Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: Fvt+QlPpSvpY6BegUeruz9PLOaOBNAqp3wMj7r4N5Yk=
Subject key identifier: 65:72:D9:53:58:67:96:25:E5:B5:02:D1:AB:AC:04:32:FE:3D:4E:28
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019DA30AE7778B56BDCA6829FA6564AB9529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 027A
Signing time: Sun 19 Apr 2026 00:01:33 +0000
Manifest this update: Sun 19 Apr 2026 00:01:33 +0000
Manifest next update: Mon 20 Apr 2026 00:01:33 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: dX05XyiyydXu2d0HI8iwIZK5Rlyu0aBqQLeTx5R2eu8=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:e7:77:8b:56:bd:ca:68:29:fa:65:64:ab:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Apr 19 00:01:33 2026 GMT
Not After : Apr 20 00:01:33 2026 GMT
Subject: CN=6572d95358679625e5b502d1abac0432fe3d4e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:a0:27:64:ef:d0:43:04:bb:fa:dc:da:26:
4a:dc:ef:41:d7:fe:78:37:10:2a:1b:49:82:8f:7d:
bc:a8:b9:4b:19:f1:4d:6d:b6:33:ea:2a:cb:16:82:
84:fe:6b:98:9a:d9:70:f4:43:8d:80:ce:cd:f1:b6:
52:cf:19:9b:ba:92:a6:7f:b2:15:d7:00:fb:08:6b:
0d:71:55:d0:bd:4f:bd:51:c9:c2:ff:a1:c9:08:62:
35:79:19:ab:f2:fa:a7:77:b4:85:eb:1d:97:16:11:
e2:af:dd:81:db:8d:3e:b5:6e:a0:09:6e:88:63:88:
ee:82:15:b6:c9:0b:1b:a1:66:f0:a0:13:51:52:a2:
18:21:d7:e7:30:3f:14:63:21:6c:9d:9f:32:36:a2:
37:25:71:18:d1:7e:86:ea:b0:42:e7:27:80:2f:e8:
fa:95:f8:80:da:5c:f3:06:df:39:ad:d6:b7:eb:1d:
47:7c:10:26:09:52:a4:dc:aa:af:36:0c:29:49:cd:
c4:f8:9e:d5:4b:50:35:1b:7f:34:68:59:13:10:69:
00:5c:67:77:36:69:94:6b:b5:9f:d3:12:9e:b7:e5:
b2:f0:53:7a:c2:42:f1:1c:82:d7:38:fc:fe:a8:e4:
60:e3:96:f4:84:68:2d:75:b6:96:0d:1a:89:33:15:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:72:D9:53:58:67:96:25:E5:B5:02:D1:AB:AC:04:32:FE:3D:4E:28
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e9:93:bb:e1:ed:8e:08:12:42:c0:86:33:4c:da:5d:30:95:
73:2f:6a:f4:11:94:ff:33:bf:ce:c3:0c:c8:07:74:1f:62:98:
ad:8e:dc:75:1e:84:1d:2e:c5:a2:58:6c:6b:2c:b9:14:71:d2:
0e:3d:61:19:dc:d7:b8:d6:98:78:66:77:b6:cc:6c:e7:ed:b7:
fa:c7:e9:21:48:cc:eb:b1:03:cf:cd:d2:30:ea:c5:1d:f2:6b:
68:8b:b7:89:32:98:71:0a:cf:79:d7:94:f2:50:fc:2b:b0:c0:
5f:00:ac:48:ce:92:68:d9:37:11:e2:25:e1:8d:6a:72:99:8b:
55:eb:ec:e4:60:1d:d6:1e:bd:d1:a1:b8:17:55:61:b2:9b:09:
49:a4:5c:d8:49:6d:5a:8f:72:28:fb:e5:2f:b1:a5:29:ee:6d:
48:a5:a6:0d:61:ed:2e:36:98:85:ab:90:a2:3e:65:05:9e:9c:
ab:1e:bc:39:77:af:82:8d:6f:5a:68:89:15:f9:93:96:60:a1:
5a:9c:ef:d0:fb:9e:93:cb:b2:c8:68:30:52:c7:e4:25:cb:5b:
5c:15:fc:34:fc:22:df:5a:c2:14:19:6f:23:ab:5f:cf:b6:d1:
00:67:f0:fe:7c:4e:57:9a:54:9d:0f:75:c2:88:6d:8c:e7:db:
e6:f2:51:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCud3i1a9ymgp+mVkq5UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzNiMDgwMWQ0MGQwNTg0OTA3MmUyZmM4MTIxM2IwMjVk
MmEyYmMwHhcNMjYwNDE5MDAwMTMzWhcNMjYwNDIwMDAwMTMzWjAzMTEwLwYDVQQD
Eyg2NTcyZDk1MzU4Njc5NjI1ZTViNTAyZDFhYmFjMDQzMmZlM2Q0ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlWgJ2Tv0EMEu/rc2iZK3O9B1/54
NxAqG0mCj328qLlLGfFNbbYz6irLFoKE/muYmtlw9EONgM7N8bZSzxmbupKmf7IV
1wD7CGsNcVXQvU+9UcnC/6HJCGI1eRmr8vqnd7SF6x2XFhHir92B240+tW6gCW6I
Y4jughW2yQsboWbwoBNRUqIYIdfnMD8UYyFsnZ8yNqI3JXEY0X6G6rBC5yeAL+j6
lfiA2lzzBt85rda36x1HfBAmCVKk3KqvNgwpSc3E+J7VS1A1G380aFkTEGkAXGd3
NmmUa7Wf0xKet+Wy8FN6wkLxHILXOPz+qORg45b0hGgtdbaWDRqJMxVgLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVy2VNYZ5Yl5bUC0ausBDL+PU4oMB8GA1UdIwQY
MBaAFKgzsIAdQNBYSQcuL8gSE7Al0qK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjkt
MTdiZjA2NmRhNGM1LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjktMTdiZjA2NmRhNGM1
LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATumTu+Ht
jggSQsCGM0zaXTCVcy9q9BGU/zO/zsMMyAd0H2KYrY7cdR6EHS7Folhsayy5FHHS
Dj1hGdzXuNaYeGZ3tsxs5+23+sfpIUjM67EDz83SMOrFHfJraIu3iTKYcQrPedeU
8lD8K7DAXwCsSM6SaNk3EeIl4Y1qcpmLVevs5GAd1h690aG4F1VhspsJSaRc2Elt
Wo9yKPvlL7GlKe5tSKWmDWHtLjaYhauQoj5lBZ6cqx68OXevgo1vWmiJFfmTlmCh
Wpzv0Puek8uyyGgwUsfkJctbXBX8NPwi31rCFBlvI6tfz7bRAGfw/nxOV5pUnQ91
wohtjOfb5vJRBA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:12:35 2026 by rpki-client