Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: Fu6Zk0/7Mpnts/n6OPT2xhvLoxa8VvZS0HdMVQ73UkA=
Subject key identifier: 38:9B:04:78:D4:45:FF:C4:68:9B:E9:3F:46:89:CD:1B:92:A5:06:77
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 019D39AF3E5DD9163A5A664A6FB306EBB728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 1006
Signing time: Sun 29 Mar 2026 13:01:19 +0000
Manifest this update: Sun 29 Mar 2026 13:01:19 +0000
Manifest next update: Mon 30 Mar 2026 13:01:19 +0000
Files and hashes: 1: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: Zcc8EaCseS4He8iana1EPm2rTIJnlQKq7e+2BKhfnpQ=)
2: xbvEJZeUt0xfTCQkzUMYNid2WuU.roa (hash: N+c9uTWESBLyJAw1GRbCX5BbluIVDmwBAavnIr/6+Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3e:5d:d9:16:3a:5a:66:4a:6f:b3:06:eb:b7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Mar 29 13:01:19 2026 GMT
Not After : Mar 30 13:01:19 2026 GMT
Subject: CN=389b0478d445ffc4689be93f4689cd1b92a50677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:5b:45:cd:70:cd:90:30:d3:b9:c2:99:da:
9e:64:a6:81:a8:4f:f2:78:73:0f:fc:ee:ec:b8:e7:
e8:11:ec:88:50:de:26:2d:4c:2a:39:65:a6:e3:99:
42:93:7d:e4:a4:63:e3:63:84:d1:6a:0d:ae:8a:c9:
ce:cb:e8:98:3b:79:b0:8d:69:f8:59:2f:50:db:06:
b2:fb:14:88:af:91:0d:5b:77:fc:94:fb:e6:17:6a:
cc:76:26:33:2e:8e:11:39:de:a3:16:b1:fd:0f:d5:
19:19:98:fa:7e:a4:2c:cf:f3:35:06:93:6a:ac:89:
c7:94:c5:e5:e7:b6:e0:7c:74:66:fc:23:78:c9:fa:
28:32:66:cd:2d:c1:9e:3d:2a:81:92:28:64:fb:c6:
99:8d:cb:a4:5d:32:41:aa:22:44:0d:f7:0a:a2:b9:
e8:ff:5c:b4:e0:e0:d7:5f:58:f6:17:eb:5c:66:65:
04:0a:76:6c:9a:ee:b2:1c:40:18:3d:ab:f0:e6:05:
9b:42:4e:f2:6c:e0:55:5b:7e:87:d1:fd:89:0b:84:
35:43:4b:08:e7:0d:24:02:d2:46:68:6d:e2:c8:1e:
6e:7e:5b:49:b9:fa:54:b7:c2:25:89:df:52:f0:a4:
db:9c:65:aa:fd:65:f7:f7:74:17:2c:18:df:6b:ec:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:04:78:D4:45:FF:C4:68:9B:E9:3F:46:89:CD:1B:92:A5:06:77
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e9:dd:49:52:a8:87:ee:0e:a0:b9:96:39:39:4f:2e:5d:8f:
49:e5:56:58:c9:d2:74:d3:9c:22:5c:4b:92:57:dd:ec:20:ab:
4c:c6:ec:de:4c:bc:ca:98:e6:f9:d0:88:58:af:8a:e7:e6:40:
62:00:54:e1:1b:ad:d1:57:9d:69:28:ca:28:ba:cb:c5:db:56:
13:f5:fd:c0:f0:cb:c5:18:bb:d4:0f:96:25:d8:84:1b:a9:e9:
90:29:63:ce:26:83:be:42:3a:9b:8a:5e:19:4a:7a:7b:b2:7f:
6c:e0:fc:d3:0f:f6:bb:d4:a4:e3:84:3d:e6:ab:4f:05:b6:9f:
74:5e:6c:61:06:9e:0b:52:12:ea:7d:7d:e9:38:7d:e8:90:52:
97:41:06:e8:b1:33:0d:ac:ae:ae:5d:b9:7b:cc:7b:69:b7:78:
7d:08:5d:82:ae:fc:a5:ff:a4:fe:d8:58:2a:5b:f3:97:62:56:
fe:af:43:c5:17:ef:b7:52:7d:3e:af:70:22:c4:2e:6c:f1:b9:
2f:a2:31:0c:02:c1:61:1d:a2:dd:ec:af:c8:c2:8e:0e:f9:45:
f6:a9:9a:71:02:1d:ab:8c:c1:82:4a:e3:53:4f:87:1d:75:4a:
f2:c4:02:84:bb:16:f0:ea:91:1f:c5:00:20:2e:70:a4:76:78:
12:0a:93:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rz5d2RY6WmZKb7MG67coMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YmFiNjFjMzYwZWExMDhjZDE5MmM3Y2U3YTdlZDU1NjVi
ZGZiZTAwHhcNMjYwMzI5MTMwMTE5WhcNMjYwMzMwMTMwMTE5WjAzMTEwLwYDVQQD
EygzODliMDQ3OGQ0NDVmZmM0Njg5YmU5M2Y0Njg5Y2QxYjkyYTUwNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbZbRc1wzZAw07nCmdqeZKaBqE/y
eHMP/O7suOfoEeyIUN4mLUwqOWWm45lCk33kpGPjY4TRag2uisnOy+iYO3mwjWn4
WS9Q2way+xSIr5ENW3f8lPvmF2rMdiYzLo4ROd6jFrH9D9UZGZj6fqQsz/M1BpNq
rInHlMXl57bgfHRm/CN4yfooMmbNLcGePSqBkihk+8aZjcukXTJBqiJEDfcKorno
/1y04ODXX1j2F+tcZmUECnZsmu6yHEAYPavw5gWbQk7ybOBVW36H0f2JC4Q1Q0sI
5w0kAtJGaG3iyB5ufltJufpUt8Ilid9S8KTbnGWq/WX393QXLBjfa+yUUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDibBHjURf/EaJvpP0aJzRuSpQZ3MB8GA1UdIwQY
MBaAFKi6thw2DqEIzRksfOen7VVlvfvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85YjM5YjktODJjOC00YzdkLWIyNjgt
NzY2ZTU0NjA1N2E3LzEvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC85YjM5YjktODJjOC00YzdkLWIyNjgtNzY2ZTU0NjA1N2E3
LzEvcUxxMkhEWU9vUWpOR1N4ODU2ZnRWV1c5LS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOndSVKo
h+4OoLmWOTlPLl2PSeVWWMnSdNOcIlxLklfd7CCrTMbs3ky8ypjm+dCIWK+K5+ZA
YgBU4Rut0VedaSjKKLrLxdtWE/X9wPDLxRi71A+WJdiEG6npkCljziaDvkI6m4pe
GUp6e7J/bOD80w/2u9Sk44Q95qtPBbafdF5sYQaeC1IS6n196Th96JBSl0EG6LEz
Dayurl25e8x7abd4fQhdgq78pf+k/thYKlvzl2JW/q9DxRfvt1J9Pq9wIsQubPG5
L6IxDALBYR2i3eyvyMKODvlF9qmacQIdq4zBgkrjU0+HHXVK8sQChLsW8OqRH8UA
IC5wpHZ4EgqTkA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:16 2026 by rpki-client