Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: AYN2meBFNj0AK+YBOxDdXzeFR36D7enhhh7oXfSoWcU=
Subject key identifier: ED:29:C8:16:59:BA:38:B5:BD:19:C1:F2:73:5E:96:B5:85:69:7E:D1
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019D37F7596F3166CFFC61476E64D916B11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 0795
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: SunR5N1ttKYkU1IpCP6JuXHB1bVX2tYDexgyHgaO1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:59:6f:31:66:cf:fc:61:47:6e:64:d9:16:b1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=ed29c81659ba38b5bd19c1f2735e96b585697ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:cc:6b:b5:fc:66:31:f1:c7:58:9f:35:02:
5e:06:e0:90:e4:0c:ee:61:7b:4b:85:0d:fb:29:ce:
58:ce:de:71:80:42:80:03:01:78:91:2f:db:de:2d:
fe:34:43:ea:d7:ac:ca:1c:15:39:6a:8f:86:8f:1d:
47:b0:3a:05:a4:92:a0:1f:29:1b:f3:2b:74:44:df:
1e:d8:05:bd:85:59:07:03:08:f8:f7:fa:3b:04:50:
f4:cf:7d:1c:d6:a2:78:24:57:24:ab:f6:96:b0:1d:
24:b2:8c:a5:30:4c:59:05:08:fa:6c:06:39:86:af:
dd:8d:19:b8:0e:2c:3a:f2:c7:95:af:cf:5b:ca:58:
b9:1b:85:82:fe:03:25:4e:55:e5:04:c5:27:f1:28:
30:5f:90:59:0c:af:88:83:63:bb:1d:b1:48:98:aa:
5c:76:02:08:00:ed:9b:c8:04:48:bb:1c:ef:64:6c:
f5:ce:73:a4:9d:16:aa:6e:db:de:78:89:c0:3d:d4:
65:a5:f3:2e:fa:49:a3:e6:40:31:ac:44:c7:e8:3e:
84:0b:05:31:b7:65:92:1d:94:8b:c3:5b:d4:5b:08:
6f:5b:04:51:df:30:5e:3a:09:0e:67:8b:a0:64:92:
4b:7f:99:2b:d5:96:3c:c6:3b:13:cb:d4:1b:b2:68:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:C8:16:59:BA:38:B5:BD:19:C1:F2:73:5E:96:B5:85:69:7E:D1
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fe:64:14:87:58:58:b0:2d:10:5b:a9:16:09:5d:40:b8:0d:
42:f6:d9:1c:a2:d3:34:8b:5d:fd:0b:12:0d:d0:53:5f:29:19:
64:dc:03:27:9d:f5:d7:4a:d0:74:69:b2:e6:e6:74:5f:ea:c0:
8e:1d:20:9c:e5:5e:e7:1a:25:7c:37:82:66:1c:51:88:1e:6c:
7c:52:5a:30:02:c1:56:a9:6c:87:dc:00:6c:01:fe:3e:83:3f:
2b:6c:34:8d:d4:3a:a3:fc:84:c6:08:1b:7b:a6:ad:27:40:35:
8f:a4:b6:31:65:5c:23:ba:b9:8d:a0:48:46:ec:be:4c:b6:b3:
08:f6:5b:3c:39:bd:be:5a:78:2c:7f:1b:89:fa:eb:40:f6:d3:
69:0c:a3:70:da:94:5b:1a:49:d4:60:9e:34:57:ec:30:9e:de:
e3:74:a6:68:92:a9:3e:ea:2f:fb:0b:fc:eb:25:a3:3f:43:e4:
58:92:9b:e4:9d:db:72:48:d5:97:c2:ab:af:75:75:95:55:3b:
d2:fc:76:d5:16:2d:ba:7b:4d:f5:83:2e:90:af:8d:c3:99:27:
3b:73:2b:65:c2:90:31:00:2f:57:c5:f1:b7:81:1c:1e:a5:02:
37:bf:b8:0d:23:d6:52:58:0d:2a:4b:14:f5:cf:c2:5e:b0:10:
7b:64:ea:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0391lvMWbP/GFHbmTZFrEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx
MTcxZjEwHhcNMjYwMzI5MDUwMDUwWhcNMjYwMzMwMDUwMDUwWjAzMTEwLwYDVQQD
EyhlZDI5YzgxNjU5YmEzOGI1YmQxOWMxZjI3MzVlOTZiNTg1Njk3ZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS7Ma7X8ZjHxx1ifNQJeBuCQ5Azu
YXtLhQ37Kc5Yzt5xgEKAAwF4kS/b3i3+NEPq16zKHBU5ao+Gjx1HsDoFpJKgHykb
8yt0RN8e2AW9hVkHAwj49/o7BFD0z30c1qJ4JFckq/aWsB0ksoylMExZBQj6bAY5
hq/djRm4Diw68seVr89byli5G4WC/gMlTlXlBMUn8SgwX5BZDK+Ig2O7HbFImKpc
dgIIAO2byARIuxzvZGz1znOknRaqbtveeInAPdRlpfMu+kmj5kAxrETH6D6ECwUx
t2WSHZSLw1vUWwhvWwRR3zBeOgkOZ4ugZJJLf5kr1ZY8xjsTy9QbsmhCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0pyBZZuji1vRnB8nNelrWFaX7RMB8GA1UdIwQY
MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt
ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl
LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/5kFIdY
WLAtEFupFgldQLgNQvbZHKLTNItd/QsSDdBTXykZZNwDJ53110rQdGmy5uZ0X+rA
jh0gnOVe5xolfDeCZhxRiB5sfFJaMALBVqlsh9wAbAH+PoM/K2w0jdQ6o/yExggb
e6atJ0A1j6S2MWVcI7q5jaBIRuy+TLazCPZbPDm9vlp4LH8bifrrQPbTaQyjcNqU
WxpJ1GCeNFfsMJ7e43SmaJKpPuov+wv86yWjP0PkWJKb5J3bckjVl8Krr3V1lVU7
0vx21RYtuntN9YMukK+Nw5knO3MrZcKQMQAvV8Xxt4EcHqUCN7+4DSPWUlgNKksU
9c/CXrAQe2TqsA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:13 2026 by rpki-client