Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: 0VDv2r2UUwgmqoajxa2SQ1Uav5zUMj7bcgSx7iWLEa8=
Subject key identifier: DA:80:A0:E4:CF:E2:28:36:C0:83:40:41:12:F8:33:D8:AF:40:75:E8
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 019D37F715E67895D0F803A9B9257982B348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa (hash: eyvaXZ1DgOHbc16lk8yXQEwz4POlL+tLjFw5QFZgFv4=)
2: VhZZqyHl4RcvVrDtF9S5qJYdsrI.roa (hash: 8RcjIqSIrUsAtUqmpBMu/l4viLpz4Dni8fqFOKIrXPc=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: BN2Ilxt/e/c9P00Fk7A3eHR/EO7gRge0BDnlgD8LQts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:15:e6:78:95:d0:f8:03:a9:b9:25:79:82:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=da80a0e4cfe22836c083404112f833d8af4075e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:13:46:3c:e9:83:19:6d:19:40:bf:8d:05:
7f:43:40:e3:e6:51:55:87:3e:7c:64:b4:06:af:01:
53:81:71:56:9c:71:13:84:b9:8b:fe:d7:c4:a5:46:
b8:93:ff:d2:90:37:cf:00:7a:cc:b1:80:7b:e6:33:
dd:db:b4:04:54:85:8e:d6:67:a3:62:81:ad:da:f5:
0b:4f:2f:f1:bf:eb:f2:07:34:ac:d4:82:6f:47:93:
c6:d8:52:09:8a:c5:e6:c4:a0:1b:4a:b3:17:ad:e8:
cf:43:2a:b3:78:93:7c:9c:65:5b:32:62:7f:2d:0b:
54:a0:c5:bb:a4:6f:59:20:43:f7:45:cf:88:0a:ec:
52:37:19:f0:8e:b9:cc:af:79:fa:8c:8b:55:57:1b:
41:41:b6:9d:b0:df:43:7c:1a:31:5c:08:17:62:bf:
e2:0c:5c:ee:d8:32:47:d2:ee:90:e6:9a:f9:d3:ce:
c2:24:b4:6f:f5:49:b1:9b:0b:0a:14:3b:6d:0f:05:
49:78:46:a7:19:d6:bf:9b:05:43:60:32:71:c3:5b:
9d:f4:fe:39:58:ac:7b:44:89:6f:d2:03:72:de:14:
5f:de:5e:1c:0a:0d:93:6d:31:a4:b8:3b:62:28:11:
7c:e0:94:b8:92:f6:8a:bd:a6:65:25:0f:3e:59:d5:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:80:A0:E4:CF:E2:28:36:C0:83:40:41:12:F8:33:D8:AF:40:75:E8
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:62:a5:5b:05:df:3f:aa:19:f0:d3:8d:a5:3a:a4:c9:93:a7:
51:b1:39:d2:8d:0f:96:cc:6e:ee:33:b5:fd:21:3b:2a:57:23:
89:a8:ba:bf:c0:14:50:78:d3:74:6b:67:83:66:ac:5a:31:6b:
5d:23:6d:a1:c0:2d:49:4c:f2:81:ab:78:47:28:f8:db:6d:b4:
2e:40:dc:6e:15:e2:15:df:e5:b3:4a:1e:28:30:28:f5:72:69:
f8:2e:4f:d6:2f:ac:03:ca:0b:ca:13:3a:d1:36:e3:2a:68:d5:
f3:ac:f1:d2:45:15:b8:63:f2:a4:bf:ec:fa:64:d9:0b:b0:b3:
4c:9a:f5:86:e7:2d:2d:de:48:8c:a3:5f:11:8a:1b:91:ab:9b:
26:a1:b4:ab:6b:4c:78:84:22:db:06:95:88:f8:dd:6e:53:1c:
29:fc:26:d7:75:0b:d9:a0:be:ed:97:10:b2:cd:e5:26:0a:55:
c5:62:a2:e1:4c:0b:0b:62:4d:0f:2e:4c:4d:43:03:9e:81:71:
39:a7:63:15:05:31:31:9c:fb:f2:c1:ca:78:a3:c1:79:c6:62:
6b:9e:26:9a:ac:e2:04:4b:56:46:4d:24:7b:76:23:1f:a8:39:
bb:2e:ae:13:42:78:27:00:98:eb:28:c9:d6:fc:5f:b6:c2:e3:
1c:cb:ae:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xXmeJXQ+AOpuSV5grNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4
ZjNkYmYwHhcNMjYwMzI5MDUwMDMzWhcNMjYwMzMwMDUwMDMzWjAzMTEwLwYDVQQD
EyhkYTgwYTBlNGNmZTIyODM2YzA4MzQwNDExMmY4MzNkOGFmNDA3NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiITRjzpgxltGUC/jQV/Q0Dj5lFV
hz58ZLQGrwFTgXFWnHEThLmL/tfEpUa4k//SkDfPAHrMsYB75jPd27QEVIWO1mej
YoGt2vULTy/xv+vyBzSs1IJvR5PG2FIJisXmxKAbSrMXrejPQyqzeJN8nGVbMmJ/
LQtUoMW7pG9ZIEP3Rc+ICuxSNxnwjrnMr3n6jItVVxtBQbadsN9DfBoxXAgXYr/i
DFzu2DJH0u6Q5pr5087CJLRv9UmxmwsKFDttDwVJeEanGda/mwVDYDJxw1ud9P45
WKx7RIlv0gNy3hRf3l4cCg2TbTGkuDtiKBF84JS4kvaKvaZlJQ8+WdWN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqAoOTP4ig2wINAQRL4M9ivQHXoMB8GA1UdIwQY
MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt
OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw
LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImKlWwXf
P6oZ8NONpTqkyZOnUbE50o0Plsxu7jO1/SE7Klcjiai6v8AUUHjTdGtng2asWjFr
XSNtocAtSUzygat4Ryj42220LkDcbhXiFd/ls0oeKDAo9XJp+C5P1i+sA8oLyhM6
0TbjKmjV86zx0kUVuGPypL/s+mTZC7CzTJr1huctLd5IjKNfEYobkaubJqG0q2tM
eIQi2waViPjdblMcKfwm13UL2aC+7ZcQss3lJgpVxWKi4UwLC2JNDy5MTUMDnoFx
OadjFQUxMZz78sHKeKPBecZia54mmqziBEtWRk0ke3YjH6g5uy6uE0J4JwCY6yjJ
1vxftsLjHMuu5g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:18 2026 by rpki-client