Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: e/jUn+8M7851tjrkjlE4z7Crgidn/aai2GlslSWlr/4=
Subject key identifier: 9D:0F:20:BF:81:51:26:5A:11:6E:62:C7:BB:26:B4:89:A0:1A:10:02
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019D265F9FC3092A5E91BB13EBB417AE4256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 11A3
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: N4ogd93jnpfuhaVsput+d1x/Cq7jAPjRfhnMxSAwZZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9f:c3:09:2a:5e:91:bb:13:eb:b4:17:ae:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=9d0f20bf8151265a116e62c7bb26b489a01a1002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:4b:42:f7:c8:4c:00:58:fb:64:d8:71:f5:
fb:c9:f5:bc:b1:00:7b:f2:a4:20:dd:d7:a1:a7:49:
af:81:51:36:29:74:90:82:b3:14:4c:bd:bb:aa:50:
97:43:76:5a:3e:e6:c0:1a:a6:b3:bc:10:70:25:88:
78:1a:97:28:e9:b0:e2:08:f7:d7:c2:f8:ae:27:a5:
4c:c6:bb:4d:76:8a:22:ae:12:db:98:89:89:a6:da:
8b:e1:6f:83:bd:a5:2d:9d:75:7a:48:7c:ef:03:14:
55:46:b4:c3:3c:91:ac:a4:50:3a:0c:72:b6:b0:1b:
b7:92:33:b8:c1:1c:19:fe:6b:81:e2:a7:c4:44:4d:
6e:83:0d:92:b7:19:91:cb:b3:44:dc:b5:d8:f9:de:
d6:36:db:05:27:c4:00:ea:88:e5:94:5f:f2:49:59:
95:e6:29:6b:00:77:d9:03:f3:22:80:a5:06:4a:0f:
48:55:ac:52:96:fa:eb:b4:16:9a:c1:3a:0c:d2:57:
48:0c:b1:ed:0c:7c:30:f0:65:47:7e:aa:2b:3a:3a:
ea:74:d5:47:63:da:8c:78:66:fa:81:d0:00:af:6c:
b8:c2:f3:4f:02:4d:6e:c3:c5:32:e3:45:89:5f:2d:
1f:c1:28:a6:e3:1f:0d:15:c7:03:83:a6:3e:46:da:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:20:BF:81:51:26:5A:11:6E:62:C7:BB:26:B4:89:A0:1A:10:02
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0b:40:4f:aa:05:b2:96:41:6a:a7:d1:f2:a5:b2:1e:84:9d:
6f:d8:07:8c:52:ed:59:ae:0f:f9:18:5f:d8:89:94:72:0a:e7:
25:78:00:27:f7:13:a2:ce:e3:20:d3:02:dc:1e:83:23:23:86:
45:bb:1c:a7:7d:a7:63:58:36:dc:91:f5:df:9b:df:32:1a:d1:
ea:26:fa:24:a2:22:c9:97:02:29:60:7e:21:91:7c:5b:d1:a4:
e7:4c:24:b1:23:06:9d:10:c5:41:fb:8c:16:de:9f:f9:91:e4:
5d:36:d6:eb:d5:8f:11:ba:e5:ba:89:77:17:ce:3f:4f:24:bd:
27:14:b7:c9:aa:d7:1c:79:db:09:76:0c:e7:54:5c:bd:9f:de:
bd:8f:17:23:1f:99:18:36:8a:8b:74:d8:f2:61:89:bd:44:04:
42:19:42:be:50:23:a3:80:c4:6f:fe:1f:b9:8a:e2:49:da:13:
c9:c7:da:34:02:a7:e2:0a:c3:36:89:9b:34:59:94:e1:1d:12:
ac:c8:45:e6:37:c0:9a:69:85:e7:da:77:37:6a:f4:2e:a1:f0:
60:22:94:97:3f:d1:a8:96:84:41:dd:5d:2c:92:f0:93:b0:c3:
cb:f9:d5:83:41:62:1a:dd:3a:8a:c4:4e:a7:05:a0:83:15:f6:
e3:84:e9:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX5/DCSpekbsT67QXrkJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm
ZDI4MjcwHhcNMjYwMzI1MTkwMTM0WhcNMjYwMzI2MTkwMTM0WjAzMTEwLwYDVQQD
Eyg5ZDBmMjBiZjgxNTEyNjVhMTE2ZTYyYzdiYjI2YjQ4OWEwMWExMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd9LQvfITABY+2TYcfX7yfW8sQB7
8qQg3dehp0mvgVE2KXSQgrMUTL27qlCXQ3ZaPubAGqazvBBwJYh4Gpco6bDiCPfX
wviuJ6VMxrtNdooirhLbmImJptqL4W+DvaUtnXV6SHzvAxRVRrTDPJGspFA6DHK2
sBu3kjO4wRwZ/muB4qfERE1ugw2StxmRy7NE3LXY+d7WNtsFJ8QA6ojllF/ySVmV
5ilrAHfZA/MigKUGSg9IVaxSlvrrtBaawToM0ldIDLHtDHww8GVHfqorOjrqdNVH
Y9qMeGb6gdAAr2y4wvNPAk1uw8Uy40WJXy0fwSim4x8NFccDg6Y+RtpXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0PIL+BUSZaEW5ix7smtImgGhACMB8GA1UdIwQY
MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt
YjA2MTk0ZDEzYzZiLzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi
LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1gtAT6oF
spZBaqfR8qWyHoSdb9gHjFLtWa4P+Rhf2ImUcgrnJXgAJ/cTos7jINMC3B6DIyOG
Rbscp32nY1g23JH135vfMhrR6ib6JKIiyZcCKWB+IZF8W9Gk50wksSMGnRDFQfuM
Ft6f+ZHkXTbW69WPEbrluol3F84/TyS9JxS3yarXHHnbCXYM51RcvZ/evY8XIx+Z
GDaKi3TY8mGJvUQEQhlCvlAjo4DEb/4fuYriSdoTycfaNAKn4grDNombNFmU4R0S
rMhF5jfAmmmF59p3N2r0LqHwYCKUlz/RqJaEQd1dLJLwk7DDy/nVg0FiGt06isRO
pwWggxX244TpiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:28 2026 by rpki-client