Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft
File: qH6n63punQ1JrAXyWjeT6mv5vNU.mft (raw, json)
Hash identifier: KhqQWkof32rQQ+lXIaFARVk0q3UAvGx6wtVNp6uAS/E=
Subject key identifier: B5:25:36:22:EE:CD:3A:BC:3C:31:14:10:74:94:5D:48:63:E8:E0:12
Authority key identifier: A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5
Certificate issuer: /CN=a87ea7eb7a6e9d0d49ac05f25a3793ea6bf9bcd5
Certificate serial: 019D389C05D91987FC597083735E3C6A3DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft
Manifest number: D5
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: qH6n63punQ1JrAXyWjeT6mv5vNU.crl (hash: QUnN95K76RVC1QXEa1D20a6zyAaP62c6aW9piNoXErc=)
2: vxY5YOyQJopbX8qpr14Ux26RkdM.roa (hash: fDAHQs3Q5OImjbGfqBRNlC+Qd/ubkf2mMZjSA+aTwZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:05:d9:19:87:fc:59:70:83:73:5e:3c:6a:3d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87ea7eb7a6e9d0d49ac05f25a3793ea6bf9bcd5
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=b5253622eecd3abc3c31141074945d4863e8e012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:27:dd:b5:7d:a4:cb:5c:c1:dc:fb:8e:5a:
de:ab:8a:83:1e:6c:b5:15:d3:c2:d0:f8:d4:8d:22:
43:ec:69:c3:8c:9b:ca:8b:50:cc:7e:1b:53:19:d7:
60:e7:06:be:c0:92:45:d4:47:6a:0d:85:b2:e3:ed:
9a:7f:f4:0a:fb:43:7c:6c:43:12:cb:c4:27:cd:1a:
91:d4:13:c2:4b:9d:05:84:67:5e:5f:25:a2:bf:e1:
aa:eb:3d:13:5f:ab:f9:81:2c:08:3a:34:8a:ee:60:
70:5e:f3:3b:ff:ce:54:49:1e:21:2d:c2:79:e4:43:
44:d9:55:d6:f5:45:26:f2:38:05:ad:6a:c3:07:27:
61:d4:55:cf:67:3c:7b:72:29:7a:08:25:df:be:db:
e7:73:84:55:4d:6b:c9:72:4d:05:b7:9d:59:eb:98:
e9:c0:05:52:59:9d:d8:b8:26:92:0e:be:28:d4:32:
94:e8:37:ba:36:37:37:ba:8c:9f:9a:0c:ba:c6:70:
6b:5b:0e:2e:4b:0b:00:9e:72:ce:ec:95:49:c2:1b:
88:7e:20:fe:ef:2b:a5:3f:41:35:ce:04:ff:92:70:
f1:6d:d5:91:5d:a4:30:79:06:45:e6:03:53:ae:96:
8a:72:77:3a:49:95:a4:f1:c6:66:a6:24:fc:2f:70:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:25:36:22:EE:CD:3A:BC:3C:31:14:10:74:94:5D:48:63:E8:E0:12
X509v3 Authority Key Identifier:
keyid:A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:e8:9f:5a:b0:57:6c:95:e1:2a:ea:6f:17:c1:fc:d1:ed:
04:94:bc:4b:70:28:82:58:5d:09:cf:56:86:13:3e:6f:aa:51:
57:14:2d:fc:f2:5d:09:13:a7:86:01:56:59:58:33:4e:4f:ff:
a9:fb:5c:1c:a9:7f:26:50:ec:99:4f:02:58:d0:74:cf:96:a0:
e9:bb:f4:27:b1:f9:03:69:eb:a0:ce:53:d6:d6:5a:55:1b:71:
e3:43:04:ed:dc:4b:39:b0:1d:51:44:1f:ba:bc:05:20:90:b2:
36:2b:b1:14:44:8d:9d:3d:99:2f:1e:9f:d6:74:f0:15:31:a2:
d6:47:0d:bf:2b:ba:fa:e4:20:ad:36:49:6b:06:18:30:cd:52:
a4:c9:38:40:bc:68:e6:c2:2a:64:9c:b4:8a:c5:77:48:ca:6a:
3a:07:3c:7c:33:49:b2:35:e4:ad:10:9e:64:51:1e:b5:85:d5:
6c:dd:51:7e:bf:44:26:84:0a:73:70:ad:95:be:e4:d9:31:02:
bd:9c:28:f0:b7:84:5a:78:31:57:90:e7:4d:99:f7:e7:c4:fb:
02:4d:62:76:79:1e:f2:c9:cd:44:9b:27:2d:fa:9c:30:00:a1:
52:aa:3e:f7:6c:8c:9e:a2:75:e6:46:da:6b:a4:1b:30:74:6e:
b5:63:7e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAXZGYf8WXCDc148aj2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4N2VhN2ViN2E2ZTlkMGQ0OWFjMDVmMjVhMzc5M2VhNmJm
OWJjZDUwHhcNMjYwMzI5MDgwMDQyWhcNMjYwMzMwMDgwMDQyWjAzMTEwLwYDVQQD
EyhiNTI1MzYyMmVlY2QzYWJjM2MzMTE0MTA3NDk0NWQ0ODYzZThlMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHIn3bV9pMtcwdz7jlreq4qDHmy1
FdPC0PjUjSJD7GnDjJvKi1DMfhtTGddg5wa+wJJF1EdqDYWy4+2af/QK+0N8bEMS
y8QnzRqR1BPCS50FhGdeXyWiv+Gq6z0TX6v5gSwIOjSK7mBwXvM7/85USR4hLcJ5
5ENE2VXW9UUm8jgFrWrDBydh1FXPZzx7cil6CCXfvtvnc4RVTWvJck0Ft51Z65jp
wAVSWZ3YuCaSDr4o1DKU6De6Njc3uoyfmgy6xnBrWw4uSwsAnnLO7JVJwhuIfiD+
7yulP0E1zgT/knDxbdWRXaQweQZF5gNTrpaKcnc6SZWk8cZmpiT8L3BYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUlNiLuzTq8PDEUEHSUXUhj6OASMB8GA1UdIwQY
MBaAFKh+p+t6bp0NSawF8lo3k+pr+bzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUg2bjYzcHVuUTFKckFYeVdqZVQ2bXY1dk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82MWQyNzItYWRmYy00OGVmLWIyM2It
YjQzMzIzMGY0NmUyLzEvcUg2bjYzcHVuUTFKckFYeVdqZVQ2bXY1dk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82MWQyNzItYWRmYy00OGVmLWIyM2ItYjQzMzIzMGY0NmUy
LzEvcUg2bjYzcHVuUTFKckFYeVdqZVQ2bXY1dk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUHon1qw
V2yV4SrqbxfB/NHtBJS8S3AoglhdCc9WhhM+b6pRVxQt/PJdCROnhgFWWVgzTk//
qftcHKl/JlDsmU8CWNB0z5ag6bv0J7H5A2nroM5T1tZaVRtx40ME7dxLObAdUUQf
urwFIJCyNiuxFESNnT2ZLx6f1nTwFTGi1kcNvyu6+uQgrTZJawYYMM1SpMk4QLxo
5sIqZJy0isV3SMpqOgc8fDNJsjXkrRCeZFEetYXVbN1Rfr9EJoQKc3Ctlb7k2TEC
vZwo8LeEWngxV5DnTZn358T7Ak1idnke8snNRJsnLfqcMAChUqo+92yMnqJ15kba
a6QbMHRutWN+CQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:32 2026 by rpki-client