Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: 2LbttbpE/tj5lWcwcdurCDI/JoIT8HKq2I3EQvSmrJ8=
Subject key identifier: 0C:7C:88:4A:F6:69:DE:0F:6E:61:6E:7B:B3:D1:86:24:7D:CE:47:26
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019D254C5808A1B7F4A7E2CE800616324D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 14:00:53 +0000
Manifest this update: Wed 25 Mar 2026 14:00:53 +0000
Manifest next update: Thu 26 Mar 2026 14:00:53 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: nxhFlOjxZQrdBEgiK0sLT+ubtahqFBBi3p2yFNXv61Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:58:08:a1:b7:f4:a7:e2:ce:80:06:16:32:4d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Mar 25 14:00:53 2026 GMT
Not After : Mar 26 14:00:53 2026 GMT
Subject: CN=0c7c884af669de0f6e616e7bb3d186247dce4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:0e:2b:89:b1:e8:2f:e4:af:84:68:60:12:
0b:c2:b5:ca:99:fa:11:1c:e6:c1:68:a0:da:37:de:
6e:9f:57:dd:2a:da:d3:07:89:3e:04:06:8c:d4:1c:
04:48:27:e1:63:e2:87:7a:8e:01:46:5d:af:77:d4:
ab:8e:91:bb:05:79:ca:06:3c:a9:4b:2f:bf:42:e9:
7a:a0:09:e3:52:8a:a5:11:2a:05:fc:f5:81:6d:0b:
06:ca:56:f7:54:fd:1d:ac:a0:c3:26:e7:8f:9d:73:
92:35:09:38:98:2a:e4:98:96:6d:5a:5f:55:da:c0:
bf:f5:57:c1:08:ae:7e:60:a0:ce:7e:5b:fa:f8:cb:
7b:8f:6b:3f:fb:66:8b:af:08:88:65:ab:c0:7c:d5:
ad:dc:77:18:96:59:d6:03:97:02:49:56:4a:2b:1c:
2a:db:2f:75:de:0a:4c:ff:7f:39:ea:e9:bb:ba:ea:
b0:4c:09:e8:de:18:90:ec:af:aa:df:83:d3:c9:93:
a5:9e:10:82:5d:ab:7e:2a:a9:b8:d7:78:52:f8:15:
a0:28:70:20:3c:ca:a8:00:3d:2e:93:a1:71:d4:4a:
c7:f9:a2:65:54:e1:08:fd:57:f2:50:fc:83:4f:79:
28:6c:9f:bb:28:50:a6:0e:07:27:e1:fa:40:25:01:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:88:4A:F6:69:DE:0F:6E:61:6E:7B:B3:D1:86:24:7D:CE:47:26
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f7:78:1a:61:b1:d9:f4:c0:c6:db:57:c2:00:5c:3b:67:b0:
35:58:d1:3a:46:15:4b:7b:99:89:61:b6:fd:9b:34:74:ab:be:
07:ee:8a:84:f9:19:0a:7e:63:c4:a4:6f:cc:fb:88:c2:bb:62:
e6:0c:fd:f3:af:89:70:d7:e5:9e:43:be:74:8c:11:95:f8:74:
d7:c9:2a:7b:86:b0:c8:45:61:c4:6e:41:74:a3:ee:55:c2:43:
2b:fe:0f:f0:6f:8b:bc:ad:39:6b:8a:c3:c1:80:3f:ee:80:d4:
1d:bf:05:61:f5:a8:c3:e5:97:18:71:be:ae:92:f3:9b:d5:fe:
fb:93:d6:62:59:55:41:4a:34:d0:b4:89:6b:7a:33:f8:a6:50:
94:dc:a2:e5:60:28:f6:3e:2b:0a:85:aa:87:9f:f8:bb:60:ff:
b4:83:c8:88:62:a3:93:a1:41:36:3b:92:ca:ef:cc:b3:b5:83:
fa:1e:f4:3b:7b:6c:17:b7:08:9d:84:a9:24:80:d6:05:85:d0:
a4:c2:95:68:55:87:f6:8e:3d:6b:9f:4a:96:6f:fc:3d:b5:ff:
01:51:33:ee:60:37:c6:4a:52:6e:8e:10:7b:39:3a:b6:a7:c5:
6c:fd:bf:c7:1f:9b:d7:53:31:8a:64:1c:bd:ec:46:18:8c:d9:
d8:b4:4f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTFgIobf0p+LOgAYWMk1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjYwMzI1MTQwMDUzWhcNMjYwMzI2MTQwMDUzWjAzMTEwLwYDVQQD
EygwYzdjODg0YWY2NjlkZTBmNmU2MTZlN2JiM2QxODYyNDdkY2U0NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBMOK4mx6C/kr4RoYBILwrXKmfoR
HObBaKDaN95un1fdKtrTB4k+BAaM1BwESCfhY+KHeo4BRl2vd9SrjpG7BXnKBjyp
Sy+/Qul6oAnjUoqlESoF/PWBbQsGylb3VP0drKDDJuePnXOSNQk4mCrkmJZtWl9V
2sC/9VfBCK5+YKDOflv6+Mt7j2s/+2aLrwiIZavAfNWt3HcYllnWA5cCSVZKKxwq
2y913gpM/3856um7uuqwTAno3hiQ7K+q34PTyZOlnhCCXat+Kqm413hS+BWgKHAg
PMqoAD0uk6Fx1ErH+aJlVOEI/VfyUPyDT3kobJ+7KFCmDgcn4fpAJQEdawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx8iEr2ad4PbmFue7PRhiR9zkcmMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvd4GmGx
2fTAxttXwgBcO2ewNVjROkYVS3uZiWG2/Zs0dKu+B+6KhPkZCn5jxKRvzPuIwrti
5gz986+JcNflnkO+dIwRlfh018kqe4awyEVhxG5BdKPuVcJDK/4P8G+LvK05a4rD
wYA/7oDUHb8FYfWow+WXGHG+rpLzm9X++5PWYllVQUo00LSJa3oz+KZQlNyi5WAo
9j4rCoWqh5/4u2D/tIPIiGKjk6FBNjuSyu/Ms7WD+h70O3tsF7cInYSpJIDWBYXQ
pMKVaFWH9o49a59Klm/8PbX/AVEz7mA3xkpSbo4Qezk6tqfFbP2/xx+b11MximQc
vexGGIzZ2LRPcg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:30 2026 by rpki-client