Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: xofis7PWCQWE8utmkms3eHTAQdvQNj8ogxRL2a1VLvU=
Subject key identifier: D7:65:47:E4:92:80:A0:64:0E:F0:31:18:FD:1E:C0:F5:E4:FC:15:2B
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019D9B87838C4340644FA239648907BFE630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 033B
Signing time: Fri 17 Apr 2026 13:00:42 +0000
Manifest this update: Fri 17 Apr 2026 13:00:42 +0000
Manifest next update: Sat 18 Apr 2026 13:00:42 +0000
Files and hashes: 1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: 6mdaOBLv4QAveIECVYV0wtn5ZUpJc6QV+Vk0qU95Hyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:83:8c:43:40:64:4f:a2:39:64:89:07:bf:e6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Apr 17 13:00:42 2026 GMT
Not After : Apr 18 13:00:42 2026 GMT
Subject: CN=d76547e49280a0640ef03118fd1ec0f5e4fc152b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:f5:c6:58:27:e8:84:5a:6e:09:16:05:e4:
1f:81:8f:e2:6c:e7:7c:5a:ca:5a:79:e0:1e:8e:30:
48:80:07:8e:49:f4:68:92:46:3b:a2:39:09:6e:7a:
74:6e:aa:1b:a1:68:e0:0f:36:d7:66:c2:1a:91:fd:
49:a6:ab:d4:3c:dd:12:80:80:0f:6b:54:bf:4a:bb:
db:82:11:12:1a:74:dc:46:3a:f2:b6:d3:47:9b:be:
1b:cf:93:4c:63:bd:ec:31:4c:7a:85:63:fc:46:77:
73:cd:62:dd:10:01:d5:84:9b:c0:66:97:68:47:48:
2c:77:23:44:7e:93:f4:ee:79:0a:7a:0f:e4:1a:59:
27:9f:d5:c8:84:f7:5b:ee:82:e0:e8:d6:fd:de:a8:
8f:ad:ea:a7:da:92:df:d1:a4:1c:6d:41:69:ac:e0:
21:3d:9a:09:bc:12:bc:fa:54:4c:66:92:6f:53:3c:
52:f1:71:31:15:3e:54:00:c2:b1:4a:95:f6:17:ca:
98:f1:4c:67:d9:a6:39:ee:2e:13:c5:ad:5e:7e:01:
d4:74:97:c3:17:b5:47:f5:7d:ce:36:01:eb:f5:21:
1c:75:77:4e:2d:48:2d:61:92:f5:95:fe:26:27:1f:
cb:ea:78:01:3c:89:f1:ef:b1:83:42:b0:0c:0c:47:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:47:E4:92:80:A0:64:0E:F0:31:18:FD:1E:C0:F5:E4:FC:15:2B
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e5:33:5f:66:a8:d1:ba:48:61:a4:bc:2d:90:1d:7c:82:80:
5a:5c:c8:8b:89:37:55:8f:61:df:77:36:fb:4b:b1:6b:f4:d8:
6c:0f:ac:f6:64:e6:aa:4e:63:f0:05:42:52:da:69:d9:84:b9:
67:d4:7f:83:c8:1d:f3:43:7a:f7:14:8b:d4:9d:c7:50:98:90:
f6:7e:6c:c0:7e:7d:0a:d5:ee:49:16:17:58:94:3e:77:e5:13:
af:3b:45:79:1c:3c:90:ff:be:32:b1:26:49:1e:ef:0f:d2:42:
c8:0f:17:97:4e:f4:70:ef:dd:1e:72:ab:b3:f5:bb:d4:7a:dd:
44:1d:b5:b4:b9:07:c8:27:f3:e6:e1:9b:5a:8c:8f:63:28:c9:
a4:cc:b2:7f:37:a4:f7:f2:8b:d0:40:b5:46:b6:3e:89:93:5d:
c6:db:db:81:ca:da:16:c7:b1:80:d6:ff:c8:d1:a2:4a:b4:a3:
84:2b:dc:b4:5d:09:96:32:11:e5:00:ae:bc:a1:8a:2e:4e:d9:
11:81:22:d4:43:6e:f0:b4:44:09:bc:91:20:a2:41:d4:26:3e:
21:c4:4c:89:3f:3f:cf:10:a1:6f:93:9c:2c:fe:b8:18:f0:76:
96:a5:62:53:d8:fb:59:bc:10:26:8f:58:7c:df:f3:b1:e0:26:
76:83:af:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4OMQ0BkT6I5ZIkHv+YwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1
NWY2NGIwHhcNMjYwNDE3MTMwMDQyWhcNMjYwNDE4MTMwMDQyWjAzMTEwLwYDVQQD
EyhkNzY1NDdlNDkyODBhMDY0MGVmMDMxMThmZDFlYzBmNWU0ZmMxNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaT1xlgn6IRabgkWBeQfgY/ibOd8
WspaeeAejjBIgAeOSfRokkY7ojkJbnp0bqoboWjgDzbXZsIakf1JpqvUPN0SgIAP
a1S/SrvbghESGnTcRjryttNHm74bz5NMY73sMUx6hWP8RndzzWLdEAHVhJvAZpdo
R0gsdyNEfpP07nkKeg/kGlknn9XIhPdb7oLg6Nb93qiPreqn2pLf0aQcbUFprOAh
PZoJvBK8+lRMZpJvUzxS8XExFT5UAMKxSpX2F8qY8Uxn2aY57i4Txa1efgHUdJfD
F7VH9X3ONgHr9SEcdXdOLUgtYZL1lf4mJx/L6ngBPInx77GDQrAMDEfjfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdlR+SSgKBkDvAxGP0ewPXk/BUrMB8GA1UdIwQY
MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt
M2E2YTA2ZTE4OGMzLzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz
LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuUzX2ao
0bpIYaS8LZAdfIKAWlzIi4k3VY9h33c2+0uxa/TYbA+s9mTmqk5j8AVCUtpp2YS5
Z9R/g8gd80N69xSL1J3HUJiQ9n5swH59CtXuSRYXWJQ+d+UTrztFeRw8kP++MrEm
SR7vD9JCyA8Xl070cO/dHnKrs/W71HrdRB21tLkHyCfz5uGbWoyPYyjJpMyyfzek
9/KL0EC1RrY+iZNdxtvbgcraFsexgNb/yNGiSrSjhCvctF0JljIR5QCuvKGKLk7Z
EYEi1ENu8LRECbyRIKJB1CY+IcRMiT8/zxChb5OcLP64GPB2lqViU9j7WbwQJo9Y
fN/zseAmdoOvjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:24 2026 by rpki-client