Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: KkAco8UdFw+6buYYpvTWU7kCR8Gs2zmGX2Se+nQlafQ=
Subject key identifier: 71:A5:DE:9D:DE:DC:4E:26:6E:4D:5F:E5:4D:A9:A3:36:47:1A:DB:0A
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 019CE7123A7DE9ED1CE33C68AF2BEB4643BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 0693
Signing time: Fri 13 Mar 2026 12:00:57 +0000
Manifest this update: Fri 13 Mar 2026 12:00:57 +0000
Manifest next update: Sat 14 Mar 2026 12:00:57 +0000
Files and hashes: 1: bLk88x2HL-2GICyBNcP5Qc7qD64.roa (hash: 4cgQdkwpHUEmwJaaIvwsSgvpblfNuKKSJZKxTdOD8Wk=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: L/WJqjQlwPk5ne7KHxDrMzOcKWCE1pz3QT8tgYOETag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:3a:7d:e9:ed:1c:e3:3c:68:af:2b:eb:46:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Mar 13 12:00:57 2026 GMT
Not After : Mar 14 12:00:57 2026 GMT
Subject: CN=71a5de9ddedc4e266e4d5fe54da9a336471adb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:7c:27:6c:b8:87:d0:19:5e:a4:44:b5:ac:
40:db:fc:4f:f2:64:6a:5b:a7:12:17:18:ec:95:4a:
8b:16:22:90:84:37:d2:1e:9b:35:4f:95:6c:d2:02:
fe:63:ad:05:ee:e8:0a:20:10:ca:3b:53:b2:15:14:
2e:6e:82:de:f5:41:96:3b:88:85:bb:64:9e:48:48:
04:eb:f4:fb:c9:9e:09:7a:7d:31:64:f0:2f:37:e4:
39:f0:07:f3:e4:63:0e:38:9b:4e:4a:2d:ba:5f:f0:
a2:13:51:c3:38:fb:c6:4d:46:65:7c:4d:1c:26:8c:
11:d6:85:ec:c8:26:81:88:44:e7:42:29:6f:53:dc:
cc:6c:5f:f6:67:ab:80:59:a8:4d:64:a9:99:a5:df:
a5:d0:cc:65:18:43:8c:d6:f5:31:97:f1:6a:1e:1d:
df:5b:9a:ae:6e:5f:69:09:32:cb:72:7d:fc:3b:42:
f8:7b:28:15:ce:2f:1d:a1:95:87:33:f3:67:07:ba:
5c:6c:c0:33:40:2d:88:85:43:de:72:6e:6d:12:96:
55:25:ac:47:fd:59:c8:5f:1e:20:62:a8:cb:2b:c1:
7c:01:1c:ec:c2:e7:e8:53:c3:18:85:08:2f:0c:68:
e8:25:6b:87:a5:28:a3:c2:92:7d:3e:5b:7c:45:19:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:DE:9D:DE:DC:4E:26:6E:4D:5F:E5:4D:A9:A3:36:47:1A:DB:0A
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:68:d9:9e:9b:d9:55:c7:7a:16:0c:55:bf:cb:77:6a:a7:9b:
66:48:8a:c6:c5:bb:05:12:67:d8:2c:8a:b2:cb:72:5a:9b:36:
f1:f5:67:19:4b:a4:28:2a:49:de:8f:af:36:4f:77:51:d4:e5:
de:2f:d6:72:dd:71:d6:be:e6:3b:f7:77:b8:d0:3f:65:88:17:
4e:2b:1e:d4:f2:2d:86:8b:cd:a7:5c:e7:0e:cd:04:22:21:45:
b7:4f:cc:75:a3:18:52:04:55:a8:37:b7:59:79:98:b8:6e:1f:
50:24:7c:3a:38:15:ed:25:fa:10:b5:7a:56:a0:b8:47:7c:2c:
77:17:ae:a3:64:dd:5f:24:ec:4c:c0:f2:0c:08:8c:32:21:64:
09:f4:36:30:0b:84:30:e3:c4:35:a2:77:e7:ac:33:a1:38:f1:
b5:43:94:7b:60:3d:06:63:59:e9:0e:51:74:f6:ae:43:05:3b:
93:41:07:64:87:0c:54:47:de:2e:40:83:de:d9:0f:f3:37:68:
1b:87:5e:35:eb:82:90:ca:ac:f3:40:b4:39:d6:d4:03:1c:a3:
b5:77:a5:52:4b:85:d0:25:ee:b6:2d:0d:9a:d6:9f:02:ae:9e:
30:23:b3:5e:29:c6:45:4c:78:c8:ce:08:48:59:22:af:92:f8:
a3:65:c8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznEjp96e0c4zxoryvrRkO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODZhMDY3N2I5MWM0NTY2N2U0NWUxMmVlMDdmNTIxOTkw
MWE4N2EwHhcNMjYwMzEzMTIwMDU3WhcNMjYwMzE0MTIwMDU3WjAzMTEwLwYDVQQD
Eyg3MWE1ZGU5ZGRlZGM0ZTI2NmU0ZDVmZTU0ZGE5YTMzNjQ3MWFkYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fZ8J2y4h9AZXqREtaxA2/xP8mRq
W6cSFxjslUqLFiKQhDfSHps1T5Vs0gL+Y60F7ugKIBDKO1OyFRQuboLe9UGWO4iF
u2SeSEgE6/T7yZ4Jen0xZPAvN+Q58Afz5GMOOJtOSi26X/CiE1HDOPvGTUZlfE0c
JowR1oXsyCaBiETnQilvU9zMbF/2Z6uAWahNZKmZpd+l0MxlGEOM1vUxl/FqHh3f
W5qubl9pCTLLcn38O0L4eygVzi8doZWHM/NnB7pcbMAzQC2IhUPecm5tEpZVJaxH
/VnIXx4gYqjLK8F8ARzswufoU8MYhQgvDGjoJWuHpSijwpJ9Plt8RRkTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGl3p3e3E4mbk1f5U2pozZHGtsKMB8GA1UdIwQY
MBaAFKmGoGd7kcRWZ+ReEu4H9SGZAah6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTkt
ZDNmZGZhOWE4ZjE0LzEvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTktZDNmZGZhOWE4ZjE0
LzEvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2jZnpvZ
Vcd6FgxVv8t3aqebZkiKxsW7BRJn2CyKsstyWps28fVnGUukKCpJ3o+vNk93UdTl
3i/Wct1x1r7mO/d3uNA/ZYgXTise1PIthovNp1znDs0EIiFFt0/MdaMYUgRVqDe3
WXmYuG4fUCR8OjgV7SX6ELV6VqC4R3wsdxeuo2TdXyTsTMDyDAiMMiFkCfQ2MAuE
MOPENaJ356wzoTjxtUOUe2A9BmNZ6Q5RdPauQwU7k0EHZIcMVEfeLkCD3tkP8zdo
G4deNeuCkMqs80C0OdbUAxyjtXelUkuF0CXuti0NmtafAq6eMCOzXinGRUx4yM4I
SFkir5L4o2XIeQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:08:39 2026 by rpki-client