Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: Yze84oQkO1eMa9nB/QE/m9WYgb1CPFeHkVo7rfnLfKA=
Subject key identifier: 02:F4:73:85:B6:3F:FF:BF:74:11:57:BC:AF:67:7C:9C:D4:87:CD:AD
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 019CE5911AF29EE093BF7EC8335D281CEB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 05:00:17 +0000
Manifest this update: Fri 13 Mar 2026 05:00:17 +0000
Manifest next update: Sat 14 Mar 2026 05:00:17 +0000
Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: uIylRvWEXzN7+N1TSRFwsbF9Lhu04xbUaPeRiwMsTVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:1a:f2:9e:e0:93:bf:7e:c8:33:5d:28:1c:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Mar 13 05:00:17 2026 GMT
Not After : Mar 14 05:00:17 2026 GMT
Subject: CN=02f47385b63fffbf741157bcaf677c9cd487cdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:34:d4:bf:54:e1:41:1d:ed:4d:03:3f:f8:
9a:e8:1e:89:6f:66:17:6f:18:29:63:ef:66:a3:af:
60:cd:b9:5b:f4:d1:5d:b4:72:a9:23:58:85:1d:7a:
07:f0:ab:30:bf:d2:30:24:29:55:ea:e9:f7:3d:6b:
21:ba:77:ae:10:de:e0:9a:7f:95:16:80:70:4a:39:
99:b2:bf:93:6b:b3:cc:4f:31:ff:ba:67:1e:93:30:
e8:fc:e1:4b:0d:ac:eb:3c:70:91:3b:a4:7b:94:f6:
ec:72:60:9c:81:1f:96:8c:77:be:a3:15:73:fd:a7:
f0:da:7b:93:54:14:35:f8:79:24:c8:2a:51:ab:89:
e4:1a:c2:3f:35:b1:1e:7f:c6:d1:be:9e:3f:64:6e:
c0:e7:da:59:f9:bb:5a:e3:42:34:ac:57:dd:03:91:
3a:c3:41:b9:a5:c9:d1:eb:f7:d6:5f:2f:c1:8b:bb:
81:74:c0:23:bd:f9:01:c3:50:3e:32:81:a2:e0:f5:
d4:f7:98:42:c1:97:62:9b:36:3a:b5:21:f6:a5:6a:
f0:ba:0f:3f:5b:17:75:45:ea:09:4d:10:f2:86:a8:
4c:53:4d:90:3e:3a:7b:9c:5d:46:19:be:43:c7:57:
89:aa:9e:14:38:25:3d:66:41:40:e5:81:21:4a:0d:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F4:73:85:B6:3F:FF:BF:74:11:57:BC:AF:67:7C:9C:D4:87:CD:AD
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:78:9b:54:dc:b6:c4:2e:77:33:b8:c2:2c:3b:7e:92:1d:c5:
79:27:67:24:f7:fc:2e:4a:49:15:9b:65:3c:a4:37:3e:45:0e:
f2:e8:50:2f:f1:bb:df:5b:4b:95:94:1c:9d:09:8f:1d:97:6e:
fb:35:6a:c0:8c:f6:91:7f:ad:d4:4a:8b:df:5c:ff:f8:e1:05:
df:d9:ef:e3:4f:cc:1f:4b:51:a4:75:eb:ef:35:9a:f0:e1:c7:
34:e3:2c:d9:c1:d0:45:d0:d1:8f:95:1b:7f:6f:d2:e8:db:f0:
d7:03:77:c4:c8:d4:dd:82:08:72:f3:d6:cb:43:85:27:be:a7:
10:b6:79:9d:73:df:04:58:bc:db:b0:8c:28:75:e0:90:ad:6a:
ce:fc:84:41:6c:63:03:c7:f2:ea:45:f0:ad:d0:3c:95:7f:f5:
b5:44:ed:5a:f8:d1:3f:69:42:d5:19:ef:bb:d0:e2:a9:2b:08:
91:6b:7d:20:24:78:50:d5:92:05:c2:81:dd:9c:eb:c1:5e:c2:
d1:8c:94:e3:c2:06:17:d5:47:1f:ca:06:22:29:e0:27:f9:41:
0d:47:c9:20:67:b8:f8:55:d2:84:27:86:11:3d:2f:1d:09:0f:
65:41:7f:cc:d2:a8:f5:db:f3:b0:2f:97:6a:81:99:42:11:4b:
a6:00:88:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkRrynuCTv37IM10oHOsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw
YWRjNGMwHhcNMjYwMzEzMDUwMDE3WhcNMjYwMzE0MDUwMDE3WjAzMTEwLwYDVQQD
EygwMmY0NzM4NWI2M2ZmZmJmNzQxMTU3YmNhZjY3N2M5Y2Q0ODdjZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmQ01L9U4UEd7U0DP/ia6B6Jb2YX
bxgpY+9mo69gzblb9NFdtHKpI1iFHXoH8Kswv9IwJClV6un3PWshuneuEN7gmn+V
FoBwSjmZsr+Ta7PMTzH/umcekzDo/OFLDazrPHCRO6R7lPbscmCcgR+WjHe+oxVz
/afw2nuTVBQ1+HkkyCpRq4nkGsI/NbEef8bRvp4/ZG7A59pZ+bta40I0rFfdA5E6
w0G5pcnR6/fWXy/Bi7uBdMAjvfkBw1A+MoGi4PXU95hCwZdimzY6tSH2pWrwug8/
Wxd1ReoJTRDyhqhMU02QPjp7nF1GGb5Dx1eJqp4UOCU9ZkFA5YEhSg0RHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL0c4W2P/+/dBFXvK9nfJzUh82tMB8GA1UdIwQY
MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt
M2M3NzNhNmM0MmY5LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5
LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXibVNy2
xC53M7jCLDt+kh3FeSdnJPf8LkpJFZtlPKQ3PkUO8uhQL/G731tLlZQcnQmPHZdu
+zVqwIz2kX+t1EqL31z/+OEF39nv40/MH0tRpHXr7zWa8OHHNOMs2cHQRdDRj5Ub
f2/S6Nvw1wN3xMjU3YIIcvPWy0OFJ76nELZ5nXPfBFi827CMKHXgkK1qzvyEQWxj
A8fy6kXwrdA8lX/1tUTtWvjRP2lC1Rnvu9DiqSsIkWt9ICR4UNWSBcKB3ZzrwV7C
0YyU48IGF9VHH8oGIingJ/lBDUfJIGe4+FXShCeGET0vHQkPZUF/zNKo9dvzsC+X
aoGZQhFLpgCISA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:38 2026 by rpki-client