Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: 7FNUfW6d2NjWcVYfEbB+64PFhKmV8BM9Y2qzmsgaml0=
Subject key identifier: 9D:FA:17:A9:87:5F:CB:96:48:71:CD:D3:00:FF:60:AD:3B:C2:DB:70
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 019D382DEFF8460D682D7435C40A0C93F624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: 1R1NGCUOSW1LiHiCITHoK558Vbc.roa (hash: zT7tlG6Mu9v2k7UcaJAbV5WxMHw7/BViKEKtfLvKHQg=)
2: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: AmqXriCOktT0ft1wJpJpawy7QQYsNzIshA0273ZgHT8=)
3: mTYFd1745jhrZ9TtN2i23HR2pUI.roa (hash: ydADvfnj2q9V4OlnDPfNddiaxsr5Yrl3BEkKtbnsrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ef:f8:46:0d:68:2d:74:35:c4:0a:0c:93:f6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=9dfa17a9875fcb964871cdd300ff60ad3bc2db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:95:9d:ab:de:fc:51:57:ca:6a:0b:b4:fb:
84:b1:e4:d3:fd:ee:0a:a2:7e:8d:54:af:5f:5d:03:
9a:bd:2e:a5:bd:27:74:0b:f1:67:a7:38:f4:a9:9b:
03:53:e8:28:73:68:93:ed:b3:2c:bb:9f:b6:db:75:
43:54:51:6d:9f:ac:ad:52:64:f4:3d:9c:5b:d2:a1:
1c:5b:ce:3a:e1:1f:a6:62:97:d6:50:bf:e5:63:08:
15:87:e1:57:9c:41:a8:33:1c:64:3c:60:46:0e:3c:
61:65:2e:d7:bd:b4:cf:73:0a:a8:b3:22:17:c8:65:
e2:83:f3:7f:af:30:f6:59:25:04:1a:e0:3d:42:2d:
54:bf:ab:9d:d5:92:49:ce:1c:cb:ae:17:b2:46:1b:
19:ed:b6:65:9c:55:17:5f:5b:e1:e0:4f:73:19:f2:
f4:bb:88:d5:e3:91:59:e7:0c:d1:65:55:f5:e8:f5:
e4:f0:5d:bb:74:e9:e1:2d:3b:f2:6e:53:9c:87:33:
5d:e9:68:e2:de:08:ee:9d:40:e3:3e:a8:e4:aa:7b:
3b:23:bf:e5:51:04:40:f0:5f:37:e5:a3:66:8b:56:
b1:2d:3c:64:de:ad:d8:7d:74:0f:ac:92:85:d5:96:
fc:c6:e5:56:f0:70:ae:d5:e4:02:dc:64:c4:85:d8:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:17:A9:87:5F:CB:96:48:71:CD:D3:00:FF:60:AD:3B:C2:DB:70
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9f:cc:5f:d8:a2:1e:19:d5:9a:8f:18:8a:cc:ae:7b:31:8e:
0c:63:20:ab:70:94:e6:78:d3:10:0d:6a:1e:fc:81:95:a3:c3:
6a:9b:60:9b:0b:cd:c8:87:08:07:42:82:9a:e0:f7:cb:e8:b2:
3d:ff:64:f4:4e:82:b4:f8:2b:ff:13:88:22:02:88:9c:e3:5b:
1c:5f:19:a7:b9:07:53:fd:6c:57:35:c8:aa:32:72:f0:0e:bf:
b5:b9:5f:79:79:db:55:7b:44:5a:ee:61:7c:4e:37:8a:10:d7:
59:26:91:77:f1:3f:66:01:65:ae:44:54:cf:d2:0e:81:28:83:
01:7c:98:29:69:5f:5c:7a:a1:80:91:09:ed:1b:31:d5:84:36:
cf:f3:c2:c7:21:68:ce:21:0a:e5:fa:0a:82:8f:60:b2:a2:20:
69:58:f3:17:92:31:cc:5d:18:3a:08:4a:f2:ad:e8:5d:43:08:
14:93:5a:11:a0:3d:78:a3:90:8b:a7:0e:d7:be:93:66:15:e9:
fc:26:cc:3c:2b:ea:2b:33:1e:ef:e2:e7:84:1a:9f:d9:a0:95:
99:1c:fe:6f:f4:c1:e8:64:73:92:57:73:6f:8e:75:b3:d8:8a:
ac:0a:85:08:ae:6a:35:10:82:24:1a:dc:46:ec:74:09:b5:33:
14:1f:b3:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Le/4Rg1oLXQ1xAoMk/YkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz
NzRlZDgwHhcNMjYwMzI5MDYwMDI3WhcNMjYwMzMwMDYwMDI3WjAzMTEwLwYDVQQD
Eyg5ZGZhMTdhOTg3NWZjYjk2NDg3MWNkZDMwMGZmNjBhZDNiYzJkYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1+Vnave/FFXymoLtPuEseTT/e4K
on6NVK9fXQOavS6lvSd0C/Fnpzj0qZsDU+goc2iT7bMsu5+223VDVFFtn6ytUmT0
PZxb0qEcW8464R+mYpfWUL/lYwgVh+FXnEGoMxxkPGBGDjxhZS7XvbTPcwqosyIX
yGXig/N/rzD2WSUEGuA9Qi1Uv6ud1ZJJzhzLrheyRhsZ7bZlnFUXX1vh4E9zGfL0
u4jV45FZ5wzRZVX16PXk8F27dOnhLTvyblOchzNd6Wji3gjunUDjPqjkqns7I7/l
UQRA8F835aNmi1axLTxk3q3YfXQPrJKF1Zb8xuVW8HCu1eQC3GTEhdh/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ36F6mHX8uWSHHN0wD/YK07wttwMB8GA1UdIwQY
MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt
NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4
LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxp/MX9ii
HhnVmo8YisyuezGODGMgq3CU5njTEA1qHvyBlaPDaptgmwvNyIcIB0KCmuD3y+iy
Pf9k9E6CtPgr/xOIIgKInONbHF8Zp7kHU/1sVzXIqjJy8A6/tblfeXnbVXtEWu5h
fE43ihDXWSaRd/E/ZgFlrkRUz9IOgSiDAXyYKWlfXHqhgJEJ7Rsx1YQ2z/PCxyFo
ziEK5foKgo9gsqIgaVjzF5IxzF0YOghK8q3oXUMIFJNaEaA9eKOQi6cO176TZhXp
/CbMPCvqKzMe7+LnhBqf2aCVmRz+b/TB6GRzkldzb451s9iKrAqFCK5qNRCCJBrc
Rux0CbUzFB+z0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:15 2026 by rpki-client