Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: X+bObQPLsIlXa90FDFbkERpQo0tLBvFW3r01Ea9vmAc=
Subject key identifier: E7:7E:17:96:79:C2:ED:30:01:19:61:97:17:AE:33:78:1B:64:B0:0F
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019D05F817ECAE3576289421C505043642AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1645
Signing time: Thu 19 Mar 2026 12:00:38 +0000
Manifest this update: Thu 19 Mar 2026 12:00:38 +0000
Manifest next update: Fri 20 Mar 2026 12:00:38 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: unktdaAsFYE5/PamH6OcCMGdLwKJbjycdMxGrLomzQk=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:f8:17:ec:ae:35:76:28:94:21:c5:05:04:36:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Mar 19 12:00:38 2026 GMT
Not After : Mar 20 12:00:38 2026 GMT
Subject: CN=e77e179679c2ed300119619717ae33781b64b00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:74:8c:0c:ab:36:16:94:23:8a:f5:d6:1d:
2f:75:24:58:ae:73:cd:cd:cf:f0:06:92:95:31:21:
1b:12:bc:53:b2:5d:0f:ba:5f:7c:29:72:1b:87:5d:
46:56:db:38:82:d3:ce:42:e1:5b:70:db:2c:3b:76:
66:40:9b:99:b3:cc:bb:ee:2d:32:f0:1d:2c:9f:89:
6c:62:5a:b2:7e:2d:18:e1:6a:f0:2e:a2:72:57:b7:
f0:80:86:64:9c:06:a9:02:11:fc:6e:bf:06:d5:dc:
46:4d:82:9d:f1:85:88:66:25:08:24:54:c6:55:de:
9e:d2:be:b4:73:e3:74:bb:b7:2d:59:c3:99:d3:26:
3a:c1:4f:6f:7d:d2:bd:a0:5c:ed:6f:3a:3e:f9:8e:
19:f0:de:05:16:ae:23:5e:32:c9:c7:e3:e4:e9:db:
31:76:17:86:31:f2:15:85:6c:5d:7a:3a:f5:2a:9f:
8d:16:3a:75:22:77:01:69:de:9f:fe:3b:a8:31:22:
71:c4:ba:f8:76:19:7d:e7:f2:e3:2d:10:74:83:5c:
fd:98:92:4b:01:bc:d5:10:31:78:c8:08:cc:c0:5e:
e5:d7:49:97:a5:98:73:86:c0:ae:9b:94:11:9c:7e:
b2:bd:77:f9:14:1e:6e:1c:57:73:9f:78:e7:64:a3:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:17:96:79:C2:ED:30:01:19:61:97:17:AE:33:78:1B:64:B0:0F
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:42:97:92:52:4e:58:9d:d3:c7:fd:b6:78:06:55:e7:b6:3c:
21:d3:09:8d:86:7a:2e:a0:9f:89:81:75:81:2d:52:24:31:d6:
df:43:d5:1c:b8:12:3e:e5:3a:d9:ca:26:bf:f3:83:62:48:e7:
7c:49:15:29:39:1a:6b:84:5e:1f:85:0b:30:2a:b2:ae:3b:d5:
8a:31:19:ff:a5:3a:d3:90:58:ba:19:8d:2c:3c:c0:18:bf:d3:
10:a5:53:ea:89:71:91:6f:7c:dc:70:cc:7a:c7:ea:cb:f0:9a:
05:76:dc:d1:9c:c9:e7:6c:f5:a4:e2:45:64:50:56:04:5b:e7:
99:ba:e6:1f:91:f8:2b:d0:f5:82:6e:a6:04:5b:3a:5c:c3:f9:
9c:47:d1:47:d5:a4:2c:14:e2:a9:35:db:be:e2:8a:7d:85:79:
d0:5a:ac:2f:8a:89:a3:0b:1a:56:55:cf:19:49:33:3d:67:3d:
5d:19:da:80:0e:2f:28:d4:e3:c6:8d:e7:a0:3d:b1:b3:a4:c8:
26:2b:a4:66:a3:83:e2:d4:37:df:09:d0:77:47:53:7a:14:50:
43:e9:db:81:a6:37:44:e9:90:b4:68:93:61:94:68:bd:c9:dc:
bb:e1:4d:07:3c:5e:ca:e9:bd:cc:43:12:f6:6b:ae:8f:62:6d:
82:f3:d5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0F+BfsrjV2KJQhxQUENkKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1
MTI5MzkwHhcNMjYwMzE5MTIwMDM4WhcNMjYwMzIwMTIwMDM4WjAzMTEwLwYDVQQD
EyhlNzdlMTc5Njc5YzJlZDMwMDExOTYxOTcxN2FlMzM3ODFiNjRiMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3t0jAyrNhaUI4r11h0vdSRYrnPN
zc/wBpKVMSEbErxTsl0Pul98KXIbh11GVts4gtPOQuFbcNssO3ZmQJuZs8y77i0y
8B0sn4lsYlqyfi0Y4WrwLqJyV7fwgIZknAapAhH8br8G1dxGTYKd8YWIZiUIJFTG
Vd6e0r60c+N0u7ctWcOZ0yY6wU9vfdK9oFztbzo++Y4Z8N4FFq4jXjLJx+Pk6dsx
dheGMfIVhWxdejr1Kp+NFjp1IncBad6f/juoMSJxxLr4dhl95/LjLRB0g1z9mJJL
AbzVEDF4yAjMwF7l10mXpZhzhsCum5QRnH6yvXf5FB5uHFdzn3jnZKMHPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOd+F5Z5wu0wARlhlxeuM3gbZLAPMB8GA1UdIwQY
MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt
ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx
LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEKXklJO
WJ3Tx/22eAZV57Y8IdMJjYZ6LqCfiYF1gS1SJDHW30PVHLgSPuU62comv/ODYkjn
fEkVKTkaa4ReH4ULMCqyrjvVijEZ/6U605BYuhmNLDzAGL/TEKVT6olxkW983HDM
esfqy/CaBXbc0ZzJ52z1pOJFZFBWBFvnmbrmH5H4K9D1gm6mBFs6XMP5nEfRR9Wk
LBTiqTXbvuKKfYV50FqsL4qJowsaVlXPGUkzPWc9XRnagA4vKNTjxo3noD2xs6TI
JiukZqOD4tQ33wnQd0dTehRQQ+nbgaY3ROmQtGiTYZRovcncu+FNBzxeyum9zEMS
9muuj2JtgvPV5g==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:05:08 2026 by rpki-client