Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: 4OUP9dwgnQEdQjKXhLqcT2BxyC54LvuKeHMY13ORnMA=
Subject key identifier: 0B:90:F3:B8:D5:46:1E:9F:70:C1:A2:A6:61:5A:76:ED:AF:02:14:5F
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 019DCF07FE4ACF43BEE825219746ACCBF60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1832
Signing time: Mon 27 Apr 2026 13:01:40 +0000
Manifest this update: Mon 27 Apr 2026 13:01:40 +0000
Manifest next update: Tue 28 Apr 2026 13:01:40 +0000
Files and hashes: 1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: Lv7zqFpyPNPhhYCM9JaAYUI9FO94qp1vfoaDMxhkCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:fe:4a:cf:43:be:e8:25:21:97:46:ac:cb:f6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Apr 27 13:01:40 2026 GMT
Not After : Apr 28 13:01:40 2026 GMT
Subject: CN=0b90f3b8d5461e9f70c1a2a6615a76edaf02145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:9e:5b:b8:27:45:1c:5f:29:2d:f7:7a:df:
a4:9c:6b:a7:f0:69:86:6a:a4:dc:5c:5d:c6:5c:81:
a0:5d:a9:22:05:cf:90:c0:b8:70:ac:1c:2a:3d:1d:
73:2f:f9:40:d7:a0:29:0b:09:07:50:ad:8c:73:49:
29:c0:58:f9:c8:e3:07:6b:ef:c3:54:d3:34:9d:d8:
a9:30:4e:52:57:9a:74:18:c3:ac:c1:8c:e9:ee:a8:
be:f1:4b:46:5f:c9:9a:57:38:b8:97:8d:32:04:0a:
cf:fc:eb:1f:00:94:f1:9c:e3:65:db:ef:1e:2a:57:
db:ed:c5:27:a8:02:15:64:a8:81:a8:90:e3:5b:da:
5f:d0:fb:84:f9:a9:39:ef:70:6d:28:a9:74:c6:f3:
d0:90:6c:2a:dc:94:00:25:60:66:88:5e:76:e8:fb:
fe:64:ef:0e:bd:a6:72:ef:c4:83:27:f2:54:b2:ca:
1e:45:b2:03:aa:57:25:92:a5:12:c1:46:9a:9f:9a:
6a:7e:6e:30:cc:55:c3:6d:cd:e1:af:fd:59:c8:f9:
68:08:db:2a:c6:ae:87:f1:b6:f3:ef:b1:15:37:0d:
30:84:48:81:0a:0c:2b:18:4f:17:6f:fb:ba:a7:a6:
ec:5a:37:e3:dd:f2:66:82:8a:eb:6b:f5:50:8a:24:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:F3:B8:D5:46:1E:9F:70:C1:A2:A6:61:5A:76:ED:AF:02:14:5F
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:82:1d:a9:bb:1f:e5:59:be:b5:c4:98:ef:4c:ec:67:c6:97:
98:5e:9c:f7:42:e7:22:03:91:16:0a:8b:12:e7:95:ce:ce:da:
a4:16:1a:1e:21:c6:29:45:05:ff:a9:93:23:0b:f4:31:80:aa:
e6:7a:df:38:59:30:3e:80:ed:39:f7:00:3a:76:d0:c1:5f:9d:
ec:a8:1d:cb:84:cf:8f:4e:f6:8b:d0:c7:0a:d9:ff:24:88:7a:
4d:1a:0d:b4:41:38:ba:d5:df:c9:cf:9d:0a:a9:00:f4:8d:41:
f9:5f:02:fd:06:66:11:4e:13:e8:7e:2a:ec:fe:52:43:d9:e7:
5d:1e:6b:f8:33:54:8a:54:3d:8e:69:7d:b1:1d:a2:af:7b:7c:
bf:7a:37:bc:a9:32:f0:a6:cf:0f:f7:98:34:ef:44:82:6d:5d:
ce:3f:68:a1:42:61:24:7b:31:5f:e3:ea:a1:9b:2f:85:c2:50:
28:17:d6:29:50:8d:96:f8:c3:6a:e8:4d:51:d0:85:41:76:33:
19:0e:88:20:8c:2c:45:41:a3:e7:c2:a1:82:79:d1:be:70:5c:
2b:01:09:63:6d:74:d7:a7:6b:72:44:2d:89:3c:45:2f:15:9c:
ac:b6:2d:4b:ab:dd:66:13:d9:d2:9a:31:5a:cf:e8:3d:33:4f:
65:c7:25:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PB/5Kz0O+6CUhl0asy/YOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGYyZWExNTdiYmI1M2FiMDI2MDExYWNlNWNkMTM2MGVm
MmY3N2QwHhcNMjYwNDI3MTMwMTQwWhcNMjYwNDI4MTMwMTQwWjAzMTEwLwYDVQQD
EygwYjkwZjNiOGQ1NDYxZTlmNzBjMWEyYTY2MTVhNzZlZGFmMDIxNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfmeW7gnRRxfKS33et+knGun8GmG
aqTcXF3GXIGgXakiBc+QwLhwrBwqPR1zL/lA16ApCwkHUK2Mc0kpwFj5yOMHa+/D
VNM0ndipME5SV5p0GMOswYzp7qi+8UtGX8maVzi4l40yBArP/OsfAJTxnONl2+8e
Klfb7cUnqAIVZKiBqJDjW9pf0PuE+ak573BtKKl0xvPQkGwq3JQAJWBmiF526Pv+
ZO8OvaZy78SDJ/JUssoeRbIDqlclkqUSwUaan5pqfm4wzFXDbc3hr/1ZyPloCNsq
xq6H8bbz77EVNw0whEiBCgwrGE8Xb/u6p6bsWjfj3fJmgorra/VQiiRYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuQ87jVRh6fcMGipmFadu2vAhRfMB8GA1UdIwQY
MBaAFEAPLqFXu7U6sCYBGs5c0TYO8vd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQt
ZDc5NzFmMWU1OTlkLzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQtZDc5NzFmMWU1OTlk
LzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4Idqbsf
5Vm+tcSY70zsZ8aXmF6c90LnIgORFgqLEueVzs7apBYaHiHGKUUF/6mTIwv0MYCq
5nrfOFkwPoDtOfcAOnbQwV+d7Kgdy4TPj072i9DHCtn/JIh6TRoNtEE4utXfyc+d
CqkA9I1B+V8C/QZmEU4T6H4q7P5SQ9nnXR5r+DNUilQ9jml9sR2ir3t8v3o3vKky
8KbPD/eYNO9Egm1dzj9ooUJhJHsxX+PqoZsvhcJQKBfWKVCNlvjDauhNUdCFQXYz
GQ6IIIwsRUGj58KhgnnRvnBcKwEJY21016drckQtiTxFLxWcrLYtS6vdZhPZ0pox
Ws/oPTNPZcclrA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:18:53 2026 by rpki-client