Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: mujk6XjiemH7Rei66H18RQpywV5OIdfFdhskocT8EVA=
Subject key identifier: 3F:8D:3E:C4:47:EF:94:6B:66:AD:72:CF:39:B2:45:83:59:D2:5B:CC
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 019D37529F5C91ED62954611F58053CD7ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 17DA
Signing time: Sun 29 Mar 2026 02:00:54 +0000
Manifest this update: Sun 29 Mar 2026 02:00:54 +0000
Manifest next update: Mon 30 Mar 2026 02:00:54 +0000
Files and hashes: 1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=)
2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: RNkqPErx/psMJkIlVC3fT31fJmv9ek80hTTaJpqOjBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9f:5c:91:ed:62:95:46:11:f5:80:53:cd:7e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Mar 29 02:00:54 2026 GMT
Not After : Mar 30 02:00:54 2026 GMT
Subject: CN=3f8d3ec447ef946b66ad72cf39b2458359d25bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:61:20:65:cd:75:37:c2:1f:a0:d6:4c:5b:
72:92:71:d2:76:f4:6f:f9:4b:f3:66:0b:ba:48:79:
39:37:4f:c2:2e:dc:ae:85:2e:34:92:b1:86:c8:6c:
52:a9:5c:d4:7c:6b:5d:33:91:79:9c:0f:60:80:e1:
e5:15:d6:aa:00:48:6e:13:68:84:5f:90:8e:4b:35:
0f:5f:71:a0:ae:63:eb:56:e2:60:b7:01:54:c4:e3:
0b:02:64:a2:28:4e:a0:ee:8c:52:af:23:2b:df:6b:
63:ab:2b:35:b7:95:07:e0:49:6d:b0:fa:20:2e:5b:
1f:31:c4:90:44:a7:6b:50:4a:57:02:73:68:e3:1a:
e4:6a:de:01:84:1f:a1:5a:af:a5:2c:e0:7a:f0:f9:
70:d1:7c:65:e9:28:37:c7:70:eb:26:96:35:9f:4e:
98:be:56:ed:17:2a:3b:10:2e:b7:1c:73:c4:45:83:
a9:c6:20:2a:f5:63:e1:84:87:4a:c7:66:08:da:7c:
e7:f4:12:84:69:11:ed:bb:0b:f1:19:0c:36:64:03:
3d:ce:3c:b6:e3:c4:ce:43:94:2a:58:55:97:62:0a:
b5:f0:8f:f2:60:86:72:1e:96:62:17:67:42:e7:65:
b8:2e:92:cb:1a:6a:82:40:98:44:fc:ee:43:53:ad:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:3E:C4:47:EF:94:6B:66:AD:72:CF:39:B2:45:83:59:D2:5B:CC
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:24:9a:fc:70:ee:4d:ac:da:bf:91:ec:ba:ae:83:9b:02:
0c:7e:ce:6c:bc:c1:ec:d1:4f:bc:db:ec:dd:98:ab:44:68:7f:
3b:54:80:a6:c8:9f:fa:e6:cb:94:70:9f:97:14:cc:23:23:d2:
b6:06:a6:19:ce:6e:bc:b3:77:ed:e9:02:70:fe:96:cf:de:fa:
c9:28:57:50:2d:1c:53:25:e4:a8:f3:d6:d5:7a:6f:6a:ac:c2:
60:9c:75:0a:55:79:8d:7e:4a:79:97:d4:d9:49:16:35:4d:78:
23:cc:c0:9c:44:71:ee:c2:45:fd:d2:16:68:b6:62:76:ce:37:
d0:82:54:76:7c:69:09:c6:ee:18:30:1a:99:35:93:40:90:4b:
dc:60:39:dc:67:ce:7e:2b:40:85:b2:2d:90:df:3f:1b:71:5d:
29:16:75:16:00:d5:40:7a:85:fe:d0:40:d9:2e:fc:d0:f7:0b:
68:c8:74:25:4e:fa:c9:41:9b:ed:83:85:a4:1f:f4:f8:dc:1d:
1e:85:cb:5c:21:15:1d:0c:bb:39:14:9a:5c:38:83:c7:f6:cc:
4f:ec:43:03:cd:b1:5c:31:82:dd:08:3c:7f:75:fc:28:ae:6c:
bc:9f:98:98:90:ff:84:40:cf:2b:09:ab:2d:71:bf:35:30:a0:
2f:4d:25:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Up9cke1ilUYR9YBTzX7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj
NDc5NDQwHhcNMjYwMzI5MDIwMDU0WhcNMjYwMzMwMDIwMDU0WjAzMTEwLwYDVQQD
EygzZjhkM2VjNDQ3ZWY5NDZiNjZhZDcyY2YzOWIyNDU4MzU5ZDI1YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLphIGXNdTfCH6DWTFtyknHSdvRv
+UvzZgu6SHk5N0/CLtyuhS40krGGyGxSqVzUfGtdM5F5nA9ggOHlFdaqAEhuE2iE
X5COSzUPX3GgrmPrVuJgtwFUxOMLAmSiKE6g7oxSryMr32tjqys1t5UH4EltsPog
LlsfMcSQRKdrUEpXAnNo4xrkat4BhB+hWq+lLOB68Plw0Xxl6Sg3x3DrJpY1n06Y
vlbtFyo7EC63HHPERYOpxiAq9WPhhIdKx2YI2nzn9BKEaRHtuwvxGQw2ZAM9zjy2
48TOQ5QqWFWXYgq18I/yYIZyHpZiF2dC52W4LpLLGmqCQJhE/O5DU60N2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+NPsRH75RrZq1yzzmyRYNZ0lvMMB8GA1UdIwQY
MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt
MTExM2FlNTYzMzY5LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5
LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhgkmvxw
7k2s2r+R7Lqug5sCDH7ObLzB7NFPvNvs3ZirRGh/O1SApsif+ubLlHCflxTMIyPS
tgamGc5uvLN37ekCcP6Wz976yShXUC0cUyXkqPPW1XpvaqzCYJx1ClV5jX5KeZfU
2UkWNU14I8zAnERx7sJF/dIWaLZids430IJUdnxpCcbuGDAamTWTQJBL3GA53GfO
fitAhbItkN8/G3FdKRZ1FgDVQHqF/tBA2S780PcLaMh0JU76yUGb7YOFpB/0+Nwd
HoXLXCEVHQy7ORSaXDiDx/bMT+xDA82xXDGC3Qg8f3X8KK5svJ+YmJD/hEDPKwmr
LXG/NTCgL00lBg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:58 2026 by rpki-client