Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: 4jaS7HMF3tb+WmcE6vJz1RfZM40B4M+4L//NNAgo2Xo=
Subject key identifier: 10:F8:29:99:4B:C7:26:77:4E:0D:F9:B9:A7:DD:5B:06:F0:F7:D2:6C
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 019D27DF6A37BB27EA14DA7A6D0BAA8875A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: e9ATf5sPxhIIrZkXrfrTWItTCA8.roa (hash: 9bYZXPWqJ0NbEhPnRTTZ2nAWZSD7VDe4KmSotczV1Og=)
2: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (hash: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss=)
3: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: Z46gE1Oe5dXY8F/FndSvcPLT0ldXOCvPNpyTekzjnyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6a:37:bb:27:ea:14:da:7a:6d:0b:aa:88:75:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=10f829994bc726774e0df9b9a7dd5b06f0f7d26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:4c:74:e0:ca:45:df:32:fb:67:d6:72:76:
2f:50:43:d3:77:ec:86:d4:f1:66:17:61:aa:c9:d8:
5e:2b:00:17:fb:7a:c9:9e:3b:0d:31:c8:17:79:01:
13:1d:95:37:f7:9f:ec:29:13:56:7e:04:a7:69:24:
b9:f8:fa:20:fe:94:a6:40:0d:5c:61:26:82:dd:14:
7b:e8:a0:e7:7e:f2:92:b9:58:c8:cc:5e:4d:89:b5:
15:ec:dd:de:50:6f:53:64:55:0e:99:67:9f:6b:fa:
d9:a3:2f:cc:c1:cb:e7:92:12:0f:18:b8:00:16:b3:
64:83:a5:3e:91:da:00:39:5c:70:55:50:f3:72:a9:
d5:43:89:40:3f:2b:2b:57:5d:57:ba:12:52:3a:d2:
de:86:49:a2:2a:b5:59:6f:f2:03:57:53:19:98:19:
d5:68:4e:fd:42:20:d4:34:70:ab:ac:73:72:a9:69:
5e:38:a8:b2:bd:38:8c:0c:1c:fb:24:3a:6c:a7:18:
96:6f:dd:c7:25:96:65:21:67:5b:35:f7:8f:2a:bd:
6f:f1:5a:69:e8:aa:9c:d4:60:9a:c8:36:41:ca:a4:
d8:e2:74:0c:e4:2c:df:ee:55:c5:98:92:85:f7:52:
96:30:ec:46:c8:62:3a:b9:3a:9a:52:0a:6c:68:8c:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F8:29:99:4B:C7:26:77:4E:0D:F9:B9:A7:DD:5B:06:F0:F7:D2:6C
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:bd:ae:1d:65:8a:9b:4b:45:ac:9c:72:f8:e8:64:43:c2:
d2:4a:f0:b7:f5:3d:12:4a:5e:5f:a5:6c:60:35:0e:03:ba:af:
e9:49:75:c0:82:6a:f0:ae:8e:29:c4:e2:1d:3c:e8:7f:dd:75:
d9:e0:4b:56:f8:47:be:c4:18:78:15:1d:6f:09:c6:f2:ab:e4:
2e:58:b6:cf:17:d1:78:ce:1a:f7:67:55:86:19:18:65:0b:20:
41:a6:55:bc:59:4b:3a:fc:a0:5f:19:8c:95:c6:5e:fa:d5:bd:
5f:96:f4:fe:10:38:ed:94:8f:03:87:4a:ea:51:5a:06:6d:cb:
2b:23:ba:12:1a:d5:92:e2:91:7b:a7:40:8a:af:ad:e8:10:31:
c0:b8:19:fe:fd:14:9e:33:76:e9:ff:e3:9b:f3:17:d1:11:64:
15:34:ec:77:da:22:03:91:df:21:85:88:27:b3:5e:3a:43:c2:
5d:24:5f:7f:6a:ce:04:49:1b:2a:60:91:0a:6a:fe:91:56:d2:
dc:57:d1:9f:71:a5:97:f6:ca:5d:71:7a:1a:22:98:6c:6f:b0:
c8:7b:0f:c7:bf:e0:99:3b:8e:ac:a8:76:d8:75:25:f8:70:c9:
a1:f0:b6:8d:bf:49:31:a9:52:4e:50:83:03:3b:f6:a8:cc:62:
48:41:8a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32o3uyfqFNp6bQuqiHWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy
MjI3YTMwHhcNMjYwMzI2MDIwMDQ2WhcNMjYwMzI3MDIwMDQ2WjAzMTEwLwYDVQQD
EygxMGY4Mjk5OTRiYzcyNjc3NGUwZGY5YjlhN2RkNWIwNmYwZjdkMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFhMdODKRd8y+2fWcnYvUEPTd+yG
1PFmF2GqydheKwAX+3rJnjsNMcgXeQETHZU395/sKRNWfgSnaSS5+Pog/pSmQA1c
YSaC3RR76KDnfvKSuVjIzF5NibUV7N3eUG9TZFUOmWefa/rZoy/MwcvnkhIPGLgA
FrNkg6U+kdoAOVxwVVDzcqnVQ4lAPysrV11XuhJSOtLehkmiKrVZb/IDV1MZmBnV
aE79QiDUNHCrrHNyqWleOKiyvTiMDBz7JDpspxiWb93HJZZlIWdbNfePKr1v8Vpp
6Kqc1GCayDZByqTY4nQM5Czf7lXFmJKF91KWMOxGyGI6uTqaUgpsaIympQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD4KZlLxyZ3Tg35uafdWwbw99JsMB8GA1UdIwQY
MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt
OWFhN2NkNjUwNWU1LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1
LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfO9rh1l
iptLRayccvjoZEPC0krwt/U9EkpeX6VsYDUOA7qv6Ul1wIJq8K6OKcTiHTzof911
2eBLVvhHvsQYeBUdbwnG8qvkLli2zxfReM4a92dVhhkYZQsgQaZVvFlLOvygXxmM
lcZe+tW9X5b0/hA47ZSPA4dK6lFaBm3LKyO6EhrVkuKRe6dAiq+t6BAxwLgZ/v0U
njN26f/jm/MX0RFkFTTsd9oiA5HfIYWIJ7NeOkPCXSRff2rOBEkbKmCRCmr+kVbS
3FfRn3Gll/bKXXF6GiKYbG+wyHsPx7/gmTuOrKh22HUl+HDJofC2jb9JMalSTlCD
Azv2qMxiSEGKOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:41 2026 by rpki-client