMzWhcNMjYwMzI3MTIwMDMzWjAzMTEwLwYDVQQD
EyhhMmMzNzYyMTBiZTY0ZTdhOGYzNDQyMDljYjNkZmIwY2EyYzBiYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtddig5DstGWhHVbmGHVHAiHf9sgP
XRCo8o7G3W7MS1cL6/IG9GdOOSbwFHRKXsheVO6JfVkth13hbS1TP4Srkay593hW
DjOJkumW8IbcFGmJIdw/HUAxgUW5tYqwocAdYxu+qmR52bUevZ8T6bx7iL2x7oAy
SBZszHrf/iqNs9gMsCA2J+e2ZCKR7LU3eyaBUzVZc1i+R7wuXPU9y+KLIMD1xGjW
iFT3AJ39kfLKOVONZQb9644GIbZiUaOkUxRUf40axkT9qgYkl97Ug5gOhIDVWgII
Va2fIUlHD8JJUnLMEw2SDZhJSqVvVbgfu21ka1Z4So7QrvXMG7X7E4j1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLDdiEL5k56jzRCCcs9+wyiwLs5MB8GA1UdIwQY
MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt
ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw
LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdMDvNVN
I60ZjWpg2+40ON9svBlo8Z1Qm9c1uZtP1PT2lRaLDbXjstMZVsKjHKfnTfH5Vqey
qKbFmg77TXXO/c0q0VnkLVH6T455f0OchNHUExr4bIl6smERFLOxGMHUvlMCWd1s
TDyXEUGGFuawvKGJeZhyBstKUJj1p7nzB8hwPOxVNQSC0Hb2yciUxCcydI31RQk8
T8EyR83lBKcqXzdxLS/c8Dg0jOvfgjIRa6Fz5njtfs8Si2dhznb4ifIcU/AsbZT6
z0rGF/3OvXOI23/Kum05rU9TBxD8Q2Q27mvOgwoJL8dBwqdcSPv8nBeIQvpQsV2J
6+1lRZ+GzMAOYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:46 2026 by rpki-client