Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: wpTtS9T36NpXuPlHivntYrwu9U0dGDWJjDiee7gK+Yw=
Subject key identifier: D1:C6:3D:BA:9A:9C:AF:25:05:8D:9F:34:80:C6:79:5A:22:E8:EB:A2
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 019D389C00A778329313BBFC83577FD311D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 14EC
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: IWErWVtspulYBc2P0UkO-q5egfs.roa (hash: lBRwxz9Xohtldef78/SXShaF/JL3thmNLA+SU9F6qTI=)
2: dFq--4OMc9Rjg5-mNAsJIFvbJME.roa (hash: KdydhQpjZ/9bUOR6cl5ITO2afuDxYiCJCh8ZvZyKzpE=)
3: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: Vz5bGwV4VaeJ9KByTkzI58kophNoMsKJm+vo1c8OrGc=)
4: yRUaitnmXUxZxGbULPkZbaJ4rlQ.roa (hash: C+dkviU9NULiViFs9l9KMMoHApjfQiWaRWnrAEZ92P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:00:a7:78:32:93:13:bb:fc:83:57:7f:d3:11:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=d1c63dba9a9caf25058d9f3480c6795a22e8eba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:62:25:3c:6f:4f:00:e8:3e:89:d4:70:3d:19:
ed:4e:91:d8:ae:32:9c:fc:a3:cd:4d:92:95:5b:26:
7c:e6:13:75:f7:42:d0:68:80:04:8f:1f:bb:0d:3d:
ce:e4:a7:c8:66:2b:63:ba:6a:de:1e:5c:5a:b8:dc:
f0:1d:2e:12:2e:e6:b1:c7:80:7e:d7:14:a3:5a:e2:
70:90:4f:60:fa:cc:7f:23:69:72:76:f4:c9:50:fb:
84:4a:86:f5:7f:bd:37:51:06:b4:af:f6:13:ed:7c:
5b:9d:ed:ba:2d:f3:d1:93:4d:a9:0a:0c:a8:8f:89:
c0:b9:fb:66:ad:87:61:ff:65:49:26:14:10:1d:93:
0d:56:72:25:06:88:eb:7b:33:07:ed:44:28:cc:8c:
11:1a:9c:ed:8f:dc:ca:02:00:be:23:0a:f1:2d:65:
a6:7c:e9:2c:6b:66:92:cb:6b:85:ea:bb:c9:73:a1:
84:6e:a4:86:9e:a6:40:da:9e:9f:7d:9b:ef:7b:15:
6f:9c:25:0b:ce:c6:a3:91:a5:99:74:60:76:18:99:
37:8c:4a:85:6b:b5:fe:72:16:d2:2b:5f:7e:c3:96:
a6:5e:77:c1:1d:ab:28:4c:b9:bb:19:f3:01:a4:f9:
fe:58:e4:65:5d:6f:af:07:38:6f:66:52:a9:71:d8:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:3D:BA:9A:9C:AF:25:05:8D:9F:34:80:C6:79:5A:22:E8:EB:A2
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:29:ea:4a:61:c8:f3:1a:15:0e:2a:da:5a:3d:7c:78:1d:91:
19:19:45:6a:df:77:fa:36:f0:ae:ef:65:56:ec:0d:93:25:db:
80:74:d0:63:7c:1b:c3:a5:92:15:a9:5d:0f:f1:0b:f5:27:70:
55:90:74:87:87:1f:2c:89:f0:73:c7:b0:91:2a:3d:fa:b9:60:
fa:8a:c1:23:d5:38:6e:f3:50:6b:6a:b1:9a:75:c9:0e:65:49:
09:3a:42:95:55:05:31:e9:0d:96:39:05:fc:5c:6c:e2:91:4a:
cd:dd:60:f1:85:72:f5:af:5f:1c:34:a5:e6:1b:1c:c0:cc:91:
74:12:fa:d8:f7:8b:06:56:34:5d:d5:7a:0f:3f:ee:d1:1d:b5:
b7:3b:53:76:b3:f3:9e:27:1c:be:71:82:cd:da:40:d0:97:0f:
9f:f1:e9:59:be:aa:e5:15:1b:fe:c8:6a:ca:1a:56:65:56:f8:
50:be:3e:10:4d:d1:b2:e9:88:e5:70:ba:03:8f:ee:34:95:55:
03:44:a2:52:7b:e4:e5:ac:f7:14:d4:41:1d:2d:ab:76:bc:a3:
83:22:ab:25:9c:f1:dc:1b:9a:1b:42:16:27:98:20:d9:33:88:
93:25:61:7c:58:de:94:c0:53:14:93:5e:60:53:22:4d:2b:c7:
96:55:21:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nACneDKTE7v8g1d/0xHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh
NjVjYTMwHhcNMjYwMzI5MDgwMDQwWhcNMjYwMzMwMDgwMDQwWjAzMTEwLwYDVQQD
EyhkMWM2M2RiYTlhOWNhZjI1MDU4ZDlmMzQ4MGM2Nzk1YTIyZThlYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2IlPG9PAOg+idRwPRntTpHYrjKc
/KPNTZKVWyZ85hN190LQaIAEjx+7DT3O5KfIZitjumreHlxauNzwHS4SLuaxx4B+
1xSjWuJwkE9g+sx/I2lydvTJUPuESob1f703UQa0r/YT7Xxbne26LfPRk02pCgyo
j4nAuftmrYdh/2VJJhQQHZMNVnIlBojrezMH7UQozIwRGpztj9zKAgC+IwrxLWWm
fOksa2aSy2uF6rvJc6GEbqSGnqZA2p6ffZvvexVvnCULzsajkaWZdGB2GJk3jEqF
a7X+chbSK19+w5amXnfBHasoTLm7GfMBpPn+WORlXW+vBzhvZlKpcdhAFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHGPbqanK8lBY2fNIDGeVoi6OuiMB8GA1UdIwQY
MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt
ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2
LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApynqSmHI
8xoVDiraWj18eB2RGRlFat93+jbwru9lVuwNkyXbgHTQY3wbw6WSFaldD/EL9Sdw
VZB0h4cfLInwc8ewkSo9+rlg+orBI9U4bvNQa2qxmnXJDmVJCTpClVUFMekNljkF
/Fxs4pFKzd1g8YVy9a9fHDSl5hscwMyRdBL62PeLBlY0XdV6Dz/u0R21tztTdrPz
niccvnGCzdpA0JcPn/HpWb6q5RUb/shqyhpWZVb4UL4+EE3RsumI5XC6A4/uNJVV
A0SiUnvk5az3FNRBHS2rdryjgyKrJZzx3BuaG0IWJ5gg2TOIkyVhfFjelMBTFJNe
YFMiTSvHllUhIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:18 2026 by rpki-client