Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: y71QzBGGSiGKFthpUEgPSI+4zSjMSfW65rDljDaJk60=
Subject key identifier: 84:40:FF:73:B2:B0:18:22:1C:09:81:DF:F5:5F:19:A2:E1:E3:DC:5A
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 019D382E5C8DECF92F047A5FDFD3CCD012CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 047C
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: BXXFULcigDb5p-TWyxWoIQ6jZxg.roa (hash: +TJHe9rjVEZ47iPSt4ggCrDY9EnLTa/nFFdzzuzo8HA=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: 97Fp9L4iv4rNjIN60+tZpzOV9iKnCPwkon8z7RDD+dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5c:8d:ec:f9:2f:04:7a:5f:df:d3:cc:d0:12:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=8440ff73b2b018221c0981dff55f19a2e1e3dc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:f4:bd:85:30:97:44:95:24:82:68:60:cd:
66:8f:9f:95:1e:06:b3:9b:c6:65:ea:54:99:50:79:
0e:f6:0d:d5:85:38:3d:9e:62:b9:dd:bc:53:4e:08:
c1:e1:01:6d:d6:b4:cd:b3:5e:43:f7:25:4b:9a:c1:
5d:50:99:7a:37:a6:5a:30:6e:3c:2f:1f:d6:90:a9:
49:c4:99:cb:cd:d8:57:c1:15:c1:7f:13:7f:2c:fc:
de:19:cd:81:94:75:c7:6f:2a:47:c9:7b:f4:dd:e7:
ea:b2:ac:4e:6d:20:b2:a5:29:8d:b8:99:b8:24:73:
6e:3f:65:f5:8e:75:42:b3:d6:10:94:8e:6a:60:0f:
ce:88:13:10:9a:57:df:1a:3a:16:a6:70:c6:d4:b5:
83:7d:58:11:ad:5a:bd:25:51:0b:d4:99:00:22:52:
15:ed:d3:06:d8:d3:f5:ab:a7:cc:29:f2:5f:88:8d:
1f:45:02:a8:1a:c7:89:c3:9c:83:32:89:b5:7e:e9:
9c:98:90:24:08:90:cd:1b:e2:a4:be:d1:d1:e9:50:
01:b0:38:ac:e9:c0:23:52:2e:ef:dd:57:f4:b1:54:
62:55:26:73:37:63:65:98:dd:e2:20:fe:6c:7b:8b:
c5:6c:0d:ae:c4:02:ae:98:dc:d6:42:63:a4:da:d9:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:40:FF:73:B2:B0:18:22:1C:09:81:DF:F5:5F:19:A2:E1:E3:DC:5A
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:27:2a:8e:ed:aa:51:6e:4a:1e:5e:fa:33:d4:ab:8d:4b:
ad:84:9d:09:86:be:4a:15:0b:00:54:bb:d2:de:2a:c8:e0:6c:
63:15:87:de:64:bd:cb:05:3c:17:e1:aa:de:15:7b:ea:d6:27:
bc:31:43:0d:1f:b2:52:98:20:c8:91:90:93:f1:d5:48:3d:93:
19:03:61:ea:23:3d:47:07:c9:b6:9a:54:69:c6:9c:44:59:bd:
06:c1:bf:c0:e0:89:98:68:a1:92:c4:81:df:a5:b2:61:29:2a:
fe:48:cf:25:4f:aa:2a:e0:fb:e9:28:a8:01:19:8a:8c:46:20:
4c:ca:07:1e:c0:bd:fe:7c:79:f7:d1:13:b9:cf:b1:56:b1:50:
b8:be:b3:58:54:6f:28:4e:71:a7:bb:ee:0a:bd:48:22:e7:22:
f8:4b:9f:fb:03:d2:48:d1:40:b6:b4:b6:13:4f:02:e8:41:04:
c1:4a:bc:19:7e:fa:e3:a9:ab:6a:1d:71:ed:7f:bc:63:8f:36:
30:c2:08:ba:91:e2:00:d1:a5:2b:e7:82:a2:86:82:33:32:62:
9f:76:e5:a3:22:4c:64:ed:66:40:a5:c7:a1:1a:9b:6c:53:78:
a3:06:0c:43:ec:ab:8a:d0:ef:5a:47:83:ad:34:44:c0:97:51:
9c:20:31:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LlyN7PkvBHpf39PM0BLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYWM2MTk3Nzk5ZmQ2OGI2ZTViYmUwYjU3ZTY1MmZkODBk
ZDM2MjEwHhcNMjYwMzI5MDYwMDU1WhcNMjYwMzMwMDYwMDU1WjAzMTEwLwYDVQQD
Eyg4NDQwZmY3M2IyYjAxODIyMWMwOTgxZGZmNTVmMTlhMmUxZTNkYzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi/0vYUwl0SVJIJoYM1mj5+VHgaz
m8Zl6lSZUHkO9g3VhTg9nmK53bxTTgjB4QFt1rTNs15D9yVLmsFdUJl6N6ZaMG48
Lx/WkKlJxJnLzdhXwRXBfxN/LPzeGc2BlHXHbypHyXv03efqsqxObSCypSmNuJm4
JHNuP2X1jnVCs9YQlI5qYA/OiBMQmlffGjoWpnDG1LWDfVgRrVq9JVEL1JkAIlIV
7dMG2NP1q6fMKfJfiI0fRQKoGseJw5yDMom1fumcmJAkCJDNG+KkvtHR6VABsDis
6cAjUi7v3Vf0sVRiVSZzN2NlmN3iIP5se4vFbA2uxAKumNzWQmOk2tkGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRA/3OysBgiHAmB3/VfGaLh49xaMB8GA1UdIwQY
MBaAFKqsYZd5n9aLblu+C1fmUv2A3TYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYt
NWI0OWRiNjVjNTQ1LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYtNWI0OWRiNjVjNTQ1
LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoYnKo7t
qlFuSh5e+jPUq41LrYSdCYa+ShULAFS70t4qyOBsYxWH3mS9ywU8F+Gq3hV76tYn
vDFDDR+yUpggyJGQk/HVSD2TGQNh6iM9RwfJtppUacacRFm9BsG/wOCJmGihksSB
36WyYSkq/kjPJU+qKuD76SioARmKjEYgTMoHHsC9/nx599ETuc+xVrFQuL6zWFRv
KE5xp7vuCr1IIuci+Euf+wPSSNFAtrS2E08C6EEEwUq8GX7646mrah1x7X+8Y482
MMIIupHiANGlK+eCooaCMzJin3bloyJMZO1mQKXHoRqbbFN4owYMQ+yritDvWkeD
rTREwJdRnCAxfw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:04 2026 by rpki-client