Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: ynFIaNre5LGJIdArqw85JXLlEn7wtR8RqPRGgG84phc=
Subject key identifier: E8:FD:E6:E1:AD:A8:AA:6D:FC:DF:68:EB:4A:E9:EC:13:99:CF:E7:D6
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019CE3A2ABF94841AF85D9CEDA2795F4F98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 186E
Signing time: Thu 12 Mar 2026 20:00:14 +0000
Manifest this update: Thu 12 Mar 2026 20:00:14 +0000
Manifest next update: Fri 13 Mar 2026 20:00:14 +0000
Files and hashes: 1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: PT/b4ZWmBJ+yMsB/IoVLsEhzWgBb7FKS6KcLA0eyMMQ=)
3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=)
4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=)
5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:ab:f9:48:41:af:85:d9:ce:da:27:95:f4:f9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Mar 12 20:00:14 2026 GMT
Not After : Mar 13 20:00:14 2026 GMT
Subject: CN=e8fde6e1ada8aa6dfcdf68eb4ae9ec1399cfe7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:a2:a9:ac:05:49:fd:53:e1:16:e0:0c:1d:
b7:0e:44:f3:56:b8:40:40:8e:fc:a6:36:ec:5c:8f:
74:8b:14:b1:b4:89:b1:04:24:c7:9f:e7:4d:90:36:
31:47:3c:8a:ea:1a:0f:4c:4e:b8:d2:e1:b5:ba:d3:
40:e3:12:d7:2f:99:b9:5a:53:b3:c7:65:5a:ff:24:
5c:22:56:08:d8:b6:a3:28:b1:d1:5b:24:7e:ae:e9:
be:4d:da:91:db:bb:5a:8a:04:27:1a:9c:db:b3:6b:
02:3b:d6:3f:e5:8d:06:1b:4a:59:9f:dc:c6:4e:94:
88:1f:99:99:db:7e:55:5e:3d:19:98:14:ec:79:24:
20:eb:db:32:e0:da:34:0f:7d:d1:0b:d7:12:40:8f:
21:02:9f:a5:d8:58:f3:d6:ae:3c:a9:45:ce:bf:d4:
25:15:72:1c:fd:a4:d1:ce:30:e8:87:fe:17:4d:55:
1c:1b:77:38:a4:87:c1:48:f4:18:f4:89:d9:63:6d:
bc:c6:a2:4f:4d:bf:12:50:7e:95:8f:3f:24:4a:cf:
ea:fc:d8:64:02:85:6c:70:03:e9:8e:1d:f0:6d:12:
e0:3a:01:be:23:5d:2f:d5:3c:c1:ed:44:2b:d2:02:
c8:93:d8:6d:c2:1e:29:f3:7e:93:6e:0f:6f:59:c9:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:E6:E1:AD:A8:AA:6D:FC:DF:68:EB:4A:E9:EC:13:99:CF:E7:D6
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:79:b8:85:8c:d8:3d:60:4b:03:66:54:20:88:1d:02:6e:47:
4b:93:0c:3d:2e:ba:4f:45:03:a0:55:1c:28:cf:1e:88:f6:de:
0c:0f:a6:b8:4a:aa:8a:d9:ca:c4:f1:76:1c:bf:f6:04:38:ec:
21:96:8c:4b:e8:6a:06:6e:79:d4:87:67:b7:1f:06:73:f5:de:
4d:3b:f7:10:e8:56:23:d2:1a:cc:93:04:f5:b9:23:dd:7d:11:
9e:21:72:61:c7:87:aa:86:7e:81:ee:40:a2:96:ba:63:13:92:
be:31:2f:8d:af:e6:a5:87:8c:b6:79:71:c8:52:4a:44:96:ec:
1f:e9:a5:16:e3:5c:1a:77:89:69:01:58:9e:1b:18:86:6f:7b:
13:72:a5:d6:41:ee:7c:23:fa:bc:e2:eb:20:54:b1:34:fa:94:
fb:c9:e6:9c:e1:33:b8:49:c6:ef:39:b4:b9:90:73:29:24:06:
aa:72:c5:7a:1f:84:41:2d:07:e7:06:94:c4:60:4e:a2:98:b7:
9e:23:8e:b6:e9:54:4e:05:6a:3f:ef:47:62:be:8c:c0:19:09:
ea:e2:cf:2e:52:16:c3:27:a3:b9:2d:96:76:47:3c:bd:24:8c:
be:25:f9:38:eb:92:58:8a:9e:1b:e2:fb:35:06:4d:ab:ec:de:
17:4f:f8:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjoqv5SEGvhdnO2ieV9PmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjYwMzEyMjAwMDE0WhcNMjYwMzEzMjAwMDE0WjAzMTEwLwYDVQQD
EyhlOGZkZTZlMWFkYThhYTZkZmNkZjY4ZWI0YWU5ZWMxMzk5Y2ZlN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVGiqawFSf1T4RbgDB23DkTzVrhA
QI78pjbsXI90ixSxtImxBCTHn+dNkDYxRzyK6hoPTE640uG1utNA4xLXL5m5WlOz
x2Va/yRcIlYI2LajKLHRWyR+rum+TdqR27taigQnGpzbs2sCO9Y/5Y0GG0pZn9zG
TpSIH5mZ235VXj0ZmBTseSQg69sy4No0D33RC9cSQI8hAp+l2Fjz1q48qUXOv9Ql
FXIc/aTRzjDoh/4XTVUcG3c4pIfBSPQY9InZY228xqJPTb8SUH6Vjz8kSs/q/Nhk
AoVscAPpjh3wbRLgOgG+I10v1TzB7UQr0gLIk9htwh4p836Tbg9vWcm93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj95uGtqKpt/N9o60rp7BOZz+fWMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXm4hYzY
PWBLA2ZUIIgdAm5HS5MMPS66T0UDoFUcKM8eiPbeDA+muEqqitnKxPF2HL/2BDjs
IZaMS+hqBm551Idntx8Gc/XeTTv3EOhWI9IazJME9bkj3X0RniFyYceHqoZ+ge5A
opa6YxOSvjEvja/mpYeMtnlxyFJKRJbsH+mlFuNcGneJaQFYnhsYhm97E3Kl1kHu
fCP6vOLrIFSxNPqU+8nmnOEzuEnG7zm0uZBzKSQGqnLFeh+EQS0H5waUxGBOopi3
niOOtulUTgVqP+9HYr6MwBkJ6uLPLlIWwyejuS2Wdkc8vSSMviX5OOuSWIqeG+L7
NQZNq+zeF0/4mQ==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:21 2026 by rpki-client