Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: 6PRsTCtpsUF/y1Mkbg+lFFkvz6XQtst4JnVr+9OyTLA=
Subject key identifier: E5:00:BF:D3:62:49:C1:23:14:51:36:50:09:F1:B1:75:CA:7C:57:BA
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019D38D36DA73BF913BCBB003A9013E466FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 1123
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: 1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa (hash: BkBrVdmzVpfXD4QvBO8xygY9UajM60k/x4abGcDGbmw=)
2: 9enrJ1aLGA3RCeme7xBZCB62agk.roa (hash: vRnXuA5NETYBT1BeqdHLACLYGuovCr87R2REHEDrMcI=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: 1FPS+x2+7qiw6Q8Qfg106JFPPp/1+CMq/txtQRLYwgs=)
4: wSuoaH9wOLl866tBer1nWZMIWCc.roa (hash: IgY4urUfYKNfspzPi766lr6KcHLSrEwdZwQgGXHYG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6d:a7:3b:f9:13:bc:bb:00:3a:90:13:e4:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=e500bfd36249c1231451365009f1b175ca7c57ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:df:ba:a2:7b:b2:5d:2e:14:b0:ff:64:55:
5b:f1:d3:e7:56:a4:8d:8b:d1:ca:a5:8a:03:72:05:
6c:12:c2:09:18:91:49:2c:5c:84:a3:29:f6:a1:41:
fc:59:b0:de:28:27:e2:e0:73:d1:5e:e8:fa:49:3a:
ff:7e:1b:e3:f6:35:f8:5d:bf:d3:28:e1:57:ce:59:
f6:8d:b4:86:9f:54:20:9c:63:88:2c:18:78:2c:92:
f3:a5:2b:28:1b:70:48:df:26:ca:c2:43:f7:1a:21:
6b:ff:5c:c7:72:b0:26:02:fa:2c:bf:d5:14:1d:f7:
bd:e2:ec:59:dc:34:c1:31:64:82:ae:94:ed:82:b6:
81:07:5e:a9:c5:0b:68:c5:b2:dc:f2:b0:a9:90:41:
d0:e6:bf:ce:2a:61:88:67:b2:ae:ff:f7:25:ea:2f:
c3:b6:a7:0b:94:09:30:e7:14:15:fd:d1:e2:60:f0:
6d:3f:c4:b6:80:95:72:3d:9d:46:c0:b9:c3:70:de:
43:1a:e7:66:12:4e:77:13:b8:5f:86:c0:40:ad:de:
31:a1:9f:ac:2f:9a:4f:1b:02:0b:d6:59:bb:af:a4:
81:99:89:aa:5d:78:5e:4a:f1:f2:d0:2c:d4:08:6b:
98:d4:ed:e0:72:ac:84:a7:a1:06:19:2f:f3:7d:dc:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:BF:D3:62:49:C1:23:14:51:36:50:09:F1:B1:75:CA:7C:57:BA
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:30:e6:53:32:13:ed:b9:cc:7f:6d:26:42:69:9e:69:75:e9:
22:8f:e2:2c:52:98:71:10:c0:65:92:d3:f6:dd:44:3f:d2:13:
56:74:cc:97:fe:f2:4e:e5:e6:d2:db:76:85:fc:25:d1:93:aa:
83:77:ba:9f:1c:8b:e3:f1:6e:c0:87:01:24:73:5f:60:9c:b5:
a0:2a:61:15:15:e8:9d:c9:0f:4c:79:ad:19:b6:64:7b:27:65:
9b:9e:e4:50:9a:35:c0:85:cc:95:33:44:27:c4:4d:15:ea:87:
c1:89:ed:52:90:62:0f:dc:5f:c3:7f:1f:cf:fb:a2:dc:ff:f7:
11:af:fc:6d:96:22:44:bf:2e:0f:db:59:6b:ac:59:55:61:bd:
84:a9:5e:fd:b8:76:00:63:28:d3:65:3a:a9:f1:36:3e:fd:2b:
20:c5:3e:80:09:de:fc:c6:a8:03:e4:85:54:df:33:da:1a:bf:
b8:90:60:e5:d5:2f:6c:a7:49:1d:1d:8c:b6:64:02:21:80:ff:
5a:8e:8a:97:b6:8f:e3:5b:67:ac:69:f8:ff:3f:e1:7f:af:fc:
5f:24:a2:05:9d:ed:50:16:22:cf:15:b8:b4:e6:60:74:8b:96:
55:60:0b:a0:66:a4:7e:a6:d8:b6:07:7e:94:28:d1:ae:76:b1:
a7:94:a5:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04022nO/kTvLsAOpAT5Gb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3
OTU2YTYwHhcNMjYwMzI5MDkwMTEzWhcNMjYwMzMwMDkwMTEzWjAzMTEwLwYDVQQD
EyhlNTAwYmZkMzYyNDljMTIzMTQ1MTM2NTAwOWYxYjE3NWNhN2M1N2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnrfuqJ7sl0uFLD/ZFVb8dPnVqSN
i9HKpYoDcgVsEsIJGJFJLFyEoyn2oUH8WbDeKCfi4HPRXuj6STr/fhvj9jX4Xb/T
KOFXzln2jbSGn1QgnGOILBh4LJLzpSsoG3BI3ybKwkP3GiFr/1zHcrAmAvosv9UU
Hfe94uxZ3DTBMWSCrpTtgraBB16pxQtoxbLc8rCpkEHQ5r/OKmGIZ7Ku//cl6i/D
tqcLlAkw5xQV/dHiYPBtP8S2gJVyPZ1GwLnDcN5DGudmEk53E7hfhsBArd4xoZ+s
L5pPGwIL1lm7r6SBmYmqXXheSvHy0CzUCGuY1O3gcqyEp6EGGS/zfdwjoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUAv9NiScEjFFE2UAnxsXXKfFe6MB8GA1UdIwQY
MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt
YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj
LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjDmUzIT
7bnMf20mQmmeaXXpIo/iLFKYcRDAZZLT9t1EP9ITVnTMl/7yTuXm0tt2hfwl0ZOq
g3e6nxyL4/FuwIcBJHNfYJy1oCphFRXonckPTHmtGbZkeydlm57kUJo1wIXMlTNE
J8RNFeqHwYntUpBiD9xfw38fz/ui3P/3Ea/8bZYiRL8uD9tZa6xZVWG9hKle/bh2
AGMo02U6qfE2Pv0rIMU+gAne/MaoA+SFVN8z2hq/uJBg5dUvbKdJHR2MtmQCIYD/
Wo6Kl7aP41tnrGn4/z/hf6/8XySiBZ3tUBYizxW4tOZgdIuWVWALoGakfqbYtgd+
lCjRrnaxp5Sl2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:36 2026 by rpki-client