Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: B8OR3EG9hJ9a+qsbTjgVR5exDQpdwc118zrIaXl8KO8=
Subject key identifier: 21:29:13:34:AC:21:45:3D:6A:10:98:B5:E3:4C:A1:9E:09:79:F3:F2
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 019D3978112CA8C5DF085976F23F6953D839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 1312
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: DzshirtWicNrDuK0JWqKHNIqs0I.roa (hash: T2DQWKAIsgzJl63HpzB70Owqfsg5T+wUK5RjGOLK3uY=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: cYU4j11DpARwVT8hEEUVPs2n9hJYdRaN7qhXkrK4114=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:11:2c:a8:c5:df:08:59:76:f2:3f:69:53:d8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=21291334ac21453d6a1098b5e34ca19e0979f3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:f8:04:95:2a:de:99:06:8f:f8:d4:6b:71:
3a:02:df:4e:45:08:ed:24:f4:1b:92:9e:88:6a:04:
48:c3:e6:92:22:93:cc:d3:8f:2d:4a:5a:77:d1:73:
43:c0:ef:98:2b:de:60:52:c8:d2:72:e8:90:0f:b1:
84:8b:67:f8:e7:fc:8b:e5:6d:e9:c3:23:b2:02:85:
17:68:14:6b:53:e3:f2:da:5e:fd:51:9d:1e:2a:dd:
84:c8:79:47:0a:d2:2a:98:c1:ca:fe:e4:9d:44:da:
ff:90:c1:2f:54:89:10:e7:49:1c:80:bf:1a:3f:df:
4d:7d:bb:9a:b4:05:32:f0:96:e0:8a:5d:ac:3e:9c:
8c:b3:5f:42:22:ee:4c:94:a9:1d:52:74:a1:e8:a3:
df:8d:82:3f:29:20:ad:bf:fc:79:8e:85:d9:10:f6:
10:04:20:28:33:0d:51:f9:43:b5:ef:b4:86:3b:26:
d9:dd:43:10:c0:ea:e3:ea:26:3c:3e:64:e0:31:e3:
58:b9:4e:b5:94:2e:45:da:2d:3c:d0:19:fb:fe:87:
b6:4b:fb:2b:16:85:06:62:fb:21:e3:8a:11:22:5f:
88:e9:a8:a8:a4:ca:ab:1c:09:6f:43:fb:b3:61:19:
25:96:39:52:f0:b1:fa:9d:68:db:eb:1e:39:d4:91:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:13:34:AC:21:45:3D:6A:10:98:B5:E3:4C:A1:9E:09:79:F3:F2
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:21:2b:a2:3a:81:30:51:96:f6:f8:27:af:f0:cf:aa:1c:44:
72:60:15:e3:bb:30:22:31:e2:84:56:23:d5:43:8b:40:0a:78:
36:61:58:e0:89:1f:67:96:2e:b1:0d:5f:97:cd:e4:c3:ea:d5:
64:c7:08:e9:d0:10:a6:d7:7e:6e:69:e5:da:c8:0f:aa:ba:14:
b1:eb:60:27:67:b9:e6:f4:b9:84:2e:fe:5f:df:cb:0f:4b:00:
2e:1f:91:4b:be:d5:fc:fe:e5:3b:4d:fe:0e:11:9b:8b:20:ff:
10:c1:18:ed:88:31:70:27:b9:07:b6:b2:30:79:7a:41:21:6f:
8c:71:4e:a6:b2:b5:68:ae:fd:8f:93:c4:57:40:58:eb:b7:69:
fc:92:73:e2:35:70:28:07:08:30:87:5b:5a:ae:80:a5:99:3f:
2d:45:7d:95:2b:c0:91:a4:4c:8f:25:d8:cd:f0:3d:db:4e:6d:
8e:fd:b8:92:69:b0:8f:bc:e1:46:b9:c7:a3:0b:5a:35:56:f1:
04:23:fc:e2:68:50:09:54:5d:42:1f:cc:ec:ff:40:5a:f7:15:
6d:c9:c5:a3:a1:11:f9:60:e2:97:d8:8d:23:96:3c:1d:89:01:
b6:08:3e:53:f5:2d:8e:51:49:5c:be:e9:87:df:e7:af:7a:d3:
a2:f8:84:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBEsqMXfCFl28j9pU9g5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj
NWU5NTAwHhcNMjYwMzI5MTIwMTAzWhcNMjYwMzMwMTIwMTAzWjAzMTEwLwYDVQQD
EygyMTI5MTMzNGFjMjE0NTNkNmExMDk4YjVlMzRjYTE5ZTA5NzlmM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8H4BJUq3pkGj/jUa3E6At9ORQjt
JPQbkp6IagRIw+aSIpPM048tSlp30XNDwO+YK95gUsjScuiQD7GEi2f45/yL5W3p
wyOyAoUXaBRrU+Py2l79UZ0eKt2EyHlHCtIqmMHK/uSdRNr/kMEvVIkQ50kcgL8a
P99NfbuatAUy8Jbgil2sPpyMs19CIu5MlKkdUnSh6KPfjYI/KSCtv/x5joXZEPYQ
BCAoMw1R+UO177SGOybZ3UMQwOrj6iY8PmTgMeNYuU61lC5F2i080Bn7/oe2S/sr
FoUGYvsh44oRIl+I6aiopMqrHAlvQ/uzYRklljlS8LH6nWjb6x451JFuTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEpEzSsIUU9ahCYteNMoZ4JefPyMB8GA1UdIwQY
MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt
OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0
LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSErojqB
MFGW9vgnr/DPqhxEcmAV47swIjHihFYj1UOLQAp4NmFY4IkfZ5YusQ1fl83kw+rV
ZMcI6dAQptd+bmnl2sgPqroUsetgJ2e55vS5hC7+X9/LD0sALh+RS77V/P7lO03+
DhGbiyD/EMEY7YgxcCe5B7ayMHl6QSFvjHFOprK1aK79j5PEV0BY67dp/JJz4jVw
KAcIMIdbWq6ApZk/LUV9lSvAkaRMjyXYzfA9205tjv24kmmwj7zhRrnHowtaNVbx
BCP84mhQCVRdQh/M7P9AWvcVbcnFo6ER+WDil9iNI5Y8HYkBtgg+U/UtjlFJXL7p
h9/nr3rToviEJg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:58 2026 by rpki-client