Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: loURWzwO0O5GWZcLyELSfX7geRizTi9eNEDMvrncsdA=
Subject key identifier: 84:98:5D:5F:65:34:3C:99:39:30:9B:6A:1A:FD:B4:AE:21:11:69:1B
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019CABD8FDC2FD410B6F7B0E330B33D7262A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 11DA
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: UDbiD66KBdehDFyvqP75PnCdpYzPK4SdHAM1Kw957aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fd:c2:fd:41:0b:6f:7b:0e:33:0b:33:d7:26:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=84985d5f65343c9939309b6a1afdb4ae2111691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:b4:57:31:4e:97:eb:c5:76:0e:41:c5:d4:
80:33:d6:a8:d6:e7:d0:d4:2b:2a:5a:6d:81:90:99:
87:83:8a:0e:6e:f9:4f:f5:5a:ac:a2:f1:dc:ce:e5:
72:a6:d4:d8:5f:62:35:81:95:1a:27:07:70:4d:e5:
bf:9b:af:6d:78:1a:5d:47:b5:0f:a1:7b:d8:4d:ec:
34:b9:bf:3b:b2:36:4d:88:55:4b:13:13:a9:cc:b6:
da:c1:2e:b8:30:1d:00:6e:a1:40:9c:f0:48:a6:a8:
f1:86:b7:2f:29:ee:b7:e4:db:78:8d:7f:79:80:05:
c3:a1:86:d2:7d:0c:2d:3a:df:0b:17:3c:aa:7b:a8:
8b:28:28:a0:37:c0:7d:7e:1f:83:3b:fb:25:d8:90:
66:b0:e1:80:01:fc:6c:42:9f:92:da:b7:e9:76:fb:
c3:84:54:ac:b4:9a:18:1e:04:b1:fe:5d:b2:d5:e1:
ea:97:b3:f6:cc:34:f9:66:dd:ae:dd:e0:61:e5:41:
db:ea:80:0d:29:a9:60:f0:9e:49:e2:09:29:0f:6b:
1b:86:bb:ff:8f:53:e8:3f:2c:f4:75:91:b9:69:85:
bb:ab:f2:d6:fa:f9:00:9d:21:c8:62:89:1c:dd:30:
90:2b:a2:99:b2:ff:6f:15:32:4f:50:38:b4:4b:ea:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:98:5D:5F:65:34:3C:99:39:30:9B:6A:1A:FD:B4:AE:21:11:69:1B
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:94:77:de:b2:f0:9f:39:3c:c4:23:ec:3b:58:ce:ac:7c:55:
1a:86:32:b6:c5:84:7c:d1:dd:81:34:70:18:b7:5c:cf:36:ca:
6b:3a:b7:58:df:fd:4e:cb:a4:14:11:9a:ed:c6:e6:4b:1c:47:
5c:49:e1:b3:87:74:ab:85:fd:b0:e7:b6:71:bf:cf:69:be:bb:
28:ba:a7:6c:df:7f:30:b6:6a:dc:b7:f2:b6:23:2b:ef:93:37:
06:b8:ff:97:3e:63:da:62:a2:95:f5:79:41:59:cb:0e:ee:24:
69:d3:04:25:91:69:c1:16:5e:54:8a:cd:42:f9:00:c8:25:52:
9b:8c:d4:d9:90:27:1d:f6:2d:fe:10:b6:cd:95:82:89:3e:97:
90:1e:08:fa:cd:de:54:13:d7:25:22:8f:0a:9b:b8:03:fa:5c:
f0:78:2c:cb:66:79:72:87:b5:fc:ce:49:1a:1e:79:2a:23:43:
b6:74:97:0d:31:e5:9d:a3:ad:8b:5d:2c:b8:37:95:e9:3e:f5:
3c:7b:b4:65:0e:ca:5e:57:99:00:46:a9:7d:56:a5:ad:21:64:
9d:b2:9c:e9:76:da:03:f5:1f:36:7e:4e:8e:6c:78:d6:76:30:
ad:fd:fe:39:4e:f2:8e:d6:32:7a:4b:5e:28:f5:11:16:33:4a:
01:3b:4d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2P3C/UELb3sOMwsz1yYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZWY0YjA2MGE4Yjc5YjI4OTNkMzMwOWFkNTBkMWNjY2Iy
YjllMzEwHhcNMjYwMzAyMDAwMDUwWhcNMjYwMzAzMDAwMDUwWjAzMTEwLwYDVQQD
Eyg4NDk4NWQ1ZjY1MzQzYzk5MzkzMDliNmExYWZkYjRhZTIxMTE2OTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK60VzFOl+vFdg5BxdSAM9ao1ufQ
1CsqWm2BkJmHg4oObvlP9VqsovHczuVyptTYX2I1gZUaJwdwTeW/m69teBpdR7UP
oXvYTew0ub87sjZNiFVLExOpzLbawS64MB0AbqFAnPBIpqjxhrcvKe635Nt4jX95
gAXDoYbSfQwtOt8LFzyqe6iLKCigN8B9fh+DO/sl2JBmsOGAAfxsQp+S2rfpdvvD
hFSstJoYHgSx/l2y1eHql7P2zDT5Zt2u3eBh5UHb6oANKalg8J5J4gkpD2sbhrv/
j1PoPyz0dZG5aYW7q/LW+vkAnSHIYokc3TCQK6KZsv9vFTJPUDi0S+pMHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISYXV9lNDyZOTCbahr9tK4hEWkbMB8GA1UdIwQY
MBaAFEHvSwYKi3myiT0zCa1Q0czLK54xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEt
YmY4ZTVkODI2NWEyLzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEtYmY4ZTVkODI2NWEy
LzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpR33rLw
nzk8xCPsO1jOrHxVGoYytsWEfNHdgTRwGLdczzbKazq3WN/9TsukFBGa7cbmSxxH
XEnhs4d0q4X9sOe2cb/Pab67KLqnbN9/MLZq3LfytiMr75M3Brj/lz5j2mKilfV5
QVnLDu4kadMEJZFpwRZeVIrNQvkAyCVSm4zU2ZAnHfYt/hC2zZWCiT6XkB4I+s3e
VBPXJSKPCpu4A/pc8Hgsy2Z5coe1/M5JGh55KiNDtnSXDTHlnaOti10suDeV6T71
PHu0ZQ7KXleZAEapfValrSFknbKc6XbaA/UfNn5Ojmx41nYwrf3+OU7yjtYyekte
KPURFjNKATtNIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:50 2026 by rpki-client