Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: aWS0xwKJkq5+Ob5xrLP9jjVphCIezA1F2lxVMnPGRlQ=
Subject key identifier: EB:09:3D:CF:C8:A2:39:0D:0F:36:E2:E8:29:18:E9:80:7B:66:C7:46
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019D3909CD7C6986580297C0553F3DABC780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: EvLXPPZQ1y2R1OsQCl8arkBPfCmeyiLSjub+s1J45og=)
2: hGGdrn8Q-dhLWfi_gTkJoK3l29E.roa (hash: 9MCdA6GuzpZs6FZt15tnmy+ZE9OMe0TMy0YGpKngBio=)
3: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (hash: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cd:7c:69:86:58:02:97:c0:55:3f:3d:ab:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=eb093dcfc8a2390d0f36e2e82918e9807b66c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:e7:e1:f0:4f:53:1c:23:a6:10:a0:ce:0b:
83:c3:ef:03:b1:70:29:d2:ff:da:d9:f4:61:35:34:
c5:11:76:7c:e6:34:45:bd:60:cf:11:9f:e5:57:a5:
a9:04:a8:20:f0:af:d4:01:3b:6f:f7:ec:26:21:96:
2b:79:e2:74:8b:40:fa:2c:4c:e1:f3:f6:c3:cd:e6:
e2:66:83:3f:69:99:54:f2:a4:13:72:40:cd:3f:81:
c6:ac:7c:f8:d7:52:68:dd:94:65:12:ab:88:2e:bf:
00:f4:5b:74:52:67:74:52:17:d8:21:1f:13:00:3f:
d0:5c:7e:6f:42:86:c1:b5:e5:99:2d:ba:90:ff:6b:
82:0f:a2:ba:ad:aa:dc:8e:f6:12:f6:80:04:27:81:
95:85:b7:62:e9:f7:b1:ce:ae:75:93:5c:01:75:43:
ae:c5:41:6c:48:7b:d5:d8:d3:b9:61:96:5a:dd:fa:
17:31:5b:13:9f:2e:9d:b7:c9:ca:b5:af:90:55:f7:
c2:8c:e3:68:4f:73:4b:39:31:5c:0d:5b:3f:4c:e7:
c0:38:6d:c5:ea:61:07:ad:8b:aa:0b:bb:c4:00:f5:
8b:09:90:a2:7f:82:0a:2d:35:f4:61:82:c7:99:4e:
71:31:38:ff:69:4f:52:1f:36:28:84:ad:ad:80:57:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:3D:CF:C8:A2:39:0D:0F:36:E2:E8:29:18:E9:80:7B:66:C7:46
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:31:2c:9b:d0:70:3d:26:31:54:5e:d0:30:b9:c9:ce:d2:da:
1a:c2:c5:fa:b9:74:a4:fc:5a:02:50:7b:b8:bd:d8:b6:b4:de:
65:56:dc:34:7f:01:15:6a:a0:5e:9b:a7:e3:46:fe:ad:aa:ed:
69:fb:bc:52:4a:1f:10:85:c8:20:e4:dc:81:31:b4:a8:dd:b4:
59:76:10:52:10:02:31:57:c2:12:8a:ec:89:a6:0a:c0:90:80:
f9:e9:ca:15:9f:68:c7:6c:f3:76:c3:d0:bb:0e:67:f1:d0:62:
14:1e:ff:8b:cc:18:c7:70:5e:6f:0c:51:d4:3f:a5:a2:e7:76:
3a:5f:97:16:21:21:58:7c:ba:bb:89:08:00:6c:bf:8a:c8:2b:
cd:38:cb:1f:3c:0e:73:04:11:cb:03:0b:99:a3:15:43:71:17:
36:0a:49:51:a7:f4:79:9e:d4:54:b9:a0:5e:f2:49:c4:ed:18:
26:00:7d:a8:20:1e:a1:98:d2:19:d5:3d:56:52:07:b6:cc:6f:
91:61:2f:f4:af:77:54:6e:40:63:8e:91:a9:fc:02:cc:21:c7:
f1:a0:eb:25:b4:94:3d:2f:0b:b6:3f:a4:dd:29:f3:b7:20:3e:
19:ac:73:75:d0:ba:98:9a:43:5f:6e:db:27:9e:74:2f:77:f3:
ab:8a:3f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cc18aYZYApfAVT89q8eAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWM0MzIyMDgyMTkxYzc5ZTJkODZkYjRlMWJmOWQwNzE4
ZTI3ZTkwHhcNMjYwMzI5MTAwMDM2WhcNMjYwMzMwMTAwMDM2WjAzMTEwLwYDVQQD
EyhlYjA5M2RjZmM4YTIzOTBkMGYzNmUyZTgyOTE4ZTk4MDdiNjZjNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P/n4fBPUxwjphCgzguDw+8DsXAp
0v/a2fRhNTTFEXZ85jRFvWDPEZ/lV6WpBKgg8K/UATtv9+wmIZYreeJ0i0D6LEzh
8/bDzebiZoM/aZlU8qQTckDNP4HGrHz411Jo3ZRlEquILr8A9Ft0Umd0UhfYIR8T
AD/QXH5vQobBteWZLbqQ/2uCD6K6rarcjvYS9oAEJ4GVhbdi6fexzq51k1wBdUOu
xUFsSHvV2NO5YZZa3foXMVsTny6dt8nKta+QVffCjONoT3NLOTFcDVs/TOfAOG3F
6mEHrYuqC7vEAPWLCZCif4IKLTX0YYLHmU5xMTj/aU9SHzYohK2tgFdJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsJPc/IojkNDzbi6CkY6YB7ZsdGMB8GA1UdIwQY
MBaAFEEcQyIIIZHHni2G204b+dBxjifpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMt
ZjM4MTBiZDcwMzc2LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMtZjM4MTBiZDcwMzc2
LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzEsm9Bw
PSYxVF7QMLnJztLaGsLF+rl0pPxaAlB7uL3YtrTeZVbcNH8BFWqgXpun40b+rart
afu8UkofEIXIIOTcgTG0qN20WXYQUhACMVfCEorsiaYKwJCA+enKFZ9ox2zzdsPQ
uw5n8dBiFB7/i8wYx3BebwxR1D+loud2Ol+XFiEhWHy6u4kIAGy/isgrzTjLHzwO
cwQRywMLmaMVQ3EXNgpJUaf0eZ7UVLmgXvJJxO0YJgB9qCAeoZjSGdU9VlIHtsxv
kWEv9K93VG5AY46RqfwCzCHH8aDrJbSUPS8Ltj+k3SnztyA+GaxzddC6mJpDX27b
J550L3fzq4o/MA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:39 2026 by rpki-client