Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: TOHvzQw5DmPjXqEbJBvPY0rtvGjKKZSVnCbOM+rOJZg=
Subject key identifier: 8A:32:7A:45:6E:A9:E1:49:F1:AC:09:45:3F:70:AB:84:91:42:C4:34
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 019DDCFAE1C42B2D540298F69606058F3125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 0D77
Signing time: Thu 30 Apr 2026 06:02:02 +0000
Manifest this update: Thu 30 Apr 2026 06:02:02 +0000
Manifest next update: Fri 01 May 2026 06:02:02 +0000
Files and hashes: 1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: t+KOmBX8Nf3sEstGYCu7EBd+HJ/GEqXyYnHlK9L6zuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:e1:c4:2b:2d:54:02:98:f6:96:06:05:8f:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Apr 30 06:02:02 2026 GMT
Not After : May 1 06:02:02 2026 GMT
Subject: CN=8a327a456ea9e149f1ac09453f70ab849142c434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:7c:8e:80:46:c0:66:8c:29:0d:ba:de:d0:
22:76:71:f6:d6:8d:4e:72:09:47:ad:8e:f9:fe:fe:
4f:f3:69:3c:71:f6:1c:57:7c:b8:49:22:7d:23:9c:
c4:aa:54:c7:5c:c6:84:6b:e6:a5:5e:c7:58:35:9a:
b4:1a:eb:7c:d3:12:26:8d:e4:35:93:52:7b:e3:cd:
81:d3:11:41:25:13:a9:41:ef:3e:5e:04:78:09:25:
33:89:af:8d:8d:1d:1d:23:08:08:35:81:4c:dc:5d:
0a:84:c4:6f:0b:0c:56:6f:37:f7:ad:b5:e4:8f:ff:
27:2a:a2:32:06:98:a2:17:1c:2c:b9:bf:4c:3e:d2:
04:c3:61:12:81:ba:dc:b6:04:27:09:21:fa:16:83:
a2:3e:99:52:bd:9c:72:3c:8b:99:4d:09:c1:45:1d:
fa:d3:c9:32:b5:0a:02:f7:37:50:7e:2c:7a:e2:53:
e5:78:04:c2:c0:e7:5a:eb:75:1a:ee:c9:cf:9c:a9:
82:a1:94:84:27:b7:5c:59:8b:36:64:69:76:4b:51:
ce:34:3a:92:be:49:e9:14:c1:5e:9e:1a:fb:e9:5a:
1d:d6:5b:d3:94:c7:f8:2b:96:49:e6:7c:b2:b8:bb:
66:c2:33:d8:e6:e3:96:b4:cd:9e:05:3d:50:22:98:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:7A:45:6E:A9:E1:49:F1:AC:09:45:3F:70:AB:84:91:42:C4:34
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b3:36:2a:64:10:d6:04:2f:b7:5f:bb:87:f3:21:74:4e:14:
a8:54:29:3d:6d:15:df:b7:0f:7d:57:3f:4b:cc:0d:f8:77:43:
88:0f:0d:5e:2e:f4:32:0e:ea:a1:59:dd:92:6e:7f:55:a0:44:
a1:ef:36:87:05:23:4a:05:51:4c:d2:ac:fa:50:bf:17:82:22:
47:28:9b:53:78:13:aa:17:9f:87:6c:60:46:d2:0c:e1:c1:56:
d6:34:ca:1f:63:a5:04:e2:68:f8:1e:06:58:b7:3e:ee:21:bb:
4e:f2:f1:4c:14:20:b5:06:19:69:a1:b6:13:1c:0d:b7:cc:d7:
b5:ca:90:41:eb:c9:6e:61:cd:3a:2e:a6:2b:f9:f8:65:d9:e0:
1c:72:b2:d2:de:fa:7f:43:3d:31:41:9d:cc:70:b1:20:18:7c:
7d:e0:9e:6b:1d:0d:dd:de:1d:34:97:43:04:5b:04:f9:33:74:
f4:3d:86:5d:7c:1e:1c:40:ab:77:ba:39:79:0a:33:9b:ba:e0:
18:47:f0:37:1f:84:bf:14:69:5a:56:49:c9:36:19:28:f4:a6:
c6:1c:1b:f1:2a:f9:06:c2:60:c2:a8:b1:56:85:b8:46:ac:ed:
ac:44:7b:bb:a7:74:73:43:e0:85:00:00:7e:05:43:d7:81:be:
66:15:60:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3c+uHEKy1UApj2lgYFjzElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjYwNDMwMDYwMjAyWhcNMjYwNTAxMDYwMjAyWjAzMTEwLwYDVQQD
Eyg4YTMyN2E0NTZlYTllMTQ5ZjFhYzA5NDUzZjcwYWI4NDkxNDJjNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg58joBGwGaMKQ263tAidnH21o1O
cglHrY75/v5P82k8cfYcV3y4SSJ9I5zEqlTHXMaEa+alXsdYNZq0Gut80xImjeQ1
k1J7482B0xFBJROpQe8+XgR4CSUzia+NjR0dIwgINYFM3F0KhMRvCwxWbzf3rbXk
j/8nKqIyBpiiFxwsub9MPtIEw2ESgbrctgQnCSH6FoOiPplSvZxyPIuZTQnBRR36
08kytQoC9zdQfix64lPleATCwOda63Ua7snPnKmCoZSEJ7dcWYs2ZGl2S1HONDqS
vknpFMFenhr76Vod1lvTlMf4K5ZJ5nyyuLtmwjPY5uOWtM2eBT1QIpgx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoyekVuqeFJ8awJRT9wq4SRQsQ0MB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrM2KmQQ
1gQvt1+7h/MhdE4UqFQpPW0V37cPfVc/S8wN+HdDiA8NXi70Mg7qoVndkm5/VaBE
oe82hwUjSgVRTNKs+lC/F4IiRyibU3gTqhefh2xgRtIM4cFW1jTKH2OlBOJo+B4G
WLc+7iG7TvLxTBQgtQYZaaG2ExwNt8zXtcqQQevJbmHNOi6mK/n4ZdngHHKy0t76
f0M9MUGdzHCxIBh8feCeax0N3d4dNJdDBFsE+TN09D2GXXweHECrd7o5eQozm7rg
GEfwNx+EvxRpWlZJyTYZKPSmxhwb8Sr5BsJgwqixVoW4RqztrER7u6d0c0PghQAA
fgVD14G+ZhVgiA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:37 2026 by rpki-client