Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: QOltrvbTLSgFs4pbqSmZNmUUsinutPmCnv6b+M6LxAQ=
Subject key identifier: D5:DC:07:5A:68:61:1A:8F:3E:26:C9:76:90:7C:77:B3:D3:4D:71:F5
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 019D37527B756207CE21F1744FF9E8C7B18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0C03
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: 21R_t7vKnYEIDQebm-7zjxxy-lo.roa (hash: uGSGk5iT+FrqnBLQlW6LsLr35tMh1jia+p+sY2P//70=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: ea37pmGxy7NJ5ChsSGSkoDmlcpisRQ8/+vnasTd97dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7b:75:62:07:ce:21:f1:74:4f:f9:e8:c7:b1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=d5dc075a68611a8f3e26c976907c77b3d34d71f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:97:9a:8f:8b:2d:f4:ca:6c:b5:07:81:1d:
fd:63:5f:e4:70:fb:9f:9a:f9:db:80:bb:f9:1c:5b:
5d:c6:4c:3b:96:38:33:eb:69:97:f8:e1:aa:55:4a:
49:ee:b3:c3:86:30:f1:b8:bf:b0:dc:d4:11:56:63:
e6:97:e1:ce:42:62:53:bc:c8:26:26:85:83:31:2a:
01:fc:0b:8f:2e:41:e3:a7:9e:59:88:b7:ee:69:70:
ab:b3:5b:7c:3c:86:e3:54:a1:f2:ba:eb:33:a2:de:
bb:7f:43:2d:74:fd:0c:bd:f9:8a:26:bd:19:17:d2:
50:40:bb:4d:56:80:0b:90:97:ef:15:c2:06:fa:4c:
49:9e:bc:1d:00:f2:88:97:3f:06:2f:b3:9f:d8:8a:
37:6c:af:12:69:05:21:83:e5:1b:23:38:19:25:e0:
84:49:8c:5b:65:90:80:22:a3:bd:9a:22:6c:a4:b2:
e0:8a:a8:b9:2f:fe:59:21:29:f1:3f:38:7b:28:ff:
49:1f:08:40:40:10:0d:4a:3e:3a:fa:05:f8:19:11:
77:1b:b1:e1:80:26:6a:85:8c:a7:8b:92:fc:47:fd:
88:49:35:e3:9b:13:d8:c3:c4:d8:e1:3d:12:fb:45:
9c:78:b9:d8:bf:fb:0f:03:e7:c7:88:5c:e2:0b:45:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:07:5A:68:61:1A:8F:3E:26:C9:76:90:7C:77:B3:D3:4D:71:F5
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c8:b8:04:43:ad:8f:cf:b5:84:5e:55:83:bb:15:6b:ea:9e:
aa:8c:e5:1e:f4:7f:e7:8f:7f:66:10:81:1b:b9:e5:6a:fc:73:
98:88:da:95:9b:35:fa:9c:7a:15:e7:0b:c9:e0:a5:34:d1:39:
9e:c9:dc:40:6e:c4:36:c2:e3:c0:4d:ef:39:bb:36:41:c1:cd:
21:ef:0f:0c:3d:11:a9:a0:8f:32:55:b8:de:ed:e1:86:b3:aa:
f1:1a:0c:37:8d:6b:09:05:5c:92:bb:8d:08:48:8a:9e:ec:7e:
f5:75:9b:7d:d7:80:55:53:51:10:94:67:8c:51:63:3e:d6:cb:
19:ac:26:17:29:04:85:93:a6:c8:0e:d0:22:5c:f0:e6:90:ec:
cd:2e:24:3a:84:c7:f8:8e:72:36:36:4d:74:0d:a3:10:0f:4e:
47:24:43:76:1c:bb:92:cb:95:1d:bc:9d:ad:ca:32:64:39:db:
2a:a2:7c:db:f5:c1:0b:45:bf:2e:a4:a3:6b:89:fd:1c:85:e9:
ac:87:d2:2d:2c:97:c5:e5:38:31:19:54:51:a2:65:bc:9f:c0:
7a:68:d0:23:48:1c:9c:d8:0f:70:da:1c:db:3f:ed:f5:72:52:
fa:bc:87:05:51:92:40:1e:a4:b1:3e:86:85:f1:3b:4d:16:95:
f7:ce:f2:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Unt1YgfOIfF0T/nox7GLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmYzYTczODY4ZGMxMWNkOGRiZjVlMWMzODBiYmI3MTA2
MDJmYjQwHhcNMjYwMzI5MDIwMDQ1WhcNMjYwMzMwMDIwMDQ1WjAzMTEwLwYDVQQD
EyhkNWRjMDc1YTY4NjExYThmM2UyNmM5NzY5MDdjNzdiM2QzNGQ3MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlKXmo+LLfTKbLUHgR39Y1/kcPuf
mvnbgLv5HFtdxkw7ljgz62mX+OGqVUpJ7rPDhjDxuL+w3NQRVmPml+HOQmJTvMgm
JoWDMSoB/AuPLkHjp55ZiLfuaXCrs1t8PIbjVKHyuuszot67f0MtdP0MvfmKJr0Z
F9JQQLtNVoALkJfvFcIG+kxJnrwdAPKIlz8GL7Of2Io3bK8SaQUhg+UbIzgZJeCE
SYxbZZCAIqO9miJspLLgiqi5L/5ZISnxPzh7KP9JHwhAQBANSj46+gX4GRF3G7Hh
gCZqhYyni5L8R/2ISTXjmxPYw8TY4T0S+0WceLnYv/sPA+fHiFziC0XXbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXcB1poYRqPPibJdpB8d7PTTXH1MB8GA1UdIwQY
MBaAFKn/OnOGjcEc2Nv14cOAu7cQYC+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgt
NDc5NzRmNWM3MDRhLzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgtNDc5NzRmNWM3MDRh
LzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoci4BEOt
j8+1hF5Vg7sVa+qeqozlHvR/549/ZhCBG7nlavxzmIjalZs1+px6FecLyeClNNE5
nsncQG7ENsLjwE3vObs2QcHNIe8PDD0RqaCPMlW43u3hhrOq8RoMN41rCQVckruN
CEiKnux+9XWbfdeAVVNREJRnjFFjPtbLGawmFykEhZOmyA7QIlzw5pDszS4kOoTH
+I5yNjZNdA2jEA9ORyRDdhy7ksuVHbydrcoyZDnbKqJ82/XBC0W/LqSja4n9HIXp
rIfSLSyXxeU4MRlUUaJlvJ/AemjQI0gcnNgPcNoc2z/t9XJS+ryHBVGSQB6ksT6G
hfE7TRaV987y1g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:17 2026 by rpki-client