Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: kyQ4CgMiGCNNfvbEMxKSRqjZ6J+ahOhVi/qQDDHjKtY=
Subject key identifier: C4:06:4E:C4:61:82:4D:CC:7B:2D:79:56:5F:5B:07:EC:3C:B1:07:A0
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019DD16325EF28001179DA2C9DC6B55DDFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 1813
Signing time: Tue 28 Apr 2026 00:00:29 +0000
Manifest this update: Tue 28 Apr 2026 00:00:29 +0000
Manifest next update: Wed 29 Apr 2026 00:00:29 +0000
Files and hashes: 1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=)
2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: 0b6J7VXl8VMSf6mUxl3d20N2wCZ60ULqk2fWtCVyOHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:25:ef:28:00:11:79:da:2c:9d:c6:b5:5d:df:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Apr 28 00:00:29 2026 GMT
Not After : Apr 29 00:00:29 2026 GMT
Subject: CN=c4064ec461824dcc7b2d79565f5b07ec3cb107a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:8d:d2:5b:13:b8:b0:30:f6:e5:07:ea:1d:
04:fc:4d:f5:04:45:29:ed:a1:1d:09:41:6a:a6:3a:
c1:bc:be:be:ec:fe:8d:f2:25:0e:56:2b:74:67:36:
9a:69:de:c2:ad:f1:f2:a1:96:f9:bb:06:f0:03:0a:
03:0f:33:93:45:78:32:d4:a2:2f:99:a3:9f:3f:5b:
46:66:48:c1:5c:28:c0:5f:08:fb:70:e9:94:e0:3c:
ca:37:05:e1:9c:44:ac:cf:28:50:6c:67:15:55:3c:
a3:c2:cd:a6:ca:aa:64:87:62:66:35:b3:6d:9b:5e:
81:e0:38:3e:2d:65:0b:21:8a:69:79:47:05:27:4f:
d6:11:c4:7e:0a:e8:bc:69:c8:7e:27:a3:e1:d5:a6:
89:4e:60:45:fe:ea:ef:7d:ac:bf:1d:24:bc:7c:a9:
6c:bb:a9:78:8d:f9:13:61:21:93:6a:69:bc:41:e3:
14:f9:7d:0f:da:c1:d7:ca:fe:00:21:ea:ee:12:f4:
7f:0c:c7:59:b0:69:87:a3:6b:42:d2:aa:72:95:d6:
ee:d8:f3:ba:f0:9e:09:da:c0:86:da:5e:f3:52:c7:
73:e3:16:7f:1b:16:06:dc:58:c5:cd:6e:26:07:bc:
01:db:e8:e4:a9:4c:88:75:18:46:58:3e:7a:1d:2c:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:4E:C4:61:82:4D:CC:7B:2D:79:56:5F:5B:07:EC:3C:B1:07:A0
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:46:02:fe:d6:99:1e:e7:47:55:2c:96:9b:be:ca:04:71:ca:
09:48:c1:8a:a8:13:40:2e:b9:95:df:02:3d:e0:14:9b:99:17:
d2:b8:9e:2c:71:67:ee:32:87:21:a4:20:f8:47:e6:68:60:69:
dd:f8:2f:0e:22:fa:be:28:89:6e:bd:c6:45:0f:0c:47:fb:6c:
41:e9:29:9e:84:67:92:93:d4:bd:e9:9e:8e:6f:40:11:40:f1:
25:15:5a:11:c9:38:fe:75:5c:38:3b:5c:a6:52:f5:93:6d:69:
57:55:23:e2:e6:27:a4:a2:eb:b7:14:47:33:2c:ef:16:f3:41:
0d:d8:af:53:d8:fb:c5:44:90:8b:14:89:f6:64:5f:40:18:12:
5f:ab:fd:b3:88:5f:85:af:c3:46:5d:22:86:83:c7:64:b7:dc:
a8:d5:b5:62:37:8d:d2:80:cd:da:d8:af:d6:92:71:4c:8f:b6:
ba:ed:0e:9f:64:2f:1b:c3:b9:3c:99:07:6e:c4:c9:2d:fd:65:
81:51:a7:16:60:2b:8e:79:ab:9a:91:fc:00:72:cf:70:34:7d:
0d:eb:68:32:d7:32:d0:fe:3a:b2:9e:75:85:eb:6b:2c:76:c3:
3d:25:68:86:44:f8:98:24:b9:a6:01:13:54:9d:2e:fe:16:9d:
71:8e:aa:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RYyXvKAARedosnca1Xd/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk
MGMzYzkwHhcNMjYwNDI4MDAwMDI5WhcNMjYwNDI5MDAwMDI5WjAzMTEwLwYDVQQD
EyhjNDA2NGVjNDYxODI0ZGNjN2IyZDc5NTY1ZjViMDdlYzNjYjEwN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVON0lsTuLAw9uUH6h0E/E31BEUp
7aEdCUFqpjrBvL6+7P6N8iUOVit0Zzaaad7CrfHyoZb5uwbwAwoDDzOTRXgy1KIv
maOfP1tGZkjBXCjAXwj7cOmU4DzKNwXhnESszyhQbGcVVTyjws2myqpkh2JmNbNt
m16B4Dg+LWULIYppeUcFJ0/WEcR+Cui8ach+J6Ph1aaJTmBF/urvfay/HSS8fKls
u6l4jfkTYSGTamm8QeMU+X0P2sHXyv4AIeruEvR/DMdZsGmHo2tC0qpyldbu2PO6
8J4J2sCG2l7zUsdz4xZ/GxYG3FjFzW4mB7wB2+jkqUyIdRhGWD56HSzyDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQGTsRhgk3Mey15Vl9bB+w8sQegMB8GA1UdIwQY
MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUYC/taZ
HudHVSyWm77KBHHKCUjBiqgTQC65ld8CPeAUm5kX0rieLHFn7jKHIaQg+EfmaGBp
3fgvDiL6viiJbr3GRQ8MR/tsQekpnoRnkpPUvemejm9AEUDxJRVaEck4/nVcODtc
plL1k21pV1Uj4uYnpKLrtxRHMyzvFvNBDdivU9j7xUSQixSJ9mRfQBgSX6v9s4hf
ha/DRl0ihoPHZLfcqNW1YjeN0oDN2tiv1pJxTI+2uu0On2QvG8O5PJkHbsTJLf1l
gVGnFmArjnmrmpH8AHLPcDR9DetoMtcy0P46sp51hetrLHbDPSVohkT4mCS5pgET
VJ0u/hadcY6qVw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:51:19 2026 by rpki-client