Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: a2rRrDgmy+Xd47w1O2Aay0FNafUlTrx2/uwzu8818QU=
Subject key identifier: C4:99:4C:98:F2:67:C3:1C:B0:FB:08:15:60:88:BA:F2:08:BA:43:13
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019D27723929E3C5381430240FC3AA9A93F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1849
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: by/yQ1+ZU7/2IgWfCBZmNByE9guQdxsJQ5guoXf8OMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:39:29:e3:c5:38:14:30:24:0f:c3:aa:9a:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=c4994c98f267c31cb0fb08156088baf208ba4313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:d4:a8:cf:4c:b3:d2:cb:df:68:d4:89:68:
49:d9:f6:a2:a1:54:25:c4:c1:38:9c:a9:d5:c3:c7:
97:0c:f1:40:62:f9:f7:bf:60:76:08:3b:17:18:c8:
47:10:03:5f:83:28:3b:92:bd:ed:7b:a4:26:88:eb:
84:1a:08:e9:77:e6:b1:f8:16:55:d8:87:6a:12:81:
32:82:ae:56:98:c1:48:76:62:26:8d:68:71:55:06:
fd:fa:94:d2:59:f6:91:1a:d1:f9:54:d5:5e:c7:f9:
c0:8f:6f:95:de:da:f5:ad:3e:c9:38:12:b1:1d:b3:
0d:3d:97:3d:3e:21:44:ad:88:ad:d0:94:54:be:8c:
a9:de:bf:c1:26:c2:b0:d5:0b:32:a4:b8:7f:e4:d3:
ea:bc:13:54:ef:df:b5:60:14:6e:80:65:4e:f1:aa:
04:60:95:bc:e4:73:8a:6f:25:c5:56:bf:c6:50:af:
53:fa:b3:ff:40:a3:d5:ae:b7:1b:d1:38:60:ed:6c:
d4:7d:62:4e:60:81:fd:ff:7c:83:5b:8e:72:da:07:
95:a7:00:d3:fd:3b:42:08:5e:0c:0f:6b:2d:18:4a:
02:8a:2d:91:92:19:8d:ad:eb:c0:e4:f4:52:ee:43:
a1:bc:3f:94:58:75:e3:4d:2c:25:d7:28:3d:32:75:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:4C:98:F2:67:C3:1C:B0:FB:08:15:60:88:BA:F2:08:BA:43:13
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:af:87:50:c5:1c:36:5c:8d:3f:09:ea:ed:40:33:80:16:
c7:58:f9:41:b3:83:b3:5d:c5:04:8e:a6:0e:88:c4:a3:0d:44:
84:74:7a:ba:94:22:ba:fc:2f:e8:38:7e:89:8c:67:13:e4:d4:
f1:c7:f0:5b:4d:87:be:5f:db:c5:8d:ef:67:20:76:5f:8c:31:
e7:7b:fd:ce:e6:97:3f:8a:95:24:0d:d6:2b:88:2f:ae:d0:21:
a1:ac:d8:19:ce:56:16:e7:3c:1a:46:79:c0:bc:3e:4f:6e:c0:
63:a2:09:d0:c2:ea:83:c9:c6:03:98:a1:d1:32:14:9b:f6:30:
81:5f:5b:eb:b0:52:e5:88:36:78:ca:37:34:f0:25:a1:8b:31:
83:18:0d:4b:c3:ea:ef:17:28:51:49:ff:cb:39:5a:38:bf:f4:
e7:3d:b5:15:84:7e:42:77:58:10:fd:96:a4:c5:7f:d0:f2:51:
4e:bd:cf:4a:46:ad:84:74:60:25:99:0c:7a:ed:8c:e7:53:19:
04:63:31:30:21:3f:f8:7a:02:d6:16:2b:fa:67:fe:8f:ad:7e:
36:a4:a6:62:33:0f:98:8d:66:8b:b3:b2:fe:76:f8:5a:17:d1:
1a:58:68:95:40:e9:fc:9d:14:37:ac:c1:9e:cb:79:78:2b:76:
7e:66:b6:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjkp48U4FDAkD8OqmpPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjYwMzI2MDAwMTMwWhcNMjYwMzI3MDAwMTMwWjAzMTEwLwYDVQQD
EyhjNDk5NGM5OGYyNjdjMzFjYjBmYjA4MTU2MDg4YmFmMjA4YmE0MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR7UqM9Ms9LL32jUiWhJ2faioVQl
xME4nKnVw8eXDPFAYvn3v2B2CDsXGMhHEANfgyg7kr3te6QmiOuEGgjpd+ax+BZV
2IdqEoEygq5WmMFIdmImjWhxVQb9+pTSWfaRGtH5VNVex/nAj2+V3tr1rT7JOBKx
HbMNPZc9PiFErYit0JRUvoyp3r/BJsKw1QsypLh/5NPqvBNU79+1YBRugGVO8aoE
YJW85HOKbyXFVr/GUK9T+rP/QKPVrrcb0Thg7WzUfWJOYIH9/3yDW45y2geVpwDT
/TtCCF4MD2stGEoCii2RkhmNrevA5PRS7kOhvD+UWHXjTSwl1yg9MnVUewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSZTJjyZ8McsPsIFWCIuvIIukMTMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQuvh1DF
HDZcjT8J6u1AM4AWx1j5QbODs13FBI6mDojEow1EhHR6upQiuvwv6Dh+iYxnE+TU
8cfwW02Hvl/bxY3vZyB2X4wx53v9zuaXP4qVJA3WK4gvrtAhoazYGc5WFuc8GkZ5
wLw+T27AY6IJ0MLqg8nGA5ih0TIUm/YwgV9b67BS5Yg2eMo3NPAloYsxgxgNS8Pq
7xcoUUn/yzlaOL/05z21FYR+QndYEP2WpMV/0PJRTr3PSkathHRgJZkMeu2M51MZ
BGMxMCE/+HoC1hYr+mf+j61+NqSmYjMPmI1mi7Oy/nb4WhfRGlholUDp/J0UN6zB
nst5eCt2fma2Zw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:14 2026 by rpki-client