Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: Sx06w9iJD8+Nnsq5CH8XKbituBO+8tfn275fOj8KU1Q=
Subject key identifier: 79:23:9D:6E:DF:09:8C:BF:2C:39:E8:3B:6F:3A:D8:E6:BF:89:A3:2F
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 019D38D39B22F7DA5F4A28AFF83BE5AF6648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: EF
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: SyuNTglg2FsaxGQoE8OW+645RBrGvDD3lfa7KVu9aKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9b:22:f7:da:5f:4a:28:af:f8:3b:e5:af:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=79239d6edf098cbf2c39e83b6f3ad8e6bf89a32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:22:ba:96:41:0d:95:91:6e:48:a6:17:24:
64:c2:ef:e7:ff:3a:2d:76:96:47:73:40:b0:7f:72:
2e:a2:e8:d9:54:fd:8d:95:9e:5e:d5:95:39:5f:ab:
ff:06:da:05:74:33:53:68:de:62:c6:32:85:fc:52:
f5:99:2e:3e:14:3f:f3:b0:16:47:db:5b:cd:f7:74:
df:7b:64:f4:bc:59:ae:c2:92:66:a0:01:06:a0:08:
3b:8a:1c:59:24:87:84:46:8f:66:a2:78:d4:d0:a5:
ae:4c:94:8e:d3:99:e7:19:d8:23:d5:ea:a1:94:d7:
4f:36:e4:fc:00:d5:db:79:a4:00:4d:09:db:41:c6:
62:2b:35:40:66:33:1b:ad:a9:3a:31:67:eb:a4:1e:
98:1a:27:ef:14:03:57:a4:92:28:db:ad:95:f9:9d:
c7:56:49:49:f2:5c:df:0c:79:94:a0:c2:c9:88:21:
3e:7c:5f:42:86:08:3b:eb:cf:55:ce:a1:c7:67:08:
c0:31:71:e5:f9:36:c6:a5:a2:28:3e:4a:5b:b9:5d:
e4:f4:e0:24:b4:19:14:a0:7d:85:d0:2e:29:94:67:
4d:48:e6:28:6a:b2:d2:0a:4a:25:f2:66:83:61:38:
82:64:12:34:ee:ed:ec:ae:bd:c7:5b:8b:eb:65:b5:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:23:9D:6E:DF:09:8C:BF:2C:39:E8:3B:6F:3A:D8:E6:BF:89:A3:2F
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:a9:b3:f1:51:e2:d4:83:d3:ea:9d:8b:b9:35:74:11:2d:
ed:85:73:3d:b3:37:6e:dc:34:bc:03:2f:7d:a8:2a:b1:ad:91:
87:69:da:91:12:66:ed:d5:cc:c1:3a:a7:00:7d:b7:b0:91:ac:
c8:8a:82:8e:7f:19:87:dd:ee:24:51:5e:b0:08:16:61:28:4f:
0b:ed:69:48:b3:53:90:2d:83:e1:c3:a4:80:4f:47:0a:1f:1d:
4f:bf:2b:22:7a:a1:fe:bd:82:bb:51:f7:d4:33:41:f9:c0:41:
1f:28:71:43:80:5b:98:ea:bd:1b:0a:a5:ea:e0:ed:ad:f6:cd:
58:55:5d:bf:fd:89:a9:0e:15:03:d8:71:94:5b:d3:c1:98:11:
39:b7:a5:a5:17:3b:e4:7b:39:58:2b:78:be:24:03:9d:d6:aa:
20:a2:36:8f:cb:21:df:cd:7b:19:01:1c:4e:14:19:41:f2:43:
90:33:68:f2:23:5a:4e:e8:18:9e:9e:7a:c0:12:b6:f0:77:cd:
43:ee:90:e0:b5:2e:c5:cd:f9:b7:ea:7e:22:5c:96:c9:fa:92:
bf:86:67:12:a0:cb:11:f3:90:f5:52:b2:be:0a:91:09:f1:69:
c2:4c:d7:81:90:37:19:3d:79:fd:2c:9d:46:a4:14:87:a2:9c:
dc:f7:93:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405si99pfSiiv+Dvlr2ZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmI3YmU2MjRhNmYyMzMxOThlMmEzNGYzZDlkOTg0Mjlh
YmE0NjEwHhcNMjYwMzI5MDkwMTI0WhcNMjYwMzMwMDkwMTI0WjAzMTEwLwYDVQQD
Eyg3OTIzOWQ2ZWRmMDk4Y2JmMmMzOWU4M2I2ZjNhZDhlNmJmODlhMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqciupZBDZWRbkimFyRkwu/n/zot
dpZHc0Cwf3IuoujZVP2NlZ5e1ZU5X6v/BtoFdDNTaN5ixjKF/FL1mS4+FD/zsBZH
21vN93Tfe2T0vFmuwpJmoAEGoAg7ihxZJIeERo9monjU0KWuTJSO05nnGdgj1eqh
lNdPNuT8ANXbeaQATQnbQcZiKzVAZjMbrak6MWfrpB6YGifvFANXpJIo262V+Z3H
VklJ8lzfDHmUoMLJiCE+fF9Chgg7689VzqHHZwjAMXHl+TbGpaIoPkpbuV3k9OAk
tBkUoH2F0C4plGdNSOYoarLSCkol8maDYTiCZBI07u3srr3HW4vrZbXDJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkjnW7fCYy/LDnoO2862Oa/iaMvMB8GA1UdIwQY
MBaAFKn7e+YkpvIzGY4qNPPZ2YQpq6RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEt
MGE5N2JiZjVmNDU2LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEtMGE5N2JiZjVmNDU2
LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYWps/FR
4tSD0+qdi7k1dBEt7YVzPbM3btw0vAMvfagqsa2Rh2nakRJm7dXMwTqnAH23sJGs
yIqCjn8Zh93uJFFesAgWYShPC+1pSLNTkC2D4cOkgE9HCh8dT78rInqh/r2Cu1H3
1DNB+cBBHyhxQ4BbmOq9Gwql6uDtrfbNWFVdv/2JqQ4VA9hxlFvTwZgRObelpRc7
5Hs5WCt4viQDndaqIKI2j8sh3817GQEcThQZQfJDkDNo8iNaTugYnp56wBK28HfN
Q+6Q4LUuxc35t+p+IlyWyfqSv4ZnEqDLEfOQ9VKyvgqRCfFpwkzXgZA3GT15/Syd
RqQUh6Kc3PeTsw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:48 2026 by rpki-client