Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: Pv/ywlihZ0g0HSh0SoAdyZ5VsVilYQRlqaelyyLF0F8=
Subject key identifier: 4F:50:3E:BA:5F:BB:52:EC:E5:38:91:2E:9E:28:21:EF:D0:DC:A1:F1
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 019D26CD4AFE2E716AFC8F64110F7DCF2567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 06DD
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: +Q2h4X6WKi0vJu+BIzSkvWLps3GXCfemo/mj1/5r2fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4a:fe:2e:71:6a:fc:8f:64:11:0f:7d:cf:25:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=4f503eba5fbb52ece538912e9e2821efd0dca1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:5a:c6:c5:75:ce:19:a1:36:ba:4e:df:8c:
ac:8b:9a:6d:98:c8:67:5c:39:a1:d2:87:a7:e7:48:
a8:7f:71:60:6f:66:33:28:eb:95:53:91:4c:e3:0e:
97:75:ff:10:ae:0d:79:2a:a1:68:37:37:96:21:f7:
84:82:aa:02:a9:a6:24:e8:e7:2f:78:a3:d2:af:c9:
d4:3e:90:9d:02:94:c1:c5:98:26:6b:85:f9:bd:b2:
b7:13:e2:18:79:39:e1:cd:4a:10:e7:09:4b:53:5d:
cb:41:80:95:ac:53:58:e4:46:b9:f1:d0:56:a9:05:
a4:9e:d3:c6:85:c7:4a:e0:c9:01:96:18:01:4f:e3:
7b:17:e3:4d:b8:b2:fb:6e:89:5c:a3:74:5c:9d:d0:
bf:91:28:45:c8:84:6e:f9:a7:da:bd:d2:2c:a9:03:
24:34:e2:a0:a6:cf:0c:78:ea:57:59:e2:e1:04:ce:
5d:97:f9:9a:da:f6:fb:33:6b:63:57:ec:97:ff:d4:
61:c3:a2:4c:e1:a9:04:72:ab:48:fa:77:e4:85:8d:
33:c4:be:65:98:d3:77:23:b1:17:a4:96:e7:74:8c:
a8:d7:80:54:ec:12:a0:b4:8f:9f:72:5c:ac:ad:42:
4c:4d:2a:5d:13:6e:a9:9e:b5:df:18:8d:9d:d6:52:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:3E:BA:5F:BB:52:EC:E5:38:91:2E:9E:28:21:EF:D0:DC:A1:F1
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:e4:cc:0d:ca:e2:c4:bf:7e:7a:6c:ad:ef:b7:9a:1a:54:
0f:7c:4e:e0:59:ad:e1:79:be:bf:a0:5e:12:1a:12:52:5b:e4:
b2:3b:24:a4:65:9a:b3:4b:f0:dc:f5:78:4d:77:1c:b3:ba:98:
43:21:1d:33:6e:47:8c:02:be:1c:55:09:4b:da:94:03:2a:a7:
9e:32:2e:c7:df:aa:5d:d6:a9:92:7c:29:90:3e:5a:9e:46:b6:
c1:b8:ca:26:06:9e:d9:08:4c:6c:41:50:b7:59:c7:91:fc:56:
f8:07:c6:e8:db:26:2e:4c:cc:f8:04:2a:85:e8:1a:d8:1a:a7:
f2:02:95:e7:01:d7:7d:67:bb:65:08:c9:d2:f2:78:f2:ad:c4:
d9:82:e0:56:ea:fb:12:e2:77:86:e0:4b:5c:94:25:d0:55:7a:
29:0a:6f:b8:b6:85:35:9e:90:2b:e5:d0:61:c0:fd:57:0a:17:
1c:93:f5:b1:58:a0:2c:e2:b6:25:6a:b2:d1:ef:9e:5d:ef:34:
07:1c:73:34:15:5c:ff:cd:d0:02:ee:c5:6b:2b:1c:ff:86:79:
29:56:8d:0f:6a:dd:4e:02:6a:30:b7:29:b3:d1:a6:ff:47:c0:
a5:e8:7e:21:12:ef:c2:fc:7a:d5:f1:31:ff:36:d9:88:2c:c6:
f3:2e:76:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUr+LnFq/I9kEQ99zyVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli
NjIxZTQwHhcNMjYwMzI1MjEwMTIxWhcNMjYwMzI2MjEwMTIxWjAzMTEwLwYDVQQD
Eyg0ZjUwM2ViYTVmYmI1MmVjZTUzODkxMmU5ZTI4MjFlZmQwZGNhMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IpaxsV1zhmhNrpO34ysi5ptmMhn
XDmh0oen50iof3Fgb2YzKOuVU5FM4w6Xdf8Qrg15KqFoNzeWIfeEgqoCqaYk6Ocv
eKPSr8nUPpCdApTBxZgma4X5vbK3E+IYeTnhzUoQ5wlLU13LQYCVrFNY5Ea58dBW
qQWkntPGhcdK4MkBlhgBT+N7F+NNuLL7bolco3RcndC/kShFyIRu+afavdIsqQMk
NOKgps8MeOpXWeLhBM5dl/ma2vb7M2tjV+yX/9Rhw6JM4akEcqtI+nfkhY0zxL5l
mNN3I7EXpJbndIyo14BU7BKgtI+fclysrUJMTSpdE26pnrXfGI2d1lKV1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9QPrpfu1Ls5TiRLp4oIe/Q3KHxMB8GA1UdIwQY
MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt
YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1
LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc/kzA3K
4sS/fnpsre+3mhpUD3xO4Fmt4Xm+v6BeEhoSUlvksjskpGWas0vw3PV4TXccs7qY
QyEdM25HjAK+HFUJS9qUAyqnnjIux9+qXdapknwpkD5anka2wbjKJgae2QhMbEFQ
t1nHkfxW+AfG6NsmLkzM+AQqhega2Bqn8gKV5wHXfWe7ZQjJ0vJ48q3E2YLgVur7
EuJ3huBLXJQl0FV6KQpvuLaFNZ6QK+XQYcD9VwoXHJP1sVigLOK2JWqy0e+eXe80
BxxzNBVc/83QAu7Faysc/4Z5KVaND2rdTgJqMLcps9Gm/0fApeh+IRLvwvx61fEx
/zbZiCzG8y52GA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:31 2026 by rpki-client