Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: 9rq0FRWjxy9xsNc/mKf+Su0OzxzzCmASxuLcsgB68N4=
Subject key identifier: 49:4D:4B:04:FE:FB:DD:40:7A:0A:12:FE:DD:D4:11:68:3D:E3:98:42
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019CAEDA5DA999867BFBAEA202E093FEE0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 14:01:12 +0000
Manifest this update: Mon 02 Mar 2026 14:01:12 +0000
Manifest next update: Tue 03 Mar 2026 14:01:12 +0000
Files and hashes: 1: 4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa (hash: 6AZogLPcjIIOPEMq9zRkZQNHkdZ8ldzB51VGATYSTPA=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: hFbmviBGtmta9p4IP3Hm7j4CBeOdFbH9EfvV6GiReEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:5d:a9:99:86:7b:fb:ae:a2:02:e0:93:fe:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Mar 2 14:01:12 2026 GMT
Not After : Mar 3 14:01:12 2026 GMT
Subject: CN=494d4b04fefbdd407a0a12feddd411683de39842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:20:d9:d7:ab:b3:92:14:29:c0:75:87:90:
8b:62:be:ac:a9:5c:2b:4c:2c:da:98:5e:ef:13:f0:
e7:93:03:cc:56:a8:18:50:39:fa:12:a9:e1:b7:26:
e5:93:7f:56:be:3c:b1:4f:0a:1d:f3:3a:18:cd:71:
82:52:d6:a8:a3:36:75:4f:3c:1f:9c:2d:82:7e:03:
ec:b3:64:fa:9d:df:5f:c8:f7:da:09:36:95:2f:2f:
07:77:7d:22:5d:2f:d8:e1:a0:43:df:c6:7f:f0:0f:
fb:09:c8:85:c9:23:17:8d:d9:1b:bb:f4:c1:7e:7a:
3b:25:2b:d2:88:47:1f:8c:17:11:fe:93:86:4a:69:
87:7b:51:13:1e:34:0c:24:9b:d6:1d:d2:61:e2:2a:
78:72:3b:a6:5d:bb:c6:d8:aa:da:f9:8e:ae:64:1b:
67:52:7a:a6:49:33:3b:99:f3:ca:5a:da:7b:39:9a:
01:dc:fc:58:96:42:35:62:ff:02:c8:6b:59:02:31:
7a:0b:03:7f:c3:78:b1:99:4a:e9:c8:ee:66:3c:32:
0c:63:fe:0e:b7:0e:8a:88:f2:03:e9:fa:d1:b8:00:
58:50:ef:39:8c:d6:07:c6:9c:7b:45:81:a9:5f:bc:
01:a4:8b:18:1b:9d:15:74:b7:95:6b:2b:79:9f:fe:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:4B:04:FE:FB:DD:40:7A:0A:12:FE:DD:D4:11:68:3D:E3:98:42
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:5c:0b:6c:cb:a6:a4:1c:88:80:3f:35:85:e1:0e:35:94:
d1:d0:96:23:61:4b:0d:6a:e6:eb:fa:f3:2b:d8:e9:d2:8f:7f:
3f:16:5a:e7:cb:0c:22:0d:69:40:13:ef:41:1b:48:b5:6a:bc:
ae:cf:82:5f:42:36:b1:70:fc:a8:8f:0a:8c:73:67:2e:0a:d0:
6d:92:4e:c9:37:3e:b0:8e:0f:67:a0:12:27:42:3c:b6:9c:f9:
fc:b4:61:b0:cc:62:31:3d:3d:08:c4:ba:25:0e:ed:1b:42:74:
b6:b1:ce:b3:de:69:6f:e4:b7:c0:5e:30:33:0f:87:27:27:f1:
eb:cc:d7:86:cc:50:36:ed:f7:ec:43:63:90:b1:c1:f9:70:2a:
e8:2c:8d:37:8d:1d:a8:44:14:f3:30:52:8d:7e:19:ef:e4:31:
92:ab:8d:14:0c:b1:b2:e1:ec:34:82:14:da:0b:b5:72:4b:c2:
80:0e:6a:59:51:af:1d:5f:00:ac:9f:b0:96:a9:2b:3e:7b:06:
8d:e3:56:76:b3:00:a5:82:f2:e5:e6:d7:28:6b:0c:46:9a:78:
c3:27:f1:91:7c:67:74:49:be:02:2a:af:71:ba:f4:61:11:1a:
54:81:56:39:92:63:21:24:ea:01:07:22:b7:3b:74:ab:3e:da:
ff:f1:08:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2l2pmYZ7+66iAuCT/uCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw
NDc3OWYwHhcNMjYwMzAyMTQwMTEyWhcNMjYwMzAzMTQwMTEyWjAzMTEwLwYDVQQD
Eyg0OTRkNGIwNGZlZmJkZDQwN2EwYTEyZmVkZGQ0MTE2ODNkZTM5ODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdgg2ders5IUKcB1h5CLYr6sqVwr
TCzamF7vE/DnkwPMVqgYUDn6Eqnhtyblk39WvjyxTwod8zoYzXGCUtaoozZ1Tzwf
nC2CfgPss2T6nd9fyPfaCTaVLy8Hd30iXS/Y4aBD38Z/8A/7CciFySMXjdkbu/TB
fno7JSvSiEcfjBcR/pOGSmmHe1ETHjQMJJvWHdJh4ip4cjumXbvG2Kra+Y6uZBtn
UnqmSTM7mfPKWtp7OZoB3PxYlkI1Yv8CyGtZAjF6CwN/w3ixmUrpyO5mPDIMY/4O
tw6KiPID6frRuABYUO85jNYHxpx7RYGpX7wBpIsYG50VdLeVayt5n/7xzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElNSwT++91AegoS/t3UEWg945hCMB8GA1UdIwQY
MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt
ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx
LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesZcC2zL
pqQciIA/NYXhDjWU0dCWI2FLDWrm6/rzK9jp0o9/PxZa58sMIg1pQBPvQRtItWq8
rs+CX0I2sXD8qI8KjHNnLgrQbZJOyTc+sI4PZ6ASJ0I8tpz5/LRhsMxiMT09CMS6
JQ7tG0J0trHOs95pb+S3wF4wMw+HJyfx68zXhsxQNu337ENjkLHB+XAq6CyNN40d
qEQU8zBSjX4Z7+QxkquNFAyxsuHsNIIU2gu1ckvCgA5qWVGvHV8ArJ+wlqkrPnsG
jeNWdrMApYLy5ebXKGsMRpp4wyfxkXxndEm+Aiqvcbr0YREaVIFWOZJjISTqAQci
tzt0qz7a//EInw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:35 2026 by rpki-client