Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json)
Hash identifier: MENdGnniu9VC90HfwM46rgnyiTBbMlznECcaaoWItFs=
Subject key identifier: 38:4A:BE:B9:41:AB:BC:F3:C7:F7:5C:B5:37:7E:B3:33:EF:E7:3C:08
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019CA90EFE7458F4DB5F79FE0CF7CF32A34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
Manifest number: F9
Signing time: Sun 01 Mar 2026 11:00:57 +0000
Manifest this update: Sun 01 Mar 2026 11:00:57 +0000
Manifest next update: Mon 02 Mar 2026 11:00:57 +0000
Files and hashes: 1: l3wWRMyjG3W1QX7dbEGnQyzn4DQ.asa (hash: dJ0GKezkrUxGMbcXzLA/azau3rHHQ9vRnc3uz/Z5/K0=)
2: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: wA95q4+UABe7lgdBj1picxQAEuvDhy0i9YFLjz0DGZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:fe:74:58:f4:db:5f:79:fe:0c:f7:cf:32:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Mar 1 11:00:57 2026 GMT
Not After : Mar 2 11:00:57 2026 GMT
Subject: CN=384abeb941abbcf3c7f75cb5377eb333efe73c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:a1:3e:0d:4b:bd:b6:e2:fb:f9:55:57:3c:
67:56:89:81:96:b7:38:19:b1:8e:0a:4b:86:44:0c:
19:ca:c6:65:6f:67:7e:41:25:cd:1d:53:54:0c:0f:
b1:d5:76:86:71:d1:ef:87:c4:81:8a:b4:65:d4:7a:
54:52:f2:29:75:fd:77:0c:79:84:b5:7a:37:84:97:
e2:65:97:ab:43:72:31:0d:5b:21:d9:e4:4e:ec:e9:
f7:7b:d2:6e:2f:b5:9a:3d:50:20:df:f9:2c:6f:71:
22:6f:4c:7c:f3:f1:c0:6f:27:d7:c5:6f:58:b6:33:
e1:3b:e7:e5:5f:b9:fa:e9:83:51:e5:c7:0f:e5:6d:
92:1d:ee:d1:4f:a1:d3:56:57:d1:af:63:a3:aa:bd:
b4:68:51:d1:69:de:e1:67:94:30:93:db:88:1a:65:
42:2b:79:14:b2:1b:de:15:0d:4f:cf:a8:01:36:99:
ca:22:ba:67:4a:32:f5:ff:5e:70:9b:34:e6:0d:c9:
cf:f4:18:3c:bd:fe:6f:e2:c9:19:8e:b5:82:39:10:
68:1e:69:7b:ef:ca:ef:38:6b:71:52:f4:a9:3e:6f:
e3:37:9d:65:b8:b4:05:7c:6d:96:7b:8c:7f:29:5b:
3f:bb:d5:3c:26:b9:60:17:6f:e9:21:78:72:7f:70:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:BE:B9:41:AB:BC:F3:C7:F7:5C:B5:37:7E:B3:33:EF:E7:3C:08
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8f:73:22:57:f5:77:c6:eb:c9:45:6c:3f:5f:b7:ad:2b:d4:
ec:6f:dd:93:37:0c:89:96:76:40:88:22:d0:04:b9:dc:2e:fe:
54:01:ea:bc:58:db:e0:5f:e5:fc:22:2a:4c:f5:23:79:2e:ec:
e7:12:80:b2:c8:a2:6a:87:e0:dd:c0:b8:1c:f2:85:9a:17:4c:
d6:69:86:9b:58:09:44:72:e2:69:35:6e:aa:40:1e:5e:9b:83:
6b:82:89:b9:d3:12:99:81:a4:6f:dc:ad:f3:0f:77:1c:bb:c7:
00:0f:bf:1f:01:8d:d5:bf:ca:51:00:cb:d0:9c:e0:53:76:d5:
24:cc:f0:49:e2:4b:bd:9d:1d:14:0f:7d:c0:0a:fe:52:4f:44:
03:e0:46:f2:85:9f:a1:7c:22:18:60:f3:a6:f5:4c:81:ef:da:
52:27:53:fc:28:8d:a1:1c:17:fc:99:cd:5b:93:6a:29:01:4f:
98:3f:60:43:53:81:ca:25:96:c4:41:8f:94:d5:15:fb:ec:45:
ff:4f:50:b9:53:de:21:6c:29:03:e2:2e:f8:6d:19:23:4e:9a:
9e:21:3d:45:a0:0b:aa:5d:77:44:f3:e7:2c:85:b0:e6:b9:e7:
85:0a:cc:8b:9e:c7:8c:0f:53:9d:e7:17:f8:7c:cb:39:29:cf:
f2:9e:77:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDv50WPTbX3n+DPfPMqNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz
MjlhMDcwHhcNMjYwMzAxMTEwMDU3WhcNMjYwMzAyMTEwMDU3WjAzMTEwLwYDVQQD
EygzODRhYmViOTQxYWJiY2YzYzdmNzVjYjUzNzdlYjMzM2VmZTczYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AahPg1Lvbbi+/lVVzxnVomBlrc4
GbGOCkuGRAwZysZlb2d+QSXNHVNUDA+x1XaGcdHvh8SBirRl1HpUUvIpdf13DHmE
tXo3hJfiZZerQ3IxDVsh2eRO7On3e9JuL7WaPVAg3/ksb3Eib0x88/HAbyfXxW9Y
tjPhO+flX7n66YNR5ccP5W2SHe7RT6HTVlfRr2Ojqr20aFHRad7hZ5Qwk9uIGmVC
K3kUshveFQ1Pz6gBNpnKIrpnSjL1/15wmzTmDcnP9Bg8vf5v4skZjrWCORBoHml7
78rvOGtxUvSpPm/jN51luLQFfG2We4x/KVs/u9U8JrlgF2/pIXhyf3DIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhKvrlBq7zzx/dctTd+szPv5zwIMB8GA1UdIwQY
MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt
ZTU5MmM3ZDM1ZmYyLzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy
LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO49zIlf1
d8bryUVsP1+3rSvU7G/dkzcMiZZ2QIgi0AS53C7+VAHqvFjb4F/l/CIqTPUjeS7s
5xKAssiiaofg3cC4HPKFmhdM1mmGm1gJRHLiaTVuqkAeXpuDa4KJudMSmYGkb9yt
8w93HLvHAA+/HwGN1b/KUQDL0JzgU3bVJMzwSeJLvZ0dFA99wAr+Uk9EA+BG8oWf
oXwiGGDzpvVMge/aUidT/CiNoRwX/JnNW5NqKQFPmD9gQ1OByiWWxEGPlNUV++xF
/09QuVPeIWwpA+Iu+G0ZI06aniE9RaALql13RPPnLIWw5rnnhQrMi57HjA9TnecX
+HzLOSnP8p53Kg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:12 2026 by rpki-client