Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: 7G52ZFMAZ6QtCteEqZ2Cwt7RgGAMgCa9J54H2OSZjeU=
Subject key identifier: 96:65:E6:86:A9:1C:02:C4:F2:E7:72:44:0D:FF:8F:12:1A:64:CA:35
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019D3909EADE74588CD0D6D1D2C87126053E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0A67
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: XR+0FcvdNHQSeknSEaeqe7BzLKcbQsa+qh52iD6Ajow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ea:de:74:58:8c:d0:d6:d1:d2:c8:71:26:05:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=9665e686a91c02c4f2e772440dff8f121a64ca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:2f:ef:5a:8f:59:66:fc:a7:db:4e:98:7f:
d5:c7:a5:cf:39:51:d0:0d:c9:66:80:52:9b:bb:e7:
a0:3d:52:13:ce:5d:46:76:17:dd:12:90:ca:1c:33:
29:5c:3d:2e:58:2e:ef:41:cb:3d:df:26:81:b2:d5:
d7:83:fc:a1:2b:42:90:56:58:30:0a:fe:79:4c:0f:
47:df:54:a3:55:d9:ef:8c:b5:b6:a4:e2:93:ff:92:
ae:ab:f1:0f:36:60:88:f0:eb:62:63:92:f3:07:27:
2d:7b:3e:99:d2:c3:66:48:2c:ac:c1:cb:35:67:94:
ce:1b:0b:6b:32:ae:9d:b0:8d:c5:fb:fd:e4:06:3c:
0d:3c:e0:39:bd:6a:0f:f0:c4:22:92:b6:46:19:35:
9e:86:00:b4:d4:e3:de:c2:96:4e:90:b8:28:d4:64:
e8:0f:8d:d9:77:c5:d9:5c:fd:1a:a9:5a:3f:19:42:
60:4f:29:8b:00:09:71:84:99:b6:db:52:df:67:57:
39:83:5d:e6:6c:90:67:9a:07:6b:ad:58:71:34:8b:
ae:38:32:d2:d3:78:40:28:e1:ce:22:77:be:79:48:
1a:62:8e:c4:55:92:92:76:e4:5d:a4:93:39:ad:02:
13:be:39:4c:bf:1a:bb:67:24:a8:85:52:e2:41:f7:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:E6:86:A9:1C:02:C4:F2:E7:72:44:0D:FF:8F:12:1A:64:CA:35
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:43:8c:e0:d9:d1:a0:19:77:2c:63:3e:8c:8b:a8:15:a8:51:
7b:69:9a:69:8a:eb:11:bd:5b:05:fa:b8:de:1d:ee:6f:ef:21:
58:19:a1:65:a4:ab:4e:89:39:27:0f:ef:b5:b9:bf:db:35:1b:
4e:0c:42:3e:34:6f:c7:21:af:48:fd:93:3c:08:de:7f:20:64:
62:5a:73:37:95:1b:2f:52:75:5c:ab:7c:4d:61:b1:eb:ad:08:
e5:c3:3b:e3:27:4f:74:df:54:ef:81:5c:fa:0a:62:43:ae:a5:
66:8a:bd:e4:d5:00:1a:00:f8:24:c0:73:98:82:e8:47:6e:73:
19:25:e6:c8:b9:50:1f:b3:61:dc:9c:bf:70:99:1e:00:77:c3:
df:8c:05:80:c1:46:2f:a5:20:02:22:c7:03:7a:27:1c:e3:7e:
ed:fe:83:a7:42:d1:1f:ba:b7:92:52:e4:83:2a:3b:74:c6:53:
92:e3:f0:f3:1b:66:e0:98:6a:20:8b:7f:d4:f3:ac:bd:4f:43:
04:c2:97:f1:aa:81:3e:4b:99:9c:2f:84:02:aa:c8:00:6a:00:
25:37:c4:6d:8b:07:a9:46:28:fb:f8:c4:35:3c:59:28:2f:8d:
0e:78:ea:1d:4d:fc:53:73:ac:df:e3:6c:be:1a:6b:88:ad:95:
ab:52:9e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CeredFiM0NbR0shxJgU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk
MGEzYjEwHhcNMjYwMzI5MTAwMDQ0WhcNMjYwMzMwMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg5NjY1ZTY4NmE5MWMwMmM0ZjJlNzcyNDQwZGZmOGYxMjFhNjRjYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypsv71qPWWb8p9tOmH/Vx6XPOVHQ
DclmgFKbu+egPVITzl1GdhfdEpDKHDMpXD0uWC7vQcs93yaBstXXg/yhK0KQVlgw
Cv55TA9H31SjVdnvjLW2pOKT/5Kuq/EPNmCI8OtiY5LzByctez6Z0sNmSCyswcs1
Z5TOGwtrMq6dsI3F+/3kBjwNPOA5vWoP8MQikrZGGTWehgC01OPewpZOkLgo1GTo
D43Zd8XZXP0aqVo/GUJgTymLAAlxhJm221LfZ1c5g13mbJBnmgdrrVhxNIuuODLS
03hAKOHOIne+eUgaYo7EVZKSduRdpJM5rQITvjlMvxq7ZySohVLiQfdhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZl5oapHALE8udyRA3/jxIaZMo1MB8GA1UdIwQY
MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt
ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk
LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEOM4NnR
oBl3LGM+jIuoFahRe2maaYrrEb1bBfq43h3ub+8hWBmhZaSrTok5Jw/vtbm/2zUb
TgxCPjRvxyGvSP2TPAjefyBkYlpzN5UbL1J1XKt8TWGx660I5cM74ydPdN9U74Fc
+gpiQ66lZoq95NUAGgD4JMBzmILoR25zGSXmyLlQH7Nh3Jy/cJkeAHfD34wFgMFG
L6UgAiLHA3onHON+7f6Dp0LRH7q3klLkgyo7dMZTkuPw8xtm4JhqIIt/1POsvU9D
BMKX8aqBPkuZnC+EAqrIAGoAJTfEbYsHqUYo+/jENTxZKC+NDnjqHU38U3Os3+Ns
vhpriK2Vq1Ke9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:44 2026 by rpki-client