Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: 39VtXo4EGkDdSeFs8nQZrUpiY0HBoe3DVvUQqSYzgqo=
Subject key identifier: 7A:BB:5E:FE:D8:04:32:96:29:70:D7:7D:A0:6A:4F:2B:E1:38:45:C7
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 019D39E56A16EB88BBE7462FA123A4E33E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 1459
Signing time: Sun 29 Mar 2026 14:00:29 +0000
Manifest this update: Sun 29 Mar 2026 14:00:29 +0000
Manifest next update: Mon 30 Mar 2026 14:00:29 +0000
Files and hashes: 1: 73UCxpDNZULQFzYAsKDQ1A7nLKI.roa (hash: Puc2EYq06Fc5Snei+nqiCectlFMfZtUPb3hps442dL8=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: nQUM87ZaRIMXs9AdoA/+uzbVG2bRYrCGsHsmzSEei14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:6a:16:eb:88:bb:e7:46:2f:a1:23:a4:e3:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Mar 29 14:00:29 2026 GMT
Not After : Mar 30 14:00:29 2026 GMT
Subject: CN=7abb5efed80432962970d77da06a4f2be13845c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:8e:47:96:ff:8c:4c:4b:45:76:bb:fc:c0:
b1:68:8c:88:84:46:b5:8f:45:cb:5b:c4:5f:14:3a:
f1:b3:98:ec:a7:ae:b4:2e:1f:16:91:e7:a9:69:a4:
1b:93:43:e6:a2:11:93:b0:75:00:d7:34:a5:b0:6a:
26:9c:41:f5:01:fb:42:62:8b:d3:3f:a9:03:92:c3:
82:89:ac:cf:1b:1a:7e:bc:29:c6:c5:5b:60:54:db:
76:6d:73:47:7d:92:e3:c3:19:83:25:f2:1b:f8:45:
86:37:60:cf:73:8b:16:e8:0b:69:b4:cd:b7:1a:71:
10:83:1b:fa:c3:6b:29:8a:50:88:5f:6f:d8:8b:75:
e2:99:52:64:91:f9:ac:d7:eb:11:c4:58:88:5d:43:
3d:97:72:5d:4b:70:5a:b1:f4:7d:04:e4:3e:3a:dc:
96:bc:2b:42:49:44:8a:bd:c6:79:81:8c:bd:08:a6:
65:a5:24:2e:92:ea:0f:e5:78:6f:ab:9c:9d:09:c3:
a2:50:d4:ba:17:3c:45:a6:dd:08:59:23:9e:34:e9:
87:b0:71:22:f0:02:f2:2f:e3:17:7d:a0:7e:15:dc:
bf:a2:88:6b:e2:bd:17:b9:39:21:24:60:d2:37:0a:
63:6a:68:49:88:e7:b4:3f:c0:cb:f4:23:5b:69:39:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:5E:FE:D8:04:32:96:29:70:D7:7D:A0:6A:4F:2B:E1:38:45:C7
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:1f:6d:14:c6:e4:74:0a:9e:a0:ef:01:b4:7d:04:7e:65:56:
18:81:b1:ae:7b:1d:07:6b:f3:e8:22:87:a4:4f:ba:57:14:1f:
c7:10:0d:5a:6c:04:80:13:64:0c:13:3e:a0:a5:c6:ff:57:f5:
0b:87:2c:6b:05:37:5e:00:d8:98:bb:4a:8c:31:9f:74:30:fc:
c6:b5:04:b7:bb:3e:a5:77:28:26:63:6f:d6:fc:dc:69:c1:3d:
a1:78:dc:cd:6c:3f:73:76:d5:eb:77:12:82:30:db:5b:43:da:
cc:e6:08:47:2e:dc:e2:3e:21:90:80:f8:a3:20:14:cc:a8:cb:
a4:1e:72:5a:2e:cd:fd:b5:3f:8a:b4:53:cf:94:d6:2d:5e:5e:
84:75:22:80:61:57:bd:5d:2a:69:1b:f4:63:61:a7:e1:81:bc:
fe:8b:61:75:6d:cd:87:d6:1d:e0:71:43:89:22:b9:9a:a6:12:
04:dc:b6:83:ad:4c:25:fb:bb:63:a3:e8:6e:06:25:2f:c1:fe:
81:91:31:6a:62:27:ae:1d:33:21:5d:e7:96:fb:fd:ec:3c:ac:
42:43:6a:d9:e3:2b:27:f9:5a:02:c7:d4:50:1d:11:3a:b0:8b:
73:97:cb:e3:8b:3d:2c:3f:e8:7f:bf:19:89:7a:7f:d5:02:63:
e7:6a:1f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055WoW64i750YvoSOk4z4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw
YzExMWIwHhcNMjYwMzI5MTQwMDI5WhcNMjYwMzMwMTQwMDI5WjAzMTEwLwYDVQQD
Eyg3YWJiNWVmZWQ4MDQzMjk2Mjk3MGQ3N2RhMDZhNGYyYmUxMzg0NWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f2OR5b/jExLRXa7/MCxaIyIhEa1
j0XLW8RfFDrxs5jsp660Lh8WkeepaaQbk0PmohGTsHUA1zSlsGomnEH1AftCYovT
P6kDksOCiazPGxp+vCnGxVtgVNt2bXNHfZLjwxmDJfIb+EWGN2DPc4sW6AtptM23
GnEQgxv6w2spilCIX2/Yi3XimVJkkfms1+sRxFiIXUM9l3JdS3BasfR9BOQ+OtyW
vCtCSUSKvcZ5gYy9CKZlpSQukuoP5Xhvq5ydCcOiUNS6FzxFpt0IWSOeNOmHsHEi
8ALyL+MXfaB+Fdy/oohr4r0XuTkhJGDSNwpjamhJiOe0P8DL9CNbaTmi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq7Xv7YBDKWKXDXfaBqTyvhOEXHMB8GA1UdIwQY
MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt
MGViOGYzN2EwMTc5LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5
LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0h9tFMbk
dAqeoO8BtH0EfmVWGIGxrnsdB2vz6CKHpE+6VxQfxxANWmwEgBNkDBM+oKXG/1f1
C4csawU3XgDYmLtKjDGfdDD8xrUEt7s+pXcoJmNv1vzcacE9oXjczWw/c3bV63cS
gjDbW0PazOYIRy7c4j4hkID4oyAUzKjLpB5yWi7N/bU/irRTz5TWLV5ehHUigGFX
vV0qaRv0Y2Gn4YG8/othdW3Nh9Yd4HFDiSK5mqYSBNy2g61MJfu7Y6PobgYlL8H+
gZExamInrh0zIV3nlvv97DysQkNq2eMrJ/laAsfUUB0ROrCLc5fL44s9LD/of78Z
iXp/1QJj52ofew==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:09 2026 by rpki-client