Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: yAvWi1nvoyovwdxfFRVL4Cfugqx732XBrVyPp9Fuavs=
Subject key identifier: F1:CA:63:89:65:F8:9B:B1:38:72:9A:50:24:3B:6C:F5:47:F5:8E:A7
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019D273ADBFBCB385CDCEEC7199E043FC704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 0767
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: 1-sDuDT5PyDWTrrUoYprkpEdUV2I.roa (hash: eAjODYNfh7Im2wLs/xUeEWebYtl3ElP2ajyZCTGNlyc=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: ZmIQ+my+xUpBIsbIo2CafyK4HOL/MD5/81TJk8/iAjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:db:fb:cb:38:5c:dc:ee:c7:19:9e:04:3f:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=f1ca638965f89bb138729a50243b6cf547f58ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:f3:ac:84:aa:53:14:36:71:f5:26:39:16:
ee:6a:58:80:20:34:f9:db:bb:a1:f6:fd:30:b3:17:
cf:75:06:2e:84:08:79:25:27:b4:64:f6:b8:8a:dd:
57:e4:06:72:0d:b1:9e:ed:ac:72:35:a6:d4:9b:7d:
1d:4d:c7:b5:36:65:e0:53:03:80:cc:d8:6f:ea:73:
30:03:6a:29:ee:bc:f4:82:01:7e:d0:23:e5:19:a0:
61:99:18:3f:1c:45:30:f4:ed:98:e7:06:d1:f4:fb:
df:a4:a9:30:40:17:c6:c4:09:02:4d:59:42:b5:a5:
8b:d0:a6:a1:4b:48:1c:e1:eb:df:3f:a5:b2:31:41:
dc:a2:de:85:ca:a7:e3:5e:01:03:33:82:b2:fa:41:
df:b7:3e:36:e2:96:77:44:6d:1a:4a:5e:b6:26:5e:
de:04:e5:e0:11:8a:17:ec:34:e9:e9:54:d7:da:e9:
51:93:68:74:08:a2:d4:e6:45:f6:0e:ed:bb:8b:f7:
9f:c5:09:06:16:33:c5:c9:81:74:7b:81:20:9c:f4:
10:2a:b5:36:9b:ed:4c:d4:08:46:64:37:5b:c8:2e:
ae:d7:e8:d4:cf:1f:77:3f:20:59:38:41:3c:2b:b7:
34:bc:1b:57:b4:d9:1e:55:c6:cc:35:ee:f0:1f:01:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CA:63:89:65:F8:9B:B1:38:72:9A:50:24:3B:6C:F5:47:F5:8E:A7
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:92:50:e0:8f:67:9c:9b:1f:aa:0c:5c:9b:51:99:10:f7:d2:
44:3f:5b:e0:1a:5b:07:78:b7:54:a9:42:e4:45:e3:4f:17:ed:
9b:c2:62:4c:89:87:3a:c5:b0:52:4d:7b:60:d8:09:05:0e:8e:
2f:fa:4e:e3:a0:b8:c9:21:38:81:e3:3d:50:05:a4:bc:28:0d:
c6:61:41:26:b3:e8:e9:dd:a3:fd:86:ab:c5:a2:bc:be:73:bd:
39:7b:7c:33:e6:fa:0b:2f:d0:c2:de:c3:2d:b6:4f:da:bb:82:
75:87:6a:b5:6d:31:2f:42:16:ba:c5:e0:56:5f:68:61:d4:8c:
4d:b8:03:a9:b6:1f:62:08:5a:a4:6b:4c:1d:ed:f4:3c:7a:59:
09:f4:d5:04:12:0c:66:3d:a6:02:3a:0e:f5:9c:43:92:4c:43:
f7:34:35:bb:a6:6f:64:cd:65:38:03:31:a7:a6:ae:9b:f3:e4:
a0:2c:24:f6:95:42:4a:31:fa:4b:e6:c7:ad:77:8a:7e:da:f0:
d3:e6:e5:b0:eb:46:96:1c:44:4f:f5:df:66:75:6b:40:21:9a:
c2:48:ae:3d:14:d9:f0:0a:9f:a2:63:68:10:84:57:56:5a:fa:
7d:57:fd:e2:16:d5:24:7a:31:3b:2c:fa:3d:8e:50:f6:45:f4:
41:50:24:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtv7yzhc3O7HGZ4EP8cEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMWYxNDgwNjUxZjFiMzM4YmUyNjM0MWUyZGIzYTBhYTNi
MzQ0ZWIwHhcNMjYwMzI1MjMwMTAxWhcNMjYwMzI2MjMwMTAxWjAzMTEwLwYDVQQD
EyhmMWNhNjM4OTY1Zjg5YmIxMzg3MjlhNTAyNDNiNmNmNTQ3ZjU4ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3nzrISqUxQ2cfUmORbualiAIDT5
27uh9v0wsxfPdQYuhAh5JSe0ZPa4it1X5AZyDbGe7axyNabUm30dTce1NmXgUwOA
zNhv6nMwA2op7rz0ggF+0CPlGaBhmRg/HEUw9O2Y5wbR9PvfpKkwQBfGxAkCTVlC
taWL0KahS0gc4evfP6WyMUHcot6FyqfjXgEDM4Ky+kHftz424pZ3RG0aSl62Jl7e
BOXgEYoX7DTp6VTX2ulRk2h0CKLU5kX2Du27i/efxQkGFjPFyYF0e4EgnPQQKrU2
m+1M1AhGZDdbyC6u1+jUzx93PyBZOEE8K7c0vBtXtNkeVcbMNe7wHwEDDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHKY4ll+JuxOHKaUCQ7bPVH9Y6nMB8GA1UdIwQY
MBaAFEMfFIBlHxszi+JjQeLbOgqjs0TrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYt
NGUwMDA5NDMxNDlmLzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYtNGUwMDA5NDMxNDlm
LzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJJQ4I9n
nJsfqgxcm1GZEPfSRD9b4BpbB3i3VKlC5EXjTxftm8JiTImHOsWwUk17YNgJBQ6O
L/pO46C4ySE4geM9UAWkvCgNxmFBJrPo6d2j/YarxaK8vnO9OXt8M+b6Cy/Qwt7D
LbZP2ruCdYdqtW0xL0IWusXgVl9oYdSMTbgDqbYfYghapGtMHe30PHpZCfTVBBIM
Zj2mAjoO9ZxDkkxD9zQ1u6ZvZM1lOAMxp6aum/PkoCwk9pVCSjH6S+bHrXeKftrw
0+blsOtGlhxET/XfZnVrQCGawkiuPRTZ8AqfomNoEIRXVlr6fVf94hbVJHoxOyz6
PY5Q9kX0QVAkvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:10 2026 by rpki-client