Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: cWWTA+fAfVcM774v7sh+pquRrXQNb6hrfYXHIcCnlFQ=
Subject key identifier: BC:C8:A2:16:4B:7A:7A:2E:04:5E:77:2E:CE:A5:F2:1F:10:9D:CE:1A
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 019DB133D608DDC3606450EC6B2F01C0D438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 03E2
Signing time: Tue 21 Apr 2026 18:00:57 +0000
Manifest this update: Tue 21 Apr 2026 18:00:57 +0000
Manifest next update: Wed 22 Apr 2026 18:00:57 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: p9IRSg8LYQ7DxYaQAU6Yt4nCs2Ot5DA3pu+vvdLrh88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:33:d6:08:dd:c3:60:64:50:ec:6b:2f:01:c0:d4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Apr 21 18:00:57 2026 GMT
Not After : Apr 22 18:00:57 2026 GMT
Subject: CN=bcc8a2164b7a7a2e045e772ecea5f21f109dce1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:1c:e7:1d:36:dd:08:55:f3:e7:dd:06:67:
b2:33:0f:fc:91:78:6f:fb:89:35:5c:4b:a7:69:ca:
0f:e8:cc:7b:2b:7d:74:64:bc:da:f4:51:01:0c:fa:
e1:8d:f4:a9:1d:49:be:33:79:37:69:2d:46:3d:03:
dd:38:f2:bf:16:53:4f:8c:41:df:7e:7a:33:37:ff:
70:55:50:e6:f5:4f:04:47:ba:d6:8b:01:e2:5b:f7:
f5:12:1f:53:7e:71:f9:c1:01:f9:62:be:d6:f4:4f:
1e:a0:a4:20:9d:f1:ff:b4:9a:e3:14:ff:94:a4:60:
89:8a:b5:4a:54:f0:6f:6f:24:62:cb:4f:33:fd:25:
0e:58:2d:cb:8c:0a:39:ac:d6:45:f1:c4:9f:cf:cd:
79:9f:e4:2f:a1:1d:bf:9f:27:67:2e:53:e9:22:10:
68:9c:ec:0a:46:e6:09:aa:c2:85:fb:20:c7:f4:14:
c7:6a:83:24:dd:78:f9:c7:38:3e:ee:84:f9:b6:9c:
17:e5:35:3b:c9:60:1f:cf:3f:8c:45:3b:bd:a7:7d:
fe:e4:0c:70:fc:14:bc:bc:44:cf:94:77:ee:c0:0d:
3e:f1:1a:50:10:9d:e5:0b:3b:a0:15:35:33:2e:10:
4b:16:5f:28:4a:a6:66:2f:61:ed:1c:43:5d:14:bd:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:A2:16:4B:7A:7A:2E:04:5E:77:2E:CE:A5:F2:1F:10:9D:CE:1A
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:88:9b:98:73:04:17:e8:5d:9b:81:b8:7f:5a:99:c4:d7:
d9:d0:fb:d5:c0:4f:b1:e8:5a:4d:e4:d5:6a:ce:6d:02:f1:1e:
1d:ba:08:86:93:d2:4e:90:c6:b4:43:a7:09:10:c9:66:5d:6c:
03:c3:87:68:e0:d4:2c:b7:f9:d3:57:90:f0:47:44:33:6c:f0:
27:d4:0d:72:c5:74:d9:fe:02:24:14:80:f9:4a:7e:d2:f3:48:
87:3d:7b:33:a2:6c:dd:f9:f1:5f:f7:75:d3:9a:53:10:de:52:
53:b6:c3:c5:d9:5f:e0:5e:29:07:38:92:4a:70:8d:92:bd:bd:
2e:27:fb:9f:bb:42:cf:71:46:b6:bf:27:0b:95:71:c0:e5:fc:
94:2f:67:d1:4c:88:04:43:d0:ac:d8:b3:58:cc:29:24:9f:81:
88:52:74:dc:ed:00:d1:39:2b:db:52:28:56:c9:4e:ae:2e:6b:
0e:04:87:7a:de:72:0a:ff:a8:fb:86:d5:ae:4b:64:28:34:25:
c0:ae:d8:60:3d:49:53:39:b0:9b:fe:7f:1b:17:bf:57:35:fd:
8d:50:01:34:7d:55:6c:28:05:92:91:1e:bc:85:42:1c:43:0e:
ff:b6:17:ba:a6:1e:77:bd:63:39:4a:e7:48:0f:8c:a0:da:35:
27:64:79:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xM9YI3cNgZFDsay8BwNQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0
MmM3ZDEwHhcNMjYwNDIxMTgwMDU3WhcNMjYwNDIyMTgwMDU3WjAzMTEwLwYDVQQD
EyhiY2M4YTIxNjRiN2E3YTJlMDQ1ZTc3MmVjZWE1ZjIxZjEwOWRjZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeIc5x023QhV8+fdBmeyMw/8kXhv
+4k1XEunacoP6Mx7K310ZLza9FEBDPrhjfSpHUm+M3k3aS1GPQPdOPK/FlNPjEHf
fnozN/9wVVDm9U8ER7rWiwHiW/f1Eh9TfnH5wQH5Yr7W9E8eoKQgnfH/tJrjFP+U
pGCJirVKVPBvbyRiy08z/SUOWC3LjAo5rNZF8cSfz815n+QvoR2/nydnLlPpIhBo
nOwKRuYJqsKF+yDH9BTHaoMk3Xj5xzg+7oT5tpwX5TU7yWAfzz+MRTu9p33+5Axw
/BS8vETPlHfuwA0+8RpQEJ3lCzugFTUzLhBLFl8oSqZmL2HtHENdFL3ZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzIohZLenouBF53Ls6l8h8Qnc4aMB8GA1UdIwQY
MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt
ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl
LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppGIm5hz
BBfoXZuBuH9amcTX2dD71cBPsehaTeTVas5tAvEeHboIhpPSTpDGtEOnCRDJZl1s
A8OHaODULLf501eQ8EdEM2zwJ9QNcsV02f4CJBSA+Up+0vNIhz17M6Js3fnxX/d1
05pTEN5SU7bDxdlf4F4pBziSSnCNkr29Lif7n7tCz3FGtr8nC5VxwOX8lC9n0UyI
BEPQrNizWMwpJJ+BiFJ03O0A0Tkr21IoVslOri5rDgSHet5yCv+o+4bVrktkKDQl
wK7YYD1JUzmwm/5/Gxe/VzX9jVABNH1VbCgFkpEevIVCHEMO/7YXuqYed71jOUrn
SA+MoNo1J2R5uA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:42:02 2026 by rpki-client