Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier: YVcBRkvKmBh4d2w9R4p1o7otpEsWOeIoTl47bxPIMd0=
Subject key identifier: BC:BF:B9:B2:75:DC:F2:AB:9F:E8:EA:8E:15:2F:80:D2:7E:53:60:48
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 019E2A396B4E3CD723767DB7814CA7FF5D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number: 0FCF
Signing time: Fri 15 May 2026 06:01:06 +0000
Manifest this update: Fri 15 May 2026 06:01:06 +0000
Manifest next update: Sat 16 May 2026 06:01:06 +0000
Files and hashes: 1: fVTksWbnATqXaCHSg3-Hyam5vM4.roa (hash: aKoDF8WcVN36RBOxnQH2HKKv2Xv+gPNSTtzRz6i4sY8=)
2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: gfCANXS6hl4sOBuRM1kAK7DynFXlMO/Qtfz5QBlX+5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:6b:4e:3c:d7:23:76:7d:b7:81:4c:a7:ff:5d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: May 15 06:01:06 2026 GMT
Not After : May 16 06:01:06 2026 GMT
Subject: CN=bcbfb9b275dcf2ab9fe8ea8e152f80d27e536048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:50:c8:4e:26:a6:cb:e6:ad:3c:4a:13:27:
59:e5:91:4c:ca:43:ed:f5:90:c5:a9:53:c8:96:e3:
98:b3:14:a7:e1:d8:d2:d9:2c:5a:3d:01:98:4c:f9:
19:02:c8:12:cd:de:d2:06:cd:3a:92:28:0d:dc:09:
d0:f0:c5:0a:07:02:b5:a4:80:fb:63:2b:e8:79:9b:
59:50:c8:73:65:33:f3:c9:6c:37:e3:6d:90:01:70:
8f:14:6c:b4:ae:17:fd:94:eb:14:e8:11:7c:33:ac:
d7:b7:c2:c2:9e:f6:ac:fc:8d:f7:df:21:47:f1:ce:
5f:d9:cd:66:15:2a:d7:66:1b:96:7b:97:ea:90:01:
54:a3:f3:b3:50:93:fd:e8:0d:0b:c0:a0:ea:41:38:
de:b1:f8:4e:0c:d4:a4:96:b0:75:61:92:44:1f:c1:
28:25:c3:5f:8b:12:19:3d:9d:99:e6:4d:3e:43:b9:
6f:ac:2c:98:a9:ef:02:f5:47:0c:f8:f2:bb:23:c2:
d4:6f:cc:0c:69:a5:b3:5a:3f:18:d2:90:4d:04:ea:
51:82:60:b2:55:4c:cc:3c:52:ce:3a:56:e8:ab:5c:
0b:a2:c7:c0:f9:24:c0:5d:b6:13:b1:e6:55:82:16:
90:66:53:c9:75:58:88:49:e3:64:7f:ae:fb:5c:f4:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:B9:B2:75:DC:F2:AB:9F:E8:EA:8E:15:2F:80:D2:7E:53:60:48
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9d:49:6a:47:8a:da:ae:6c:78:01:1c:ac:95:9a:07:bb:78:
3c:21:07:a0:07:42:91:f4:06:fa:60:fd:f2:29:b5:87:7d:c2:
56:4f:53:78:95:da:52:7f:01:96:25:3e:2f:26:29:b1:0d:c0:
89:96:7d:81:16:f3:66:c4:7f:95:53:79:b2:68:68:b1:0b:90:
96:b5:2a:ec:7f:12:bc:64:f5:d9:c1:6a:38:74:6b:83:b2:c8:
85:1e:d0:5d:54:84:83:23:0f:2a:5b:15:70:fe:91:0a:f3:51:
10:db:ca:db:1a:88:df:a1:50:bc:2f:72:ac:df:40:ce:a8:05:
be:2b:32:c7:1d:45:33:ec:03:aa:03:b8:f0:3e:9d:56:48:3a:
c8:5d:6e:d1:fa:7f:83:ff:ce:de:bd:fb:04:ed:13:09:c4:ac:
9a:3e:5e:9d:56:d2:35:e4:83:5c:17:da:a8:b8:18:ab:80:ab:
08:e2:6c:0d:99:d7:da:5c:20:92:88:4a:2e:bb:1c:e4:48:78:
b9:64:c3:31:26:b7:da:40:f9:64:fa:6d:ea:24:17:67:ab:5c:
98:d4:9c:c2:98:3f:ff:53:ff:3f:fb:4d:d2:7c:95:eb:7a:2c:
4e:cb:66:04:ec:56:ad:05:35:69:f3:27:17:aa:18:23:15:27:
dd:70:24:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOWtOPNcjdn23gUyn/10cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTA3M2IzMWQ4ODhlNDQzOWUyNzJlMDA3Yzk1MzJmYzMw
NWM4MGQwHhcNMjYwNTE1MDYwMTA2WhcNMjYwNTE2MDYwMTA2WjAzMTEwLwYDVQQD
EyhiY2JmYjliMjc1ZGNmMmFiOWZlOGVhOGUxNTJmODBkMjdlNTM2MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDBQyE4mpsvmrTxKEydZ5ZFMykPt
9ZDFqVPIluOYsxSn4djS2SxaPQGYTPkZAsgSzd7SBs06kigN3AnQ8MUKBwK1pID7
YyvoeZtZUMhzZTPzyWw3422QAXCPFGy0rhf9lOsU6BF8M6zXt8LCnvas/I333yFH
8c5f2c1mFSrXZhuWe5fqkAFUo/OzUJP96A0LwKDqQTjesfhODNSklrB1YZJEH8Eo
JcNfixIZPZ2Z5k0+Q7lvrCyYqe8C9UcM+PK7I8LUb8wMaaWzWj8Y0pBNBOpRgmCy
VUzMPFLOOlboq1wLosfA+STAXbYTseZVghaQZlPJdViISeNkf677XPQntwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLy/ubJ13PKrn+jqjhUvgNJ+U2BIMB8GA1UdIwQY
MBaAFKmgc7MdiI5EOeJy4AfJUy/DBcgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iYTNiMmYtYTI4OS00MDRlLWFlZjgt
NGU3MzdlMDZkMjkwLzEvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iYTNiMmYtYTI4OS00MDRlLWFlZjgtNGU3MzdlMDZkMjkw
LzEvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp1JakeK
2q5seAEcrJWaB7t4PCEHoAdCkfQG+mD98im1h33CVk9TeJXaUn8BliU+LyYpsQ3A
iZZ9gRbzZsR/lVN5smhosQuQlrUq7H8SvGT12cFqOHRrg7LIhR7QXVSEgyMPKlsV
cP6RCvNRENvK2xqI36FQvC9yrN9AzqgFvisyxx1FM+wDqgO48D6dVkg6yF1u0fp/
g//O3r37BO0TCcSsmj5enVbSNeSDXBfaqLgYq4CrCOJsDZnX2lwgkohKLrsc5Eh4
uWTDMSa32kD5ZPpt6iQXZ6tcmNScwpg//1P/P/tN0nyV63osTstmBOxWrQU1afMn
F6oYIxUn3XAkwQ==
-----END CERTIFICATE-----
Generated at Fri May 15 13:27:52 2026 by rpki-client