Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: fRm83q3O9e6aj34GZ7hQAPa07tS/8C36IIoA711C7io=
Subject key identifier: 11:A4:74:38:BC:4B:20:6D:A5:0A:61:52:4B:A0:99:7B:86:56:F2:1D
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019D0C9F311D3DC3324B44A78D3D993C5D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0BC2
Signing time: Fri 20 Mar 2026 19:00:52 +0000
Manifest this update: Fri 20 Mar 2026 19:00:52 +0000
Manifest next update: Sat 21 Mar 2026 19:00:52 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: TdIv/g6NWUx7FqL/04FT8Ce4dna9L9c/x0A3jbXG+4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:9f:31:1d:3d:c3:32:4b:44:a7:8d:3d:99:3c:5d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Mar 20 19:00:52 2026 GMT
Not After : Mar 21 19:00:52 2026 GMT
Subject: CN=11a47438bc4b206da50a61524ba0997b8656f21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:d5:5b:be:ed:cc:57:c3:38:50:d6:46:a1:
bc:55:51:1f:52:95:da:49:c8:94:89:c6:8a:e0:18:
41:ef:85:a0:19:15:3f:dd:1f:00:36:c6:b2:ed:18:
9a:3a:f7:53:3e:e6:d9:cd:b0:0c:95:4b:28:8f:cc:
26:7c:55:68:22:a2:e2:2f:cf:8f:cb:98:bf:75:ea:
bc:68:93:20:19:6e:90:f1:cc:5e:65:e7:51:34:ab:
ce:04:87:a9:ec:5d:17:0a:93:da:e8:48:93:83:7e:
79:01:4f:46:c1:eb:0c:1c:14:eb:6e:80:06:42:45:
4e:98:19:b4:5a:86:1a:cb:7e:74:32:c0:84:15:08:
ed:56:78:d7:32:7b:d5:89:bb:7e:02:d2:de:e4:b3:
2a:21:5d:2a:9b:11:cb:2b:63:46:29:f1:83:49:b4:
bf:b4:cd:4b:95:55:ca:aa:54:9e:ce:e4:10:b0:37:
ef:85:cc:48:3e:af:6f:03:cf:3d:6c:9a:72:9d:a9:
8d:63:3c:5a:ce:12:af:24:d8:f0:90:51:e4:65:6c:
ec:f3:e0:0e:02:8a:48:4f:83:8b:22:fe:d7:f1:19:
a9:ce:35:4c:4c:30:19:da:e7:85:87:b1:4a:68:b9:
7b:45:61:52:b9:29:32:22:a7:02:50:97:94:e2:70:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:74:38:BC:4B:20:6D:A5:0A:61:52:4B:A0:99:7B:86:56:F2:1D
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:ea:a9:06:3e:db:dc:40:7e:12:60:28:41:d1:ca:25:75:
47:5f:e1:38:83:05:c1:f6:37:2b:bf:37:ed:8f:7f:b8:c5:d1:
88:16:5b:17:d8:6a:26:d4:0e:90:0d:31:06:e2:67:d9:f8:ac:
37:1e:65:5f:6a:73:98:ed:5c:92:ff:2e:40:61:b7:58:05:07:
16:06:db:77:11:e0:6b:33:83:fa:b4:54:2d:0c:6c:4e:7a:a1:
ba:a5:b7:5e:52:06:0d:dc:12:db:2e:2f:71:a4:f2:41:22:51:
6a:0f:a9:48:15:59:6b:f3:6b:da:4f:a6:fd:1e:da:9d:52:f8:
0f:7f:4c:03:63:72:6f:fa:55:d1:d2:5c:16:5b:be:31:3a:27:
0d:6e:b1:ce:be:5c:46:6c:5d:6b:73:f3:5e:cd:22:14:15:55:
8b:65:16:65:eb:df:14:af:c6:a8:a8:89:c1:00:0a:40:18:6b:
d7:47:96:ed:7f:06:0a:34:8c:2d:7a:69:e3:64:6b:a8:d0:32:
b0:23:9e:f8:8c:c9:72:7e:29:30:9e:66:28:32:c0:a8:3e:61:
39:3f:67:07:81:67:65:bd:0d:e1:9f:32:1b:dc:c8:c6:a8:30:
79:5e:e3:18:aa:e8:83:a5:bc:f0:91:76:68:31:9b:6c:d0:9c:
7c:1f:04:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0MnzEdPcMyS0SnjT2ZPF1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy
YzA2ZjQwHhcNMjYwMzIwMTkwMDUyWhcNMjYwMzIxMTkwMDUyWjAzMTEwLwYDVQQD
EygxMWE0NzQzOGJjNGIyMDZkYTUwYTYxNTI0YmEwOTk3Yjg2NTZmMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA237VW77tzFfDOFDWRqG8VVEfUpXa
SciUicaK4BhB74WgGRU/3R8ANsay7RiaOvdTPubZzbAMlUsoj8wmfFVoIqLiL8+P
y5i/deq8aJMgGW6Q8cxeZedRNKvOBIep7F0XCpPa6EiTg355AU9GwesMHBTrboAG
QkVOmBm0WoYay350MsCEFQjtVnjXMnvVibt+AtLe5LMqIV0qmxHLK2NGKfGDSbS/
tM1LlVXKqlSezuQQsDfvhcxIPq9vA889bJpynamNYzxazhKvJNjwkFHkZWzs8+AO
AopIT4OLIv7X8RmpzjVMTDAZ2ueFh7FKaLl7RWFSuSkyIqcCUJeU4nAJuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGkdDi8SyBtpQphUkugmXuGVvIdMB8GA1UdIwQY
MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt
ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj
LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/bqqQY+
29xAfhJgKEHRyiV1R1/hOIMFwfY3K7837Y9/uMXRiBZbF9hqJtQOkA0xBuJn2fis
Nx5lX2pzmO1ckv8uQGG3WAUHFgbbdxHgazOD+rRULQxsTnqhuqW3XlIGDdwS2y4v
caTyQSJRag+pSBVZa/Nr2k+m/R7anVL4D39MA2Nyb/pV0dJcFlu+MTonDW6xzr5c
Rmxda3PzXs0iFBVVi2UWZevfFK/GqKiJwQAKQBhr10eW7X8GCjSMLXpp42RrqNAy
sCOe+IzJcn4pMJ5mKDLAqD5hOT9nB4FnZb0N4Z8yG9zIxqgweV7jGKrog6W88JF2
aDGbbNCcfB8Ebg==
-----END CERTIFICATE-----
Generated at Sat Mar 21 02:55:24 2026 by rpki-client