Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: 6BMJfHE4xjYiCO/lNi+7++/rAJA9AA376XrsFFwNxnQ=
Subject key identifier: 5A:7E:70:12:1F:28:F9:3E:5D:94:32:F6:D7:E7:E8:D8:56:86:97:86
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 019D37C09E469E4A14089CA674B646EB77CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0DAC
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (hash: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU=)
2: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (hash: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: jkobx2tb06R02FXWsXG4YKraICe63Q+3RpaxGPZPeDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9e:46:9e:4a:14:08:9c:a6:74:b6:46:eb:77:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=5a7e70121f28f93e5d9432f6d7e7e8d856869786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:ee:e4:8d:b3:7c:c3:4f:a6:17:2a:ef:91:
1e:58:a9:69:9d:77:11:46:24:34:31:17:12:06:cd:
58:a6:4a:b7:c3:35:22:67:02:03:6d:69:f4:b4:03:
23:bb:15:47:6e:9a:10:aa:68:77:59:54:98:eb:55:
ea:2d:ea:dd:0b:de:49:96:4e:5f:c2:4f:4a:9f:70:
1b:7c:57:35:80:65:12:c4:35:54:aa:6e:fa:e0:8f:
0c:51:7e:bc:3f:3e:ce:4d:3f:ea:82:5a:de:a0:a7:
b3:92:a8:61:6c:a2:2c:48:64:02:88:e9:24:6d:f2:
ef:24:3e:c1:81:f0:88:1b:ce:83:29:04:ce:b1:43:
98:ca:6b:0a:5a:e0:00:95:c5:60:c4:65:c5:ac:a3:
d0:ed:6a:9e:c7:49:7c:6d:f2:6f:c7:c0:39:d3:e7:
a7:05:e1:2b:5a:fb:8c:d2:10:92:91:86:e3:aa:21:
dd:ec:e7:8a:92:fa:e7:77:fa:12:3f:f5:1c:ab:cf:
ea:ac:ae:35:0f:ef:ad:87:7e:df:28:9a:48:6b:57:
2f:dd:c7:de:7b:b0:e9:1c:ce:5e:de:cf:41:5a:3d:
ae:c0:7e:02:27:e8:04:0a:c5:d3:ff:35:af:e7:87:
83:7a:92:c4:77:b1:d5:e2:0a:15:c4:2a:19:a5:03:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:70:12:1F:28:F9:3E:5D:94:32:F6:D7:E7:E8:D8:56:86:97:86
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ed:c4:5a:c8:6b:bd:8e:fa:35:04:3a:0f:d8:ba:ef:31:37:
0a:fe:b4:af:a6:c7:3a:65:93:15:d8:06:6d:b0:3b:b8:8f:1b:
ab:d7:bd:87:dc:de:12:b6:d6:db:26:21:a8:46:b3:42:e5:93:
88:13:a1:8b:78:18:0f:a2:c7:04:bd:45:a3:23:b6:ee:ee:56:
60:44:3f:1f:db:ee:23:d7:03:1b:0a:5d:34:4b:c5:c0:6a:8a:
34:48:b9:ac:7e:a4:4a:7d:02:0b:85:0d:11:61:fc:d0:24:4e:
d0:c0:e5:d1:f5:e5:33:fc:dc:1a:d1:4f:8f:82:e6:a1:4f:5d:
46:dc:05:f8:ab:59:13:ad:65:2e:2d:0c:92:96:e8:51:ea:cf:
ee:3c:23:ee:2b:08:31:7e:eb:b5:bc:1e:42:3a:9c:79:e8:48:
99:06:f3:cd:cb:7c:6e:a3:9b:9c:db:53:f5:5a:d2:22:3e:b0:
7c:ef:25:88:2b:40:8a:68:68:9b:d6:6b:df:c6:4b:1e:55:b9:
56:1e:ad:94:28:c5:c1:40:db:02:fc:fc:4c:ec:44:0a:2d:e0:
67:bc:e2:73:11:76:ea:5b:93:b5:d2:3a:26:17:fa:2b:75:1d:
64:98:58:39:89:b6:4b:8d:5f:b3:b5:79:1e:f7:7e:55:b6:4c:
75:2a:9c:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJ5GnkoUCJymdLZG63fOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm
N2U4MzIwHhcNMjYwMzI5MDQwMTAzWhcNMjYwMzMwMDQwMTAzWjAzMTEwLwYDVQQD
Eyg1YTdlNzAxMjFmMjhmOTNlNWQ5NDMyZjZkN2U3ZThkODU2ODY5Nzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Du5I2zfMNPphcq75EeWKlpnXcR
RiQ0MRcSBs1Ypkq3wzUiZwIDbWn0tAMjuxVHbpoQqmh3WVSY61XqLerdC95Jlk5f
wk9Kn3AbfFc1gGUSxDVUqm764I8MUX68Pz7OTT/qglreoKezkqhhbKIsSGQCiOkk
bfLvJD7BgfCIG86DKQTOsUOYymsKWuAAlcVgxGXFrKPQ7Wqex0l8bfJvx8A50+en
BeErWvuM0hCSkYbjqiHd7OeKkvrnd/oSP/Ucq8/qrK41D++th37fKJpIa1cv3cfe
e7DpHM5e3s9BWj2uwH4CJ+gECsXT/zWv54eDepLEd7HV4goVxCoZpQNGTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp+cBIfKPk+XZQy9tfn6NhWhpeGMB8GA1UdIwQY
MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt
MjJmYzU4OGJjNjZmLzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm
LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+3EWshr
vY76NQQ6D9i67zE3Cv60r6bHOmWTFdgGbbA7uI8bq9e9h9zeErbW2yYhqEazQuWT
iBOhi3gYD6LHBL1FoyO27u5WYEQ/H9vuI9cDGwpdNEvFwGqKNEi5rH6kSn0CC4UN
EWH80CRO0MDl0fXlM/zcGtFPj4LmoU9dRtwF+KtZE61lLi0MkpboUerP7jwj7isI
MX7rtbweQjqceehImQbzzct8bqObnNtT9VrSIj6wfO8liCtAimhom9Zr38ZLHlW5
Vh6tlCjFwUDbAvz8TOxECi3gZ7zicxF26luTtdI6Jhf6K3UdZJhYOYm2S41fs7V5
Hvd+VbZMdSqcyg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:07 2026 by rpki-client