Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: t9mMLGqylzsX+o/uHieOFPA0gM7eao6WrYhFRThvYfI=
Subject key identifier: DA:0A:A3:BF:05:9C:9D:0A:A8:38:F0:D5:C7:BA:CD:BC:30:A8:F6:B7
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019D2771BB2F96FAE652B40324FBD2CEBA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 17BB
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=)
2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: FkNuYYbCHGFbiiabneIIxjC84H+r8BHCm4KtfG4eqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bb:2f:96:fa:e6:52:b4:03:24:fb:d2:ce:ba:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=da0aa3bf059c9d0aa838f0d5c7bacdbc30a8f6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:12:26:9e:72:b9:e7:58:99:c7:e3:e8:61:
fb:aa:86:90:df:93:7e:86:0a:24:f6:34:4f:d0:eb:
af:bb:af:56:e0:44:4f:77:85:5e:41:81:b4:48:67:
2d:63:c0:d4:17:25:5c:fc:66:16:f0:0f:53:7e:82:
03:6c:cb:9a:33:13:87:c8:30:01:5e:84:37:14:c7:
28:49:19:f4:c3:3e:09:da:4d:32:31:fb:22:92:1c:
81:13:d5:71:3b:25:34:f9:a7:ad:84:b0:dc:08:2a:
d0:8b:42:08:56:5e:eb:8f:60:ec:74:67:68:c7:01:
a1:c5:c8:4e:bb:ba:67:11:0e:8d:6a:6f:5a:f8:50:
ef:67:4b:50:35:80:19:72:ed:1f:9b:21:35:52:64:
74:c0:0a:a4:25:e2:76:df:60:4a:30:49:de:97:0d:
5f:c4:21:ef:c0:d9:52:0e:f6:c9:41:64:21:b5:a1:
19:39:8a:9b:bc:86:40:61:ac:07:f5:fc:82:94:05:
6d:4a:eb:c0:49:61:d7:8f:4d:5a:83:fb:d9:af:a6:
8c:f1:3a:49:b8:68:f1:70:3b:cd:3c:c3:93:f2:ce:
d2:a4:15:21:94:dd:1a:ce:71:27:92:90:22:6a:1d:
fa:00:95:f4:07:db:34:59:52:df:46:1c:53:7a:99:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:A3:BF:05:9C:9D:0A:A8:38:F0:D5:C7:BA:CD:BC:30:A8:F6:B7
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5b:31:c9:3c:5b:af:99:a7:fd:32:cf:cd:f1:86:ff:82:2e:
3f:f8:d5:43:33:84:37:cf:7a:d5:66:a9:d6:fd:44:98:28:00:
3e:1d:34:be:8f:17:bc:7f:82:59:77:4d:54:5d:21:70:09:4d:
7b:52:24:2e:3c:54:7f:9b:37:22:63:f0:89:11:d3:5b:58:bd:
ed:2f:f4:fb:e0:8d:ed:e8:2b:b2:66:9e:8e:60:78:1b:3e:e9:
2f:7d:8c:a2:8e:cf:26:80:2e:bf:0c:7a:ff:ea:c6:c7:4d:8e:
61:d2:cb:1e:82:1c:37:a8:46:5e:7a:10:9b:31:67:a0:56:32:
5c:83:f4:25:be:69:4d:0d:4a:f9:05:06:64:1a:f2:db:a2:35:
11:be:b4:52:19:b6:99:a4:1e:b0:ea:b1:98:82:98:f5:2b:63:
9a:92:80:73:c0:ec:91:79:32:fb:88:dd:1e:b6:97:5f:0e:dd:
dd:90:0b:5a:3b:e2:6f:a7:b5:c4:8e:d5:e0:5f:b2:01:f6:65:
40:b1:19:cb:72:6c:3e:66:82:b0:13:55:82:5a:9d:1d:3d:04:
97:d9:19:81:a9:62:75:bf:81:6f:6f:9f:4a:af:d4:85:ce:7c:
eb:e4:fd:44:3a:7d:59:cc:04:dc:a9:14:a1:d7:4b:34:87:99:
78:15:9b:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncbsvlvrmUrQDJPvSzrpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk
MGMzYzkwHhcNMjYwMzI2MDAwMDU3WhcNMjYwMzI3MDAwMDU3WjAzMTEwLwYDVQQD
EyhkYTBhYTNiZjA1OWM5ZDBhYTgzOGYwZDVjN2JhY2RiYzMwYThmNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6oSJp5yuedYmcfj6GH7qoaQ35N+
hgok9jRP0Ouvu69W4ERPd4VeQYG0SGctY8DUFyVc/GYW8A9TfoIDbMuaMxOHyDAB
XoQ3FMcoSRn0wz4J2k0yMfsikhyBE9VxOyU0+aethLDcCCrQi0IIVl7rj2DsdGdo
xwGhxchOu7pnEQ6Nam9a+FDvZ0tQNYAZcu0fmyE1UmR0wAqkJeJ232BKMEnelw1f
xCHvwNlSDvbJQWQhtaEZOYqbvIZAYawH9fyClAVtSuvASWHXj01ag/vZr6aM8TpJ
uGjxcDvNPMOT8s7SpBUhlN0aznEnkpAiah36AJX0B9s0WVLfRhxTepk+WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoKo78FnJ0KqDjw1ce6zbwwqPa3MB8GA1UdIwQY
MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1sxyTxb
r5mn/TLPzfGG/4IuP/jVQzOEN8961Wap1v1EmCgAPh00vo8XvH+CWXdNVF0hcAlN
e1IkLjxUf5s3ImPwiRHTW1i97S/0++CN7egrsmaejmB4Gz7pL32Moo7PJoAuvwx6
/+rGx02OYdLLHoIcN6hGXnoQmzFnoFYyXIP0Jb5pTQ1K+QUGZBry26I1Eb60Uhm2
maQesOqxmIKY9StjmpKAc8DskXky+4jdHraXXw7d3ZALWjvib6e1xI7V4F+yAfZl
QLEZy3JsPmaCsBNVglqdHT0El9kZgalidb+Bb2+fSq/Uhc586+T9RDp9WcwE3KkU
oddLNIeZeBWbww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:21 2026 by rpki-client