Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File: qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier: Y0aPAdEkRl6EjTNiKGGwaFnR6QzEYnmHE2aNImbLCTo=
Subject key identifier: 44:EF:0D:28:E3:D8:DD:FD:56:9D:75:30:4B:38:4D:A6:E3:3C:9D:EA
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 019D37C08ED3881E84FBE000EA993314F1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: DGlT4Wkz8wQwS/AO7QtIlSUjOZwe00pqVLbEXcVsQhQ=)
2: urEdR1rkKC37QLchd2Eu3Uvae7w.roa (hash: kKj8ZOJ0MJkO16pSik4xWptNoglu7DaHV1OVMMkcbVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8e:d3:88:1e:84:fb:e0:00:ea:99:33:14:f1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=44ef0d28e3d8ddfd569d75304b384da6e33c9dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:9d:e8:ca:cb:58:35:25:d4:2a:ed:b6:f1:
e8:83:33:79:de:31:29:52:d2:0e:51:e1:82:51:3d:
f0:12:8f:91:e5:1b:c8:27:ed:58:1e:ae:60:d5:4d:
0f:05:6d:4c:68:83:57:2b:d0:2a:28:f7:fd:96:82:
cc:d2:91:35:22:6d:64:0d:5f:bf:dd:d5:8d:bf:a2:
fb:76:ce:ad:cb:84:b7:fd:eb:32:50:5d:b7:47:e7:
71:80:cc:c3:c3:b9:47:37:d6:57:ac:cb:6c:c9:e6:
4b:7e:95:37:de:12:94:3e:f0:40:c7:3c:df:bc:9f:
71:64:d7:a5:f3:78:cc:02:a5:ba:b1:f6:b2:ba:47:
00:5e:af:e1:1e:e4:80:0b:dc:91:34:9d:a7:52:a5:
14:ac:fe:ae:f1:1b:9e:68:44:7d:2f:b1:3d:22:c3:
e1:0c:a8:b8:fc:ad:eb:3a:0d:b4:6a:61:28:09:25:
ba:1a:4a:0f:f9:58:0f:06:32:25:9b:b8:5d:41:12:
d3:8a:28:15:92:17:31:a6:8a:03:ac:ef:66:8f:67:
87:ae:b5:77:48:cc:17:58:c9:58:a6:38:90:74:f2:
8f:17:bc:4e:7a:3b:fb:16:54:f9:5d:60:9e:2a:2d:
df:34:fc:2f:9d:52:ce:e3:d3:fb:d3:37:71:05:f4:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:0D:28:E3:D8:DD:FD:56:9D:75:30:4B:38:4D:A6:E3:3C:9D:EA
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fa:5a:fb:f1:e7:2f:5e:6c:0a:f5:91:06:a4:e7:a1:5d:9e:
8e:fb:4b:a6:ee:19:0d:b9:c4:a7:72:4d:7d:88:48:53:07:23:
ca:96:05:9b:2e:1d:f4:ed:96:a8:a9:2e:26:8c:6e:0a:87:58:
92:be:8e:60:e3:d7:62:72:74:cc:f4:45:8d:4a:ac:93:94:19:
90:94:d4:c8:5c:13:22:06:ca:e3:d9:c2:b0:f9:0a:e3:f4:f6:
e6:ee:84:a2:7c:62:be:10:6c:f7:7b:50:6c:05:ba:72:11:da:
20:56:c1:e2:2a:b8:1b:47:66:9a:ea:18:7c:32:a8:53:9b:26:
cd:74:1e:a0:bd:e1:4d:d1:92:6f:26:b3:db:f4:7e:3f:bd:49:
f8:5d:e1:3b:75:cf:af:52:a3:73:90:55:ac:a6:09:01:3e:74:
c1:98:ed:f6:49:98:bd:df:95:85:1d:c7:f4:a8:84:e7:14:6e:
ec:c3:5c:f0:6c:06:23:66:8b:ae:a8:86:79:13:44:78:59:7e:
05:5c:67:f2:9a:fb:8e:34:54:ae:71:69:a0:b7:26:67:0c:c8:
e1:87:fe:3a:4f:ed:84:b2:d7:e4:5b:31:55:a9:9c:b1:06:d8:
d8:4a:42:4b:38:b7:96:42:8f:58:97:51:00:67:fe:28:61:57:
9f:3c:19:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wI7TiB6E++AA6pkzFPHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA1Nzg1OWQxNjYwZThkODcyOTc5ZWU2ZDZhNmIyYzQz
M2EzMDUwHhcNMjYwMzI5MDQwMDU5WhcNMjYwMzMwMDQwMDU5WjAzMTEwLwYDVQQD
Eyg0NGVmMGQyOGUzZDhkZGZkNTY5ZDc1MzA0YjM4NGRhNmUzM2M5ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28Cd6MrLWDUl1CrttvHogzN53jEp
UtIOUeGCUT3wEo+R5RvIJ+1YHq5g1U0PBW1MaINXK9AqKPf9loLM0pE1Im1kDV+/
3dWNv6L7ds6ty4S3/esyUF23R+dxgMzDw7lHN9ZXrMtsyeZLfpU33hKUPvBAxzzf
vJ9xZNel83jMAqW6sfayukcAXq/hHuSAC9yRNJ2nUqUUrP6u8RueaER9L7E9IsPh
DKi4/K3rOg20amEoCSW6GkoP+VgPBjIlm7hdQRLTiigVkhcxpooDrO9mj2eHrrV3
SMwXWMlYpjiQdPKPF7xOejv7FlT5XWCeKi3fNPwvnVLO49P70zdxBfQHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETvDSjj2N39Vp11MEs4TabjPJ3qMB8GA1UdIwQY
MBaAFKhgV4WdFmDo2HKXnubWprLEM6MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYt
ZDRlZGMyMGNjMWFjLzEvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYtZDRlZGMyMGNjMWFj
LzEvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfpa+/Hn
L15sCvWRBqTnoV2ejvtLpu4ZDbnEp3JNfYhIUwcjypYFmy4d9O2WqKkuJoxuCodY
kr6OYOPXYnJ0zPRFjUqsk5QZkJTUyFwTIgbK49nCsPkK4/T25u6EonxivhBs93tQ
bAW6chHaIFbB4iq4G0dmmuoYfDKoU5smzXQeoL3hTdGSbyaz2/R+P71J+F3hO3XP
r1Kjc5BVrKYJAT50wZjt9kmYvd+VhR3H9KiE5xRu7MNc8GwGI2aLrqiGeRNEeFl+
BVxn8pr7jjRUrnFpoLcmZwzI4Yf+Ok/thLLX5FsxVamcsQbY2EpCSzi3lkKPWJdR
AGf+KGFXnzwZpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:53 2026 by rpki-client