Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: 0pp6c4DUANMjcOnqJJ+6caR6RimgcHDcdneBZlL4tQk=
Subject key identifier: F8:21:22:74:AF:73:3E:F9:6F:4B:29:F2:35:52:65:FC:67:74:67:AA
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019DB358E35C18580BD7DB76450D7F4E0F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 11D3
Signing time: Wed 22 Apr 2026 04:00:40 +0000
Manifest this update: Wed 22 Apr 2026 04:00:40 +0000
Manifest next update: Thu 23 Apr 2026 04:00:40 +0000
Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: iu4L+zHv4wrqjtsYbw2+gPhzug94UrSNrTF9QxxUE/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:58:e3:5c:18:58:0b:d7:db:76:45:0d:7f:4e:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Apr 22 04:00:40 2026 GMT
Not After : Apr 23 04:00:40 2026 GMT
Subject: CN=f8212274af733ef96f4b29f2355265fc677467aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:5f:0f:ef:e7:4f:78:92:79:83:a9:ed:28:
9c:43:11:af:ee:c0:af:8f:57:68:d9:0f:93:97:78:
e3:2b:ab:d2:9b:a9:e7:2d:33:fb:c6:b0:0e:48:72:
b4:f7:8c:58:ee:d6:25:4b:9d:9b:af:1a:c1:f5:a6:
e2:46:26:5c:32:6e:d5:42:25:37:23:7c:d7:a7:28:
70:66:00:73:32:73:1e:3c:87:a7:72:99:a7:73:8b:
e3:4b:2f:fb:eb:5c:d5:e0:0c:2d:fa:57:ca:81:a0:
49:e2:58:2a:bd:54:1a:9e:09:21:06:25:e6:6f:9f:
5e:44:f7:5b:95:e8:9a:71:56:6e:d0:65:e0:16:cb:
39:7f:1b:51:8e:61:2a:92:c2:5d:fb:ee:82:f8:72:
5e:b6:2a:dd:8a:5d:4b:f1:44:c0:b0:ae:42:b6:25:
54:cd:96:c3:81:27:af:e1:56:6d:da:a3:9b:c2:53:
4d:ee:30:7c:12:0a:f1:af:46:16:92:d9:be:2e:42:
50:26:e8:7f:16:91:52:e8:2a:c9:ba:6c:f4:14:82:
ab:6f:e6:99:be:1d:7f:9b:f0:9c:7a:0f:d6:29:27:
80:a6:73:be:c4:d9:75:9f:ca:f9:4d:37:e8:1a:b1:
79:82:50:60:56:07:0a:9c:e0:b3:98:53:23:fd:ca:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:22:74:AF:73:3E:F9:6F:4B:29:F2:35:52:65:FC:67:74:67:AA
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:ed:42:21:71:97:9b:72:67:eb:cb:d4:bc:90:7a:f9:d8:
62:c4:1c:66:aa:7e:f9:97:d7:11:f3:d4:d7:f3:8c:5b:0d:53:
ff:f5:37:aa:1f:5d:e5:d6:38:4f:66:54:cb:f1:2b:3a:c6:28:
57:98:36:a2:b9:ea:e7:00:8f:e9:79:54:2b:a3:23:fd:e6:97:
3e:9f:1c:7d:d7:ca:86:28:9d:65:99:f4:d6:86:2b:9d:27:04:
2a:a5:7a:6a:0e:1c:3c:d1:c9:78:ee:7a:7a:7d:29:46:4e:02:
8f:ec:d7:a7:46:35:fa:18:33:c2:7b:97:f0:e9:36:40:12:a3:
bd:e7:86:08:e7:69:b3:64:cf:df:ca:24:76:69:10:b4:64:4b:
f4:2c:f4:b1:b3:c8:c6:6e:b3:c3:e4:9a:76:6d:0a:24:df:76:
fb:54:75:57:8a:da:e6:3f:5e:2b:29:2e:d5:96:94:8e:d3:2a:
a7:98:1b:84:09:b3:bb:4d:b2:86:99:19:e0:40:8d:4d:84:b7:
0a:4d:04:89:a4:5c:1f:a3:4b:3c:3c:c0:19:44:6f:87:47:0b:
32:12:af:f0:bc:e3:1f:07:12:50:3a:b2:43:0f:af:c0:c8:11:
25:f9:99:6c:24:70:fa:95:88:11:40:71:a7:e5:18:ef:da:50:
6a:fe:00:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2zWONcGFgL19t2RQ1/Tg8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3
NmM1YTgwHhcNMjYwNDIyMDQwMDQwWhcNMjYwNDIzMDQwMDQwWjAzMTEwLwYDVQQD
EyhmODIxMjI3NGFmNzMzZWY5NmY0YjI5ZjIzNTUyNjVmYzY3NzQ2N2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1VfD+/nT3iSeYOp7SicQxGv7sCv
j1do2Q+Tl3jjK6vSm6nnLTP7xrAOSHK094xY7tYlS52brxrB9abiRiZcMm7VQiU3
I3zXpyhwZgBzMnMePIencpmnc4vjSy/761zV4Awt+lfKgaBJ4lgqvVQangkhBiXm
b59eRPdbleiacVZu0GXgFss5fxtRjmEqksJd++6C+HJetirdil1L8UTAsK5CtiVU
zZbDgSev4VZt2qObwlNN7jB8Egrxr0YWktm+LkJQJuh/FpFS6CrJumz0FIKrb+aZ
vh1/m/Cceg/WKSeApnO+xNl1n8r5TTfoGrF5glBgVgcKnOCzmFMj/cq76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPghInSvcz75b0sp8jVSZfxndGeqMB8GA1UdIwQY
MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt
NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4
LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjztQiFx
l5tyZ+vL1LyQevnYYsQcZqp++ZfXEfPU1/OMWw1T//U3qh9d5dY4T2ZUy/ErOsYo
V5g2ornq5wCP6XlUK6Mj/eaXPp8cfdfKhiidZZn01oYrnScEKqV6ag4cPNHJeO56
en0pRk4Cj+zXp0Y1+hgzwnuX8Ok2QBKjveeGCOdps2TP38okdmkQtGRL9Cz0sbPI
xm6zw+Sadm0KJN92+1R1V4ra5j9eKyku1ZaUjtMqp5gbhAmzu02yhpkZ4ECNTYS3
Ck0EiaRcH6NLPDzAGURvh0cLMhKv8LzjHwcSUDqyQw+vwMgRJfmZbCRw+pWIEUBx
p+UY79pQav4Aqg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 10:59:16 2026 by rpki-client