Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: XuxScOC3Su+gcpWTJq3uHIEG3hVNzGC3pdlwWI15J8M=
Subject key identifier: EB:4C:AA:99:5B:93:12:AC:1F:C3:24:71:6E:29:E8:49:5F:A4:76:44
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 019D27E06BC3EC30E49199DF619F62D7CBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 0632
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: 79mmweUJQclLYham7PLnWtmfuq+hjp/M3CGGxq2mX1E=)
2: xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa (hash: jpUT41SLpbot+5R4BFOYYkdz+MS0rf+UNRgr8WOjpTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6b:c3:ec:30:e4:91:99:df:61:9f:62:d7:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=eb4caa995b9312ac1fc324716e29e8495fa47644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:00:c9:e6:3d:25:9c:09:2c:5f:fc:3f:61:
b7:12:bc:a3:46:3f:4b:ca:21:c7:3f:8b:38:d0:16:
2f:d7:26:f3:71:46:9d:3e:b0:39:a5:63:51:fe:b8:
9a:d7:b0:06:f8:60:fd:0f:ad:da:f4:a7:4b:97:62:
6d:c4:6f:7d:6d:97:f9:6b:03:c5:3d:c3:23:02:6a:
b9:a2:4d:b3:9f:8d:f6:7c:f2:7a:8a:97:5b:e9:48:
b8:ff:1e:0f:7b:bd:e1:12:c5:43:f2:ee:c7:c2:b7:
c6:7e:bd:d1:25:34:8a:e5:b4:8d:d5:12:a7:d1:39:
25:1e:2c:e5:bc:1a:cf:7c:9e:ad:5e:e1:f0:7b:96:
cc:67:b6:cd:7c:09:11:b5:09:f3:eb:08:4e:c5:f6:
1a:0f:55:cd:4a:36:78:ae:32:ac:f7:2f:40:27:c3:
4b:5b:f6:d7:3d:f8:74:9d:6a:8e:7b:ab:b6:52:8e:
64:88:93:ad:d1:45:38:00:e5:47:e8:3e:45:dd:ab:
8d:ce:e8:a0:67:d6:1c:e0:ff:1e:90:ff:8b:0c:e5:
82:3b:8e:04:d4:3d:64:20:77:ea:4c:68:cd:d5:d6:
92:92:22:96:35:ef:55:6c:a9:df:4d:b7:c8:e5:7e:
16:ad:d8:54:f6:88:a7:f7:3d:84:92:28:42:d3:c9:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:AA:99:5B:93:12:AC:1F:C3:24:71:6E:29:E8:49:5F:A4:76:44
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:86:b9:38:b1:5f:d9:e6:21:e7:58:e5:78:26:38:a6:1f:
1d:a1:9c:a5:11:c0:87:aa:7f:6f:8d:66:82:c4:f1:de:e6:d2:
25:52:ed:39:c3:54:f9:5a:32:45:e8:e7:91:43:d1:40:e2:ed:
cd:b5:52:07:cb:f6:48:45:b4:6a:64:31:f4:cf:a5:ac:28:ea:
f4:19:5e:1b:3b:db:1c:44:94:66:29:58:d5:86:97:e8:f2:e0:
b8:db:bf:f5:44:e2:c9:67:2a:e5:1e:53:d0:e4:8d:0d:a3:e6:
79:1d:04:c4:eb:9f:c9:25:28:fb:44:ae:6b:c9:28:cd:f0:33:
1d:1c:2c:d9:6e:26:18:4c:85:55:e8:6c:f4:12:f1:81:d5:b6:
52:4c:ae:ca:bc:f4:6a:78:b5:e6:90:7f:c1:1e:37:cc:69:0b:
3a:85:fd:15:be:36:26:6a:54:98:3c:9f:a8:e3:b4:01:94:d8:
86:9b:1d:3c:df:dc:0c:ef:54:27:5e:04:23:80:1e:2c:97:61:
29:1d:cc:fc:f9:ce:10:f5:60:41:bc:05:a0:fc:15:79:70:1f:
78:8c:1a:b6:f2:dc:fe:65:72:ad:bc:03:71:a1:72:70:0a:4d:
4c:07:3f:80:80:0a:05:f2:08:be:50:47:09:c6:5d:88:3f:12:
df:56:20:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4GvD7DDkkZnfYZ9i18vyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOWIzNzlhMjQ2NDEyODEwZThhODA1MmE2MmEzOTY4OGNh
MzQ1NzkwHhcNMjYwMzI2MDIwMTUyWhcNMjYwMzI3MDIwMTUyWjAzMTEwLwYDVQQD
EyhlYjRjYWE5OTViOTMxMmFjMWZjMzI0NzE2ZTI5ZTg0OTVmYTQ3NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJkAyeY9JZwJLF/8P2G3EryjRj9L
yiHHP4s40BYv1ybzcUadPrA5pWNR/ria17AG+GD9D63a9KdLl2JtxG99bZf5awPF
PcMjAmq5ok2zn432fPJ6ipdb6Ui4/x4Pe73hEsVD8u7HwrfGfr3RJTSK5bSN1RKn
0TklHizlvBrPfJ6tXuHwe5bMZ7bNfAkRtQnz6whOxfYaD1XNSjZ4rjKs9y9AJ8NL
W/bXPfh0nWqOe6u2Uo5kiJOt0UU4AOVH6D5F3auNzuigZ9Yc4P8ekP+LDOWCO44E
1D1kIHfqTGjN1daSkiKWNe9VbKnfTbfI5X4WrdhU9oin9z2EkihC08kB7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtMqplbkxKsH8MkcW4p6ElfpHZEMB8GA1UdIwQY
MBaAFEGbN5okZBKBDoqAUqYqOWiMo0V5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4Nzgt
ZmNjODllY2U1OTA2LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4NzgtZmNjODllY2U1OTA2
LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYGGuTix
X9nmIedY5XgmOKYfHaGcpRHAh6p/b41mgsTx3ubSJVLtOcNU+VoyRejnkUPRQOLt
zbVSB8v2SEW0amQx9M+lrCjq9BleGzvbHESUZilY1YaX6PLguNu/9UTiyWcq5R5T
0OSNDaPmeR0ExOufySUo+0Sua8kozfAzHRws2W4mGEyFVehs9BLxgdW2Ukyuyrz0
ani15pB/wR43zGkLOoX9Fb42JmpUmDyfqOO0AZTYhpsdPN/cDO9UJ14EI4AeLJdh
KR3M/PnOEPVgQbwFoPwVeXAfeIwatvLc/mVyrbwDcaFycApNTAc/gIAKBfIIvlBH
CcZdiD8S31Ygzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:37 2026 by rpki-client