Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: kX3JWL/5EPabXZKUXombt9Hh06i9pVTinlmATywbdFo=
Subject key identifier: 8A:44:D6:06:D9:DD:E6:33:9E:9F:F3:82:34:EE:6B:15:D6:73:B1:63
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 019D382DF5BC37BA176299431E99CFE150BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 0B2E
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: 7DTqER23S++cYqjl13n3DeOrBIjyajeCjYwG/FG4Yic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f5:bc:37:ba:17:62:99:43:1e:99:cf:e1:50:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=8a44d606d9dde6339e9ff38234ee6b15d673b163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:83:b9:6a:16:b4:90:c6:9d:85:8b:d3:e1:
20:a0:1a:65:43:aa:a4:3b:7e:f9:94:61:79:94:b2:
be:3d:09:f2:37:d2:21:a9:e9:e6:c2:60:5d:a6:f8:
8d:bb:ae:18:78:ce:9f:2f:d8:4e:31:38:e5:a1:a6:
58:05:8a:09:48:53:87:ea:24:da:fd:69:cb:6a:76:
d2:bc:bc:c9:ab:c7:40:3a:ac:4c:71:7b:ca:a5:ef:
e4:22:26:62:88:b3:3b:08:29:1c:d9:d4:03:52:5b:
ba:ab:24:d1:51:da:36:46:fb:70:31:9e:e0:24:0b:
78:f4:dd:75:3d:cf:00:7e:c2:0b:1c:38:5b:d1:25:
69:ef:ba:8d:b8:07:e7:f1:38:8b:b0:5c:4b:35:1f:
3d:0d:b1:03:7a:9d:b2:3d:a0:e6:49:25:6d:16:42:
96:c5:1c:26:56:14:c5:8d:0a:d8:c7:13:45:6e:67:
60:15:61:e6:1e:ed:01:c6:6f:c0:77:97:0e:d1:1c:
36:3d:7e:68:4a:17:42:45:bf:c1:29:7b:74:89:82:
15:d1:c8:a1:00:65:ba:93:2c:4f:99:f6:3d:42:6c:
08:f3:56:43:23:36:65:f2:cf:53:16:ea:cc:7d:08:
54:31:35:f3:5e:0a:01:66:5f:33:b8:c9:6c:e7:9d:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:44:D6:06:D9:DD:E6:33:9E:9F:F3:82:34:EE:6B:15:D6:73:B1:63
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a6:fb:02:5b:d6:85:f5:47:47:6a:1d:03:fc:cf:27:51:e5:
7b:73:39:c2:f6:92:33:e4:3e:d4:c1:30:63:dc:98:4e:94:f6:
3d:1c:31:1d:91:db:dc:ed:e1:af:d3:33:94:8a:ac:79:d7:e2:
b3:7a:f5:2b:ef:52:7d:9c:61:92:bb:79:9b:14:2f:e4:d4:3b:
4f:34:ce:28:03:d1:bd:76:d8:46:f0:38:34:6c:6a:03:b9:97:
e2:e0:d6:d2:a8:20:f1:ad:84:aa:ed:68:43:ab:6d:dd:c6:85:
de:e6:7f:7e:4b:f0:9c:d1:5a:9a:e0:6f:9e:e4:02:1f:b2:98:
7f:1f:b4:0d:44:fd:80:ff:02:a7:e4:94:80:29:bf:0b:f0:fe:
3f:e7:fb:1e:94:8f:91:c2:3c:11:d3:b2:e2:59:ac:4d:41:e5:
60:6b:ba:a9:4b:96:fc:26:e2:72:ed:89:f1:f3:7e:32:07:22:
3b:99:10:e2:c0:26:c6:df:1d:64:8e:74:04:ea:ce:4f:fb:ab:
46:3f:df:b8:7c:11:14:8a:a0:01:a0:b4:c9:85:6b:82:2c:8f:
35:04:19:eb:57:54:c7:24:68:5e:de:63:39:53:df:a9:dd:d9:
18:b9:d0:86:b7:70:54:b7:1c:b7:0d:c4:a8:93:eb:31:6b:b7:
68:e3:dd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LfW8N7oXYplDHpnP4VC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTdjMWEyNTM3ZmQwMzU0MDg3NTk5Nzg3Y2FhODQyZmVk
NjBiN2YwHhcNMjYwMzI5MDYwMDI5WhcNMjYwMzMwMDYwMDI5WjAzMTEwLwYDVQQD
Eyg4YTQ0ZDYwNmQ5ZGRlNjMzOWU5ZmYzODIzNGVlNmIxNWQ2NzNiMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQqDuWoWtJDGnYWL0+EgoBplQ6qk
O375lGF5lLK+PQnyN9IhqenmwmBdpviNu64YeM6fL9hOMTjloaZYBYoJSFOH6iTa
/WnLanbSvLzJq8dAOqxMcXvKpe/kIiZiiLM7CCkc2dQDUlu6qyTRUdo2RvtwMZ7g
JAt49N11Pc8AfsILHDhb0SVp77qNuAfn8TiLsFxLNR89DbEDep2yPaDmSSVtFkKW
xRwmVhTFjQrYxxNFbmdgFWHmHu0Bxm/Ad5cO0Rw2PX5oShdCRb/BKXt0iYIV0cih
AGW6kyxPmfY9QmwI81ZDIzZl8s9TFurMfQhUMTXzXgoBZl8zuMls553RUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpE1gbZ3eYznp/zgjTuaxXWc7FjMB8GA1UdIwQY
MBaAFKmnwaJTf9A1QIdZl4fKqEL+1gt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEt
NDhmMWU1MTA5MDQ3LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEtNDhmMWU1MTA5MDQ3
LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqb7AlvW
hfVHR2odA/zPJ1Hle3M5wvaSM+Q+1MEwY9yYTpT2PRwxHZHb3O3hr9MzlIqsedfi
s3r1K+9SfZxhkrt5mxQv5NQ7TzTOKAPRvXbYRvA4NGxqA7mX4uDW0qgg8a2Equ1o
Q6tt3caF3uZ/fkvwnNFamuBvnuQCH7KYfx+0DUT9gP8Cp+SUgCm/C/D+P+f7HpSP
kcI8EdOy4lmsTUHlYGu6qUuW/Cbicu2J8fN+MgciO5kQ4sAmxt8dZI50BOrOT/ur
Rj/fuHwRFIqgAaC0yYVrgiyPNQQZ61dUxyRoXt5jOVPfqd3ZGLnQhrdwVLcctw3E
qJPrMWu3aOPdCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:03 2026 by rpki-client