Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: A/06hCIY7lyNffONaEt5cjKRjRcNMmeISRrnsvlVl/A=
Subject key identifier: 70:EC:6C:8C:C7:68:C7:D4:A3:7F:9A:CB:AF:24:36:68:23:D5:13:96
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 019D37C05AFA89E8F48758A57F9E34BAF335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0E6B
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: lUzKNBJg8UfPcme69tlyDaYrw7I.roa (hash: qrZuoQH6V4bS9GSWmYNEQuhGhYESYIo8galvFyCIozE=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: JvAcUmn0jQFgJIobb8EwVimb9R6SPc0RWnMa7qSUmFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5a:fa:89:e8:f4:87:58:a5:7f:9e:34:ba:f3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=70ec6c8cc768c7d4a37f9acbaf24366823d51396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:23:0b:e9:67:e6:9c:5b:17:30:84:ab:48:
fe:2a:7d:c5:d8:c5:eb:47:48:a2:f4:dd:b1:5a:89:
57:d6:f5:6f:17:36:26:4a:c9:74:08:d0:49:97:9a:
91:c1:f6:b7:88:ae:f0:c9:4c:70:76:38:f2:a3:6a:
b7:cb:00:f7:86:96:aa:c8:d7:ec:0e:5d:52:ef:67:
10:f4:9b:9e:e1:2d:2e:50:c4:5c:97:a0:5a:0d:ff:
63:6a:d4:8f:92:7d:a1:66:42:74:5b:90:2f:66:3b:
a8:40:07:bf:0c:fd:2c:24:61:b6:4e:99:c9:e7:d7:
e8:88:a6:be:df:15:41:b2:63:9b:9e:eb:c3:7c:93:
26:98:85:39:a8:d0:9b:9e:b1:9e:f2:2e:b5:c4:af:
10:7f:ac:92:22:86:a6:f1:ae:ed:87:a3:56:80:fe:
fb:07:68:eb:46:a2:a3:f8:6f:44:5d:00:2c:ea:f7:
b3:3f:f0:10:7f:52:4c:b8:55:8b:2f:26:81:ac:f6:
6e:b2:19:42:7a:6e:e3:45:5b:2a:a4:70:d5:50:89:
f1:9f:b1:ce:93:52:a9:db:49:8d:b7:54:ea:93:29:
4b:be:dd:57:71:67:5b:ae:e4:76:bc:de:54:3b:bc:
1f:4d:5b:fd:03:ed:be:69:a9:cf:87:0c:5c:a7:48:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:6C:8C:C7:68:C7:D4:A3:7F:9A:CB:AF:24:36:68:23:D5:13:96
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5a:e1:0c:2a:4d:3e:e0:88:c5:16:01:56:1c:73:d7:1b:97:
ce:b2:62:f7:43:16:3f:07:4e:67:5b:65:df:04:a8:5e:9e:bd:
10:e2:6c:f0:3a:c1:49:92:6c:d3:f1:ca:1b:f8:2f:2f:77:d4:
c2:d1:f9:53:34:e1:f7:b6:02:9a:ae:e8:4f:d0:d8:44:a8:96:
95:52:6c:5a:30:74:82:9a:bc:f6:f5:44:a4:3b:cd:d3:b7:90:
c2:35:9d:62:81:2f:f9:80:b0:cd:8e:59:ed:a3:3a:e1:ff:d0:
d6:39:d1:c0:fa:c8:e1:13:55:b0:87:b1:c4:2c:7c:8c:69:ee:
34:7d:07:a4:64:fc:34:7c:cd:5e:23:98:b9:4f:4f:3a:95:e0:
38:29:4d:e5:c2:e2:1b:7f:37:3a:cf:8a:4d:c1:1a:de:b3:e3:
79:1a:85:56:21:38:c3:85:29:fb:4b:fb:3f:53:8f:24:e2:ec:
d6:50:57:e2:8f:52:c8:9a:17:d6:e7:49:fb:d0:8d:f5:54:f5:
6a:96:1b:d2:99:a7:39:6a:15:a7:44:52:71:cd:5b:79:56:3a:
d2:31:8e:70:93:e6:1a:48:f1:c9:3c:a6:c3:cc:5e:cf:5c:c9:
78:4a:e1:15:48:42:92:0e:91:34:d7:c3:99:a8:1f:eb:5e:af:
f2:08:4e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFr6iej0h1ilf540uvM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0
Y2RhODAwHhcNMjYwMzI5MDQwMDQ2WhcNMjYwMzMwMDQwMDQ2WjAzMTEwLwYDVQQD
Eyg3MGVjNmM4Y2M3NjhjN2Q0YTM3ZjlhY2JhZjI0MzY2ODIzZDUxMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gYjC+ln5pxbFzCEq0j+Kn3F2MXr
R0ii9N2xWolX1vVvFzYmSsl0CNBJl5qRwfa3iK7wyUxwdjjyo2q3ywD3hpaqyNfs
Dl1S72cQ9Jue4S0uUMRcl6BaDf9jatSPkn2hZkJ0W5AvZjuoQAe/DP0sJGG2TpnJ
59foiKa+3xVBsmObnuvDfJMmmIU5qNCbnrGe8i61xK8Qf6ySIoam8a7th6NWgP77
B2jrRqKj+G9EXQAs6vezP/AQf1JMuFWLLyaBrPZushlCem7jRVsqpHDVUInxn7HO
k1Kp20mNt1TqkylLvt1XcWdbruR2vN5UO7wfTVv9A+2+aanPhwxcp0jr+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDsbIzHaMfUo3+ay68kNmgj1ROWMB8GA1UdIwQY
MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et
MzMwYjhhZDQyNGJkLzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk
LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolrhDCpN
PuCIxRYBVhxz1xuXzrJi90MWPwdOZ1tl3wSoXp69EOJs8DrBSZJs0/HKG/gvL3fU
wtH5UzTh97YCmq7oT9DYRKiWlVJsWjB0gpq89vVEpDvN07eQwjWdYoEv+YCwzY5Z
7aM64f/Q1jnRwPrI4RNVsIexxCx8jGnuNH0HpGT8NHzNXiOYuU9POpXgOClN5cLi
G383Os+KTcEa3rPjeRqFViE4w4Up+0v7P1OPJOLs1lBX4o9SyJoX1udJ+9CN9VT1
apYb0pmnOWoVp0RScc1beVY60jGOcJPmGkjxyTymw8xez1zJeErhFUhCkg6RNNfD
magf616v8ghOFQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:10 2026 by rpki-client