Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: Fw2toC8jAPImgCHKR8g3M9inka5ZDlfp/H/qp4T9uL4=
Subject key identifier: 25:8E:FE:91:66:04:A5:16:0C:50:19:DC:7E:B8:39:CF:69:BB:9B:5B
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 019D37C0B215C31AA8682C9E9D3AEC500D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 1521
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: 21Yf12X5Xts3sbdn2jGlU_TfEv4.roa (hash: Uc+vkMAdsrzPjHQ3cBJ8s1GbQwnyrG3dngRrn0NPypc=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: KOsl9rew+MErCw5FTDHWTX6qHuy0hF9SgdLT3baHmEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b2:15:c3:1a:a8:68:2c:9e:9d:3a:ec:50:0d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=258efe916604a5160c5019dc7eb839cf69bb9b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:7d:fc:38:f8:99:57:c3:e5:0e:03:2f:0c:
82:bd:09:b3:7a:71:ea:8c:00:9a:a3:3d:9c:bf:1d:
2f:8d:29:61:a2:26:ab:89:20:3f:74:32:df:5d:0e:
f3:44:f4:8e:41:33:e4:f1:26:10:bb:c1:a0:a9:7b:
7b:ae:c1:60:b6:b6:b5:67:66:57:c0:f1:f9:6b:8b:
f0:4d:0f:ca:03:3b:ae:58:92:2c:29:91:91:d2:e0:
ae:a8:10:07:6d:51:00:c0:f1:03:a9:e1:c5:64:0b:
33:b1:d6:68:3f:8e:32:aa:1a:44:ed:26:2d:8f:44:
62:06:79:75:1a:4e:f0:ff:af:87:39:ed:f2:a1:6c:
fb:5c:b8:cd:5d:22:23:5b:47:98:9c:02:e6:c4:39:
2c:77:a9:41:35:ed:90:b5:b3:0c:2e:28:4f:2b:73:
03:68:7b:d6:01:b3:0e:41:03:1b:2b:c3:4e:16:23:
ce:6c:15:d4:74:f7:c9:d2:6c:94:09:e7:57:5d:77:
be:da:d1:8f:74:67:ac:ad:02:99:74:ce:df:bf:0c:
58:3f:a3:7c:55:44:f1:e5:ec:cb:a3:9c:3e:0b:d6:
e4:37:ff:51:4b:fa:d7:9c:59:f2:7a:b4:94:b6:80:
48:62:21:27:5d:56:ec:a9:c4:96:97:8d:40:24:eb:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:FE:91:66:04:A5:16:0C:50:19:DC:7E:B8:39:CF:69:BB:9B:5B
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:a0:d8:ce:04:cd:89:34:7c:bc:53:b9:e4:69:22:fb:48:
e7:b8:14:9a:69:f7:d1:8a:e5:2b:d3:76:1e:1f:b6:cc:ef:08:
c9:eb:59:75:df:c2:b0:f2:b4:d9:b4:82:97:7a:83:f3:2e:37:
1b:c5:ac:8b:dd:81:72:3c:8e:f2:17:29:03:4a:83:42:5b:dd:
34:a7:e2:1e:f9:ea:6c:80:b0:3e:9a:95:24:4c:1e:d2:21:1f:
dd:58:b1:bf:e6:a2:68:3e:9c:12:f4:0c:44:60:50:d7:f8:eb:
e8:19:5a:af:23:86:30:96:98:95:a7:86:14:4c:45:91:19:27:
45:14:7a:b3:a1:39:54:a3:47:82:73:83:83:28:e6:82:ff:46:
e3:7f:74:7f:25:71:35:05:01:25:40:56:38:3c:dd:61:f7:9d:
d0:8b:b4:f7:99:1e:d9:a5:c8:6b:6b:32:90:e4:1a:69:3c:ae:
94:6b:77:6b:7c:6d:36:f3:c0:1b:56:94:78:42:bd:88:ed:c7:
05:f6:fe:7b:26:0b:e6:a0:23:40:4a:20:1d:58:f2:23:15:11:
bf:11:bf:1b:d2:95:24:16:21:43:43:16:9e:83:87:6c:60:9f:
2d:89:35:96:8f:2f:42:5f:d3:0f:79:60:0e:b7:79:21:1e:e0:
df:40:3a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLIVwxqoaCyenTrsUA0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTI1MTE0MDExNGM4ZmQ4YWQ1ZmI0NWI3MTg5YWJhN2Jj
NTA0OGYwHhcNMjYwMzI5MDQwMTA4WhcNMjYwMzMwMDQwMTA4WjAzMTEwLwYDVQQD
EygyNThlZmU5MTY2MDRhNTE2MGM1MDE5ZGM3ZWI4MzljZjY5YmI5YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK59/Dj4mVfD5Q4DLwyCvQmzenHq
jACaoz2cvx0vjSlhoiariSA/dDLfXQ7zRPSOQTPk8SYQu8GgqXt7rsFgtra1Z2ZX
wPH5a4vwTQ/KAzuuWJIsKZGR0uCuqBAHbVEAwPEDqeHFZAszsdZoP44yqhpE7SYt
j0RiBnl1Gk7w/6+HOe3yoWz7XLjNXSIjW0eYnALmxDksd6lBNe2QtbMMLihPK3MD
aHvWAbMOQQMbK8NOFiPObBXUdPfJ0myUCedXXXe+2tGPdGesrQKZdM7fvwxYP6N8
VUTx5ezLo5w+C9bkN/9RS/rXnFnyerSUtoBIYiEnXVbsqcSWl41AJOuGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWO/pFmBKUWDFAZ3H64Oc9pu5tbMB8GA1UdIwQY
MBaAFKiiURQBFMj9itX7RbcYmrp7xQSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEt
ZjA5NDYyYzEyZGE0LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEtZjA5NDYyYzEyZGE0
LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7mg2M4E
zYk0fLxTueRpIvtI57gUmmn30YrlK9N2Hh+2zO8IyetZdd/CsPK02bSCl3qD8y43
G8Wsi92BcjyO8hcpA0qDQlvdNKfiHvnqbICwPpqVJEwe0iEf3Vixv+aiaD6cEvQM
RGBQ1/jr6BlaryOGMJaYlaeGFExFkRknRRR6s6E5VKNHgnODgyjmgv9G4390fyVx
NQUBJUBWODzdYfed0Iu095ke2aXIa2sykOQaaTyulGt3a3xtNvPAG1aUeEK9iO3H
Bfb+eyYL5qAjQEogHVjyIxURvxG/G9KVJBYhQ0MWnoOHbGCfLYk1lo8vQl/TD3lg
Drd5IR7g30A62g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:36 2026 by rpki-client