Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: fOMWdg0rc3apM9P30MhcWp63mMGarG5kJ6Yx+T4gnmw=
Subject key identifier: D1:58:B6:44:94:58:C3:7A:1A:B4:72:82:17:FB:69:35:2F:34:00:86
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019D37C098E437C8F2347CDD458494A5185D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 0C61
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: 1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa (hash: J6AC5UbCT/JPLrTSWfSumCMQQX3px8kLFv3gDTLnI80=)
2: 9Q-wIj12he9wXDbL67TYYvZ_2cI.roa (hash: TjJ3yUQRLm+yE/F996Jy9BjBIBFcfqDfS+QMH9VjHSM=)
3: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
4: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (hash: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk=)
5: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (hash: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U=)
6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: mZQ7WfxeZMQlqJcvBQ3N1xh96EfXhEKjrqv5PrHh8K0=)
7: rHk667_7e1f5CM1H6jMGDJQ1_rI.roa (hash: eJy0wY8fT6hZGfxYTUIN+SEKm4c/Wt9buTzlEZ5VOng=)
8: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:98:e4:37:c8:f2:34:7c:dd:45:84:94:a5:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=d158b6449458c37a1ab4728217fb69352f340086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:1a:02:22:3c:b8:94:a7:5a:14:97:0e:a5:
27:f3:93:c1:e6:c6:86:d5:a4:07:fb:0d:bf:af:98:
24:61:cf:f4:60:86:27:95:a3:bd:22:d1:ba:fd:23:
98:ec:4e:fb:2f:fa:15:4b:31:e0:6f:6d:86:a7:ef:
35:7c:94:8c:fb:d2:55:b4:51:6f:c5:4a:5c:80:a6:
40:31:be:91:55:25:14:1d:16:e3:ab:7a:32:28:e9:
d8:32:d9:3d:af:58:2b:e8:3f:86:5d:50:0a:91:bd:
02:65:bf:a8:0c:ed:d9:49:a1:9d:58:12:38:2d:cc:
4c:88:23:22:aa:85:ef:0e:db:b0:f3:b9:a9:0b:e9:
ab:ef:a1:71:56:63:b7:07:b1:76:80:6f:16:12:e7:
7d:89:cd:0a:cd:1f:34:86:49:13:a6:09:05:22:4d:
7b:7a:87:ee:d7:00:c6:25:29:4f:7a:c3:19:c8:e6:
72:e4:1d:f3:f2:0e:4f:aa:65:ce:bb:c4:5f:71:66:
28:1c:00:52:af:a2:27:42:72:7d:7b:3e:f1:3a:a1:
2e:cb:19:23:78:d9:22:43:49:d8:a0:9d:34:19:9d:
47:b0:08:15:45:06:eb:6d:b2:5b:29:5e:67:fe:e1:
cf:e7:d8:89:d7:c5:dc:53:7f:2c:b8:b2:c9:d8:20:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:B6:44:94:58:C3:7A:1A:B4:72:82:17:FB:69:35:2F:34:00:86
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ba:2f:4c:2c:c8:97:9f:45:24:6f:25:17:44:27:d6:37:39:
f8:6a:da:8c:9e:71:3b:c1:7e:e1:f8:5d:9d:2c:e3:ee:78:7c:
b7:5a:58:b3:c6:ae:0f:98:51:99:7a:79:ce:2e:f4:18:92:be:
84:8f:95:ee:06:48:75:9d:f8:43:4a:59:67:92:e1:c4:38:72:
10:77:42:38:68:86:d5:08:66:50:cc:ff:d4:2e:08:07:09:2f:
5e:50:bb:e9:53:7d:f7:d1:6f:33:84:25:20:90:e8:c4:32:1e:
89:cf:d5:b3:b1:8c:6a:6f:a4:2a:cc:93:76:5c:3c:31:0c:8d:
10:da:2b:15:ee:5d:67:df:0c:17:ab:40:7c:f3:d6:1a:85:c4:
5e:cb:54:3b:34:0f:2d:b9:15:a9:e9:be:e5:86:ac:1f:dd:b6:
9f:37:95:21:b5:e8:ca:75:72:c6:10:ea:2a:73:f2:91:91:db:
da:e6:6c:b0:32:97:da:c8:1f:85:44:77:2e:f2:a8:76:69:16:
e3:2b:9d:53:53:e4:3c:8a:58:68:b2:15:7d:05:50:b4:57:85:
d2:b2:1d:c7:46:f5:f8:92:18:10:11:fe:59:17:b5:b8:75:a0:
b0:31:45:18:e1:b6:0f:2e:5c:e0:e9:7f:d0:87:cb:87:1e:9b:
cc:2a:8b:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJjkN8jyNHzdRYSUpRhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjYwMzI5MDQwMTAyWhcNMjYwMzMwMDQwMTAyWjAzMTEwLwYDVQQD
EyhkMTU4YjY0NDk0NThjMzdhMWFiNDcyODIxN2ZiNjkzNTJmMzQwMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztAaAiI8uJSnWhSXDqUn85PB5saG
1aQH+w2/r5gkYc/0YIYnlaO9ItG6/SOY7E77L/oVSzHgb22Gp+81fJSM+9JVtFFv
xUpcgKZAMb6RVSUUHRbjq3oyKOnYMtk9r1gr6D+GXVAKkb0CZb+oDO3ZSaGdWBI4
LcxMiCMiqoXvDtuw87mpC+mr76FxVmO3B7F2gG8WEud9ic0KzR80hkkTpgkFIk17
eofu1wDGJSlPesMZyOZy5B3z8g5PqmXOu8RfcWYoHABSr6InQnJ9ez7xOqEuyxkj
eNkiQ0nYoJ00GZ1HsAgVRQbrbbJbKV5n/uHP59iJ18XcU38suLLJ2CAKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFYtkSUWMN6GrRyghf7aTUvNACGMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLovTCzI
l59FJG8lF0Qn1jc5+GrajJ5xO8F+4fhdnSzj7nh8t1pYs8auD5hRmXp5zi70GJK+
hI+V7gZIdZ34Q0pZZ5LhxDhyEHdCOGiG1QhmUMz/1C4IBwkvXlC76VN999FvM4Ql
IJDoxDIeic/Vs7GMam+kKsyTdlw8MQyNENorFe5dZ98MF6tAfPPWGoXEXstUOzQP
LbkVqem+5YasH922nzeVIbXoynVyxhDqKnPykZHb2uZssDKX2sgfhUR3LvKodmkW
4yudU1PkPIpYaLIVfQVQtFeF0rIdx0b1+JIYEBH+WRe1uHWgsDFFGOG2Dy5c4Ol/
0IfLhx6bzCqL5g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:30 2026 by rpki-client