Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: GIOh5w3bCwc6jaavDwuFciGdfdEJ6tHpK3/GCObJ0U4=
Subject key identifier: 8B:6C:51:D2:F9:83:F8:96:03:4E:A0:3F:FD:A3:8D:64:10:E0:CE:D9
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 019D3940C2615A780480F6C9F867E68DF0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:38 +0000
Manifest this update: Sun 29 Mar 2026 11:00:38 +0000
Manifest next update: Mon 30 Mar 2026 11:00:38 +0000
Files and hashes: 1: N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa (hash: fc9tBn+6SqJqfSW/GpPBz9lgPSF51UDlJcUc1bmbePQ=)
2: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: Ym3wPHP7/YSsUk9xZlnh9P1B68aS0DgBSql5TlP5DA0=)
3: vm0Cb1QlvcUWqTlVtMYvi0tSg50.roa (hash: vUmX5+CcNp91eGp6cheOPjkV7E2OfS28ZKb/y8YQp0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c2:61:5a:78:04:80:f6:c9:f8:67:e6:8d:f0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Mar 29 11:00:38 2026 GMT
Not After : Mar 30 11:00:38 2026 GMT
Subject: CN=8b6c51d2f983f896034ea03ffda38d6410e0ced9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:08:75:81:60:1e:90:04:80:47:62:61:46:
fe:0d:24:7b:88:c8:3b:e9:8a:d7:14:54:a5:0a:08:
98:c2:b9:95:1b:d3:f3:d4:d8:8f:35:b5:23:d3:4d:
fc:0d:8f:43:69:b3:52:00:ff:c2:42:f2:6b:41:23:
6a:35:08:4c:e4:65:93:cb:cb:1c:33:19:0e:05:51:
5b:af:3e:68:ce:cd:1f:8a:73:b8:95:c1:ac:c7:d6:
d9:7f:c7:76:75:c5:7c:0e:26:5e:d8:4a:69:d5:9f:
ad:e9:d1:09:81:77:0a:db:7c:99:47:69:b7:1f:a4:
16:33:7b:16:a9:be:33:08:21:92:86:09:42:55:c2:
0a:1f:17:ce:ca:7a:2b:4c:62:a4:46:88:b4:b4:4c:
c1:57:22:8b:0d:17:8a:58:62:0f:a6:f2:37:b8:42:
4a:af:1d:b9:0a:9f:53:49:f1:1e:49:82:66:de:b4:
ba:f1:ed:1d:ce:5f:0b:e6:65:98:d4:c4:f0:9a:a5:
54:f3:bf:8e:b7:eb:c9:0b:ae:44:10:55:fe:06:fe:
d4:b8:23:92:5d:7b:6b:7d:a8:1a:b6:2c:77:72:a9:
73:30:24:6e:9d:0f:4e:ae:95:b5:cb:44:14:86:ec:
eb:82:aa:21:48:d5:b6:bf:65:58:d8:52:c9:7f:c9:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:51:D2:F9:83:F8:96:03:4E:A0:3F:FD:A3:8D:64:10:E0:CE:D9
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:a0:66:c4:93:d7:09:43:5b:18:c7:be:7b:79:ff:ed:a4:
15:9f:6b:bf:49:72:b3:48:2a:ab:8d:ba:f7:5b:6b:be:42:f7:
19:0b:9c:0b:0d:e7:56:d0:19:ba:79:64:48:76:58:25:e1:e8:
e4:f2:aa:b5:c3:2a:8d:09:b4:59:c9:31:6d:7c:7b:59:e9:b1:
bf:4d:6f:81:23:6d:ed:2c:4e:0a:4e:5b:bc:27:e3:67:46:1e:
2d:f9:f5:69:a0:3c:9f:38:01:15:c9:ac:6e:7e:25:b7:51:a8:
bb:f1:89:56:df:a5:e0:74:cb:e5:f5:fe:a3:2a:a7:c3:f3:79:
42:fe:e3:92:4c:7b:95:fa:7b:ae:db:cd:89:78:3b:93:13:ce:
2b:f0:e1:79:f8:50:eb:53:a8:ec:6f:d7:0f:e7:55:2f:a7:6d:
81:87:3e:85:1a:a7:50:43:d4:83:bd:3d:e3:36:76:cd:57:0c:
98:6f:35:84:c6:bc:95:38:b5:ba:e8:97:c2:3d:c8:c1:5b:fe:
2f:00:63:62:80:45:04:48:95:40:ae:49:80:c3:51:55:73:4a:
df:bc:7d:5d:3f:d7:d6:b0:20:83:23:61:5a:40:0b:79:d2:57:
94:7f:5b:84:fa:a4:7e:4f:68:26:8c:f3:0f:f4:50:69:5c:05:
eb:55:0d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QMJhWngEgPbJ+GfmjfDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmE1OGM2OTdhMTQ0OTk3NmIwZDExZDZmMTI2MDI1ZTE0
MDg5YzYwHhcNMjYwMzI5MTEwMDM4WhcNMjYwMzMwMTEwMDM4WjAzMTEwLwYDVQQD
Eyg4YjZjNTFkMmY5ODNmODk2MDM0ZWEwM2ZmZGEzOGQ2NDEwZTBjZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDgIdYFgHpAEgEdiYUb+DSR7iMg7
6YrXFFSlCgiYwrmVG9Pz1NiPNbUj0038DY9DabNSAP/CQvJrQSNqNQhM5GWTy8sc
MxkOBVFbrz5ozs0finO4lcGsx9bZf8d2dcV8DiZe2Epp1Z+t6dEJgXcK23yZR2m3
H6QWM3sWqb4zCCGShglCVcIKHxfOynorTGKkRoi0tEzBVyKLDReKWGIPpvI3uEJK
rx25Cp9TSfEeSYJm3rS68e0dzl8L5mWY1MTwmqVU87+Ot+vJC65EEFX+Bv7UuCOS
XXtrfagatix3cqlzMCRunQ9OrpW1y0QUhuzrgqohSNW2v2VY2FLJf8kXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItsUdL5g/iWA06gP/2jjWQQ4M7ZMB8GA1UdIwQY
MBaAFKoqWMaXoUSZdrDRHW8SYCXhQInGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgt
YmU2MjJjMzEzMmRmLzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgtYmU2MjJjMzEzMmRm
LzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ86gZsST
1wlDWxjHvnt5/+2kFZ9rv0lys0gqq42691trvkL3GQucCw3nVtAZunlkSHZYJeHo
5PKqtcMqjQm0WckxbXx7Wemxv01vgSNt7SxOCk5bvCfjZ0YeLfn1aaA8nzgBFcms
bn4lt1Gou/GJVt+l4HTL5fX+oyqnw/N5Qv7jkkx7lfp7rtvNiXg7kxPOK/DhefhQ
61Oo7G/XD+dVL6dtgYc+hRqnUEPUg7094zZ2zVcMmG81hMa8lTi1uuiXwj3IwVv+
LwBjYoBFBEiVQK5JgMNRVXNK37x9XT/X1rAggyNhWkALedJXlH9bhPqkfk9oJozz
D/RQaVwF61UNig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:43 2026 by rpki-client