Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: SVDLXTvNFcIcQbX4yw9LqB+S8jkfmX6qLSDlMxVq1LA=
Subject key identifier: C3:96:3C:F1:76:E7:74:9C:F5:E5:EE:45:41:90:9A:D9:53:5A:93:B3
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019D25BA90E063B1786AB32730232247D561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 16:01:16 +0000
Manifest this update: Wed 25 Mar 2026 16:01:16 +0000
Manifest next update: Thu 26 Mar 2026 16:01:16 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: mufdGk2PVFERcEFq3PVTnrYKZx2NzbV2lEnq9+Ql07o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:90:e0:63:b1:78:6a:b3:27:30:23:22:47:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Mar 25 16:01:16 2026 GMT
Not After : Mar 26 16:01:16 2026 GMT
Subject: CN=c3963cf176e7749cf5e5ee4541909ad9535a93b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:46:a1:ea:cd:21:10:46:c3:cd:78:7f:8c:
19:b2:bf:98:65:f1:eb:ac:34:c0:39:e9:a0:c3:18:
53:16:3e:f4:1a:8e:76:38:95:92:8d:cd:f8:73:0b:
70:ba:6c:60:77:d5:e2:15:ad:3b:90:52:56:23:5a:
05:29:a8:18:a1:9a:74:bf:70:5d:d1:04:33:1e:f3:
ad:91:69:60:06:8d:b3:46:84:63:4a:4b:60:93:62:
04:ed:5e:9c:8f:2f:37:65:87:cc:ad:38:f5:68:30:
ab:f9:b8:3f:d2:cb:ff:7d:2e:4b:8f:a6:37:58:d2:
a6:3c:dc:a4:cd:00:42:e1:6d:44:e3:e2:36:d9:f2:
70:c3:b1:d3:38:d7:d2:11:1c:b3:01:99:e9:9f:6f:
be:f8:82:74:c6:28:7e:a4:27:22:76:53:d0:f4:99:
53:0c:2d:7c:fa:3c:bd:f9:b0:44:52:1e:7d:c3:c2:
23:fb:ef:85:01:ab:b1:a4:e3:8a:9e:be:0f:6f:1d:
f2:6f:dd:f8:81:49:30:2e:3b:38:81:e8:7f:45:ee:
a0:d3:46:b8:54:7d:ff:6f:d3:1e:03:02:6f:00:e6:
3c:21:3d:97:7a:01:f9:05:db:0d:19:30:21:12:1e:
c9:02:8b:f6:cb:05:97:87:d9:59:00:f3:16:ec:74:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:3C:F1:76:E7:74:9C:F5:E5:EE:45:41:90:9A:D9:53:5A:93:B3
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5c:09:ae:31:08:90:30:77:85:94:7c:a3:db:c0:f3:08:e9:
98:12:01:07:d4:b1:11:97:2b:c3:95:45:1e:e5:e8:d6:89:fb:
96:42:28:3f:3e:3a:72:4a:16:29:e4:29:46:bd:ef:a5:17:18:
05:ce:b1:2f:c3:d5:90:89:a1:b5:89:c0:09:7e:2e:a4:d0:8f:
a1:1a:6c:0c:96:97:dd:cd:6b:41:25:d7:bb:46:3a:b7:a7:ab:
0b:4e:8d:81:56:bf:99:14:b3:b5:33:63:fc:0c:15:cf:19:dc:
19:d7:45:98:ef:54:e8:23:eb:98:14:88:56:5a:2f:83:b3:d1:
1e:3d:39:c4:d4:55:f4:e0:09:e0:00:9b:99:61:a8:c3:54:14:
62:db:3a:46:dc:ba:85:6b:8b:a2:6a:5a:b1:4b:d0:e5:03:e8:
79:c4:45:b4:58:b0:b1:1a:6d:27:e1:38:ae:07:6b:ee:5b:22:
1b:b8:43:17:b5:bd:2a:6d:49:9b:71:83:f7:37:3c:e9:d4:99:
de:c0:84:97:32:f8:16:bb:7d:4f:33:aa:64:b9:e7:b8:72:85:
ef:d1:89:65:53:6b:c1:d2:6f:61:91:68:32:0e:91:32:24:21:
5b:a4:a7:6f:af:01:32:45:60:86:b1:86:67:3d:2d:8e:f2:0b:
bd:73:e1:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lupDgY7F4arMnMCMiR9VhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz
NzdkNmQwHhcNMjYwMzI1MTYwMTE2WhcNMjYwMzI2MTYwMTE2WjAzMTEwLwYDVQQD
EyhjMzk2M2NmMTc2ZTc3NDljZjVlNWVlNDU0MTkwOWFkOTUzNWE5M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xRGoerNIRBGw814f4wZsr+YZfHr
rDTAOemgwxhTFj70Go52OJWSjc34cwtwumxgd9XiFa07kFJWI1oFKagYoZp0v3Bd
0QQzHvOtkWlgBo2zRoRjSktgk2IE7V6cjy83ZYfMrTj1aDCr+bg/0sv/fS5Lj6Y3
WNKmPNykzQBC4W1E4+I22fJww7HTONfSERyzAZnpn2+++IJ0xih+pCcidlPQ9JlT
DC18+jy9+bBEUh59w8Ij+++FAauxpOOKnr4Pbx3yb934gUkwLjs4geh/Re6g00a4
VH3/b9MeAwJvAOY8IT2XegH5BdsNGTAhEh7JAov2ywWXh9lZAPMW7HTSdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOWPPF253Sc9eXuRUGQmtlTWpOzMB8GA1UdIwQY
MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt
MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz
LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1wJrjEI
kDB3hZR8o9vA8wjpmBIBB9SxEZcrw5VFHuXo1on7lkIoPz46ckoWKeQpRr3vpRcY
Bc6xL8PVkImhtYnACX4upNCPoRpsDJaX3c1rQSXXu0Y6t6erC06NgVa/mRSztTNj
/AwVzxncGddFmO9U6CPrmBSIVlovg7PRHj05xNRV9OAJ4ACbmWGow1QUYts6Rty6
hWuLompasUvQ5QPoecRFtFiwsRptJ+E4rgdr7lsiG7hDF7W9Km1Jm3GD9zc86dSZ
3sCElzL4Frt9TzOqZLnnuHKF79GJZVNrwdJvYZFoMg6RMiQhW6Snb68BMkVghrGG
Zz0tjvILvXPhPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:49 2026 by rpki-client