Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: ldUA4wdZPuPi9VlQ1Eb4XSUZoDlggCEPwsV5IGQ8R9c=
Subject key identifier: 7F:BD:61:1B:F8:7E:92:85:0C:6B:BE:FE:A9:4E:67:DD:DA:53:DD:81
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 019D390A0585D4FA00980D6B58333ADE7882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: WlS5ojL7gDl1onOWJD5o8wyANuo.roa (hash: NX+jbIhhBEnEZTj9qhHO6FgUtaMrjfCgiQz82eLbv/s=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: P5/1Shp/g6FZYRoTMr/G4rieFo97h/zQQ0N5kCUA9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:05:85:d4:fa:00:98:0d:6b:58:33:3a:de:78:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=7fbd611bf87e92850c6bbefea94e67ddda53dd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:08:55:50:94:a2:df:cc:9a:56:b9:55:15:
d7:52:21:7b:dc:a7:7a:fd:99:d5:95:24:6a:d0:f6:
6e:42:a5:f1:8c:8a:5d:37:ca:8e:0b:f7:93:e4:38:
73:38:3a:c4:97:05:31:28:df:ce:55:2c:bf:dd:e9:
dc:4c:4f:f3:0c:94:78:d5:3e:17:16:15:1f:2a:46:
9a:13:fd:49:fe:7c:d7:e3:ad:53:9e:53:2c:5a:df:
63:a0:f3:54:68:a6:78:1e:ba:32:c4:e1:6e:0b:fd:
c4:aa:08:7c:59:f7:ec:81:21:58:39:87:16:4b:c7:
d3:14:2f:0f:ed:2d:7a:db:87:fa:13:93:50:46:ff:
04:54:6d:42:2a:51:4f:d8:86:e0:34:c4:a2:b3:c5:
ae:65:0b:2b:7c:76:95:15:c2:74:c4:17:8c:da:76:
51:0f:c8:bc:f7:be:12:ce:88:36:3e:9c:6f:da:06:
fd:cf:c8:84:e3:e4:32:bf:a6:a2:1d:09:40:ae:3e:
75:4c:7c:69:97:3a:14:6b:65:2b:71:c9:81:60:f7:
d2:11:f7:33:88:e1:73:6d:23:36:8f:0f:0b:4a:ca:
a1:6e:e1:0e:0f:88:13:f3:83:c0:0e:3a:cf:7f:c9:
66:26:0b:cb:d5:49:32:bd:5e:9e:b9:04:0d:ce:29:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:61:1B:F8:7E:92:85:0C:6B:BE:FE:A9:4E:67:DD:DA:53:DD:81
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d0:2b:c2:5b:21:58:65:f6:1f:d0:9e:1b:b1:46:52:2c:d4:
a4:37:a8:da:97:d0:60:3e:70:b7:e0:62:86:61:e8:8b:b6:ee:
a9:f4:29:27:e1:bd:61:7d:9b:46:ef:f3:75:6a:94:a5:08:c5:
18:62:16:6f:5c:46:3f:2b:8b:eb:af:23:20:41:9d:82:14:6e:
88:3a:b0:b6:fa:8c:c9:1a:de:92:ec:3c:6e:9a:0f:32:dc:e1:
5e:bd:77:61:d2:75:3c:ee:96:92:53:22:eb:61:5d:de:31:64:
a8:fa:41:50:63:5a:93:93:d4:f4:53:e7:52:22:66:0e:9f:c2:
24:24:84:5f:80:e9:de:cb:eb:0b:8b:49:a7:ff:a1:15:37:93:
3c:ca:15:dd:29:de:2f:3c:fa:31:f2:07:4e:02:df:f4:79:89:
40:d9:0b:61:03:da:00:4d:48:af:f7:f5:4a:60:9c:21:55:0a:
54:2a:09:b4:40:66:37:03:cc:f6:15:82:b6:62:22:7a:82:c7:
c8:4e:a5:2c:be:4a:f9:cb:0a:5b:2e:1c:ea:47:98:14:45:fb:
02:cc:9f:f4:08:d9:e2:a5:c4:7c:55:81:5e:39:ad:8f:ac:99:
29:6d:3b:0a:9e:5f:00:2b:f9:7b:82:b7:86:1d:15:78:48:e9:
cf:c8:2b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CgWF1PoAmA1rWDM63niCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzUzNDk5ZmYyMGYwMzVjYjhiMWMwYWE5Yjc3YzNkN2Qy
ODk3NmMwHhcNMjYwMzI5MTAwMDUxWhcNMjYwMzMwMTAwMDUxWjAzMTEwLwYDVQQD
Eyg3ZmJkNjExYmY4N2U5Mjg1MGM2YmJlZmVhOTRlNjdkZGRhNTNkZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpUIVVCUot/Mmla5VRXXUiF73Kd6
/ZnVlSRq0PZuQqXxjIpdN8qOC/eT5DhzODrElwUxKN/OVSy/3encTE/zDJR41T4X
FhUfKkaaE/1J/nzX461TnlMsWt9joPNUaKZ4HroyxOFuC/3Eqgh8WffsgSFYOYcW
S8fTFC8P7S1624f6E5NQRv8EVG1CKlFP2IbgNMSis8WuZQsrfHaVFcJ0xBeM2nZR
D8i8974Szog2Ppxv2gb9z8iE4+Qyv6aiHQlArj51THxplzoUa2UrccmBYPfSEfcz
iOFzbSM2jw8LSsqhbuEOD4gT84PADjrPf8lmJgvL1UkyvV6euQQNzilsjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+9YRv4fpKFDGu+/qlOZ93aU92BMB8GA1UdIwQY
MBaAFKrFNJn/IPA1y4scCqm3fD19KJdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMt
ZmFiOWJmN2EyNmQ4LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMtZmFiOWJmN2EyNmQ4
LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltArwlsh
WGX2H9CeG7FGUizUpDeo2pfQYD5wt+BihmHoi7buqfQpJ+G9YX2bRu/zdWqUpQjF
GGIWb1xGPyuL668jIEGdghRuiDqwtvqMyRrekuw8bpoPMtzhXr13YdJ1PO6WklMi
62Fd3jFkqPpBUGNak5PU9FPnUiJmDp/CJCSEX4Dp3svrC4tJp/+hFTeTPMoV3Sne
Lzz6MfIHTgLf9HmJQNkLYQPaAE1Ir/f1SmCcIVUKVCoJtEBmNwPM9hWCtmIieoLH
yE6lLL5K+csKWy4c6keYFEX7Asyf9AjZ4qXEfFWBXjmtj6yZKW07Cp5fACv5e4K3
hh0VeEjpz8grdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:47 2026 by rpki-client