Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: YMyyaD0bwt/LL03PF53EffSNZIDXpvviR5DOjJnBqng=
Subject key identifier: 55:4E:3D:FC:DC:BA:D3:44:37:84:2C:F3:3D:0F:28:41:4A:13:52:92
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019CABA1D2638A7CD4D3CCFF1429C80C89F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
2: gjHfWoEHc9QTn6Mvq7ZDpa1HWi0.roa (hash: qlBolvwxAE3Oa4lo8khdT9eAg5j/fv2rE6rmykA9rEE=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: zwhg1FETGTk0KodilhG0nKnzFbk3hWH5PG0bfA+HHxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d2:63:8a:7c:d4:d3:cc:ff:14:29:c8:0c:89:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=554e3dfcdcbad34437842cf33d0f28414a135292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:dd:f2:24:cd:47:33:cf:32:ac:e5:dd:5c:
ac:05:85:52:51:11:7a:fb:91:2b:a4:f8:87:5f:b3:
1e:75:96:29:b9:35:27:33:f2:d5:57:24:4f:9b:f0:
49:d8:63:33:ef:51:4d:95:5e:06:7e:10:cb:db:74:
0d:e2:ff:56:c2:18:ab:02:35:ee:60:29:d0:73:55:
06:21:6c:da:26:85:ba:c7:7e:9d:fc:6a:5c:88:75:
9d:2e:df:11:88:c9:42:98:04:2d:d5:77:69:6c:33:
9b:16:63:fc:d5:e0:f3:c3:a9:47:c6:ae:6d:0d:a3:
82:62:2e:9a:be:85:fc:4e:24:cb:07:93:29:67:1e:
d4:5a:8c:f8:73:b0:97:ec:92:68:b0:27:11:0a:d6:
cd:60:80:e6:b8:1f:b4:cb:a0:9b:47:b2:50:4f:87:
d0:c5:55:da:0b:08:c0:ba:e7:34:85:c3:01:94:f1:
e0:e9:3b:01:83:6a:a8:cc:f8:9c:92:72:b7:e8:9b:
78:31:9b:78:2d:6c:df:b3:99:6e:37:1d:e9:71:d9:
2e:02:67:35:17:07:ca:b5:68:78:9a:a1:51:66:d1:
21:c6:b1:8b:71:d6:57:e9:33:49:1e:d6:e9:99:95:
d6:b2:87:08:dc:9f:48:de:c9:88:39:a9:a7:78:f1:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:3D:FC:DC:BA:D3:44:37:84:2C:F3:3D:0F:28:41:4A:13:52:92
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b1:ad:49:37:df:f0:01:f2:3d:24:d3:65:86:8d:68:3e:64:
c8:c9:e2:9d:0c:ec:94:3b:24:ed:c7:06:d1:57:3d:34:23:4b:
3f:93:1f:d4:c1:2a:97:f6:d0:84:6e:9d:a4:e7:7c:02:9e:3c:
42:01:7a:5b:c3:f9:a4:83:40:fb:fc:0a:87:78:1f:4a:7e:fc:
d4:fe:4a:4c:38:e9:0b:2c:62:5f:03:c7:03:e6:f5:a1:96:de:
7d:e6:7f:f6:89:14:47:2d:ee:57:30:f7:d4:4d:a5:1e:65:85:
40:16:ca:e2:42:23:a3:2f:8f:38:4d:3f:bb:77:40:b3:84:e8:
72:4e:ef:f2:f1:31:81:08:7b:78:3f:a7:f0:60:6a:c3:15:11:
62:5a:1b:3a:5e:9c:8c:aa:b7:a7:2b:b4:21:0e:d8:ac:39:7c:
b3:a6:16:a2:a6:e8:4f:35:b3:db:41:b6:82:20:fd:bc:66:ed:
20:5a:14:73:42:9a:08:36:c0:0e:8b:78:52:e2:7d:d3:d4:80:
1f:ca:41:9d:2c:3c:12:9c:85:d0:b2:18:7a:72:e0:63:e5:52:
60:75:c4:f1:ea:e7:1f:d9:0a:de:00:11:ac:9d:3b:69:f2:40:
5d:f5:57:fb:fe:22:fa:ad:03:c9:2a:99:c8:55:5d:e4:2b:2a:
98:b8:10:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodJjinzU08z/FCnIDInzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjYwMzAxMjMwMDM0WhcNMjYwMzAyMjMwMDM0WjAzMTEwLwYDVQQD
Eyg1NTRlM2RmY2RjYmFkMzQ0Mzc4NDJjZjMzZDBmMjg0MTRhMTM1MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6bd8iTNRzPPMqzl3VysBYVSURF6
+5ErpPiHX7MedZYpuTUnM/LVVyRPm/BJ2GMz71FNlV4GfhDL23QN4v9WwhirAjXu
YCnQc1UGIWzaJoW6x36d/GpciHWdLt8RiMlCmAQt1XdpbDObFmP81eDzw6lHxq5t
DaOCYi6avoX8TiTLB5MpZx7UWoz4c7CX7JJosCcRCtbNYIDmuB+0y6CbR7JQT4fQ
xVXaCwjAuuc0hcMBlPHg6TsBg2qozPicknK36Jt4MZt4LWzfs5luNx3pcdkuAmc1
FwfKtWh4mqFRZtEhxrGLcdZX6TNJHtbpmZXWsocI3J9I3smIOamnePFOcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVOPfzcutNEN4Qs8z0PKEFKE1KSMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7GtSTff
8AHyPSTTZYaNaD5kyMninQzslDsk7ccG0Vc9NCNLP5Mf1MEql/bQhG6dpOd8Ap48
QgF6W8P5pINA+/wKh3gfSn781P5KTDjpCyxiXwPHA+b1oZbefeZ/9okURy3uVzD3
1E2lHmWFQBbK4kIjoy+POE0/u3dAs4Tock7v8vExgQh7eD+n8GBqwxURYlobOl6c
jKq3pyu0IQ7YrDl8s6YWoqboTzWz20G2giD9vGbtIFoUc0KaCDbADot4UuJ909SA
H8pBnSw8EpyF0LIYenLgY+VSYHXE8ernH9kK3gARrJ07afJAXfVX+/4i+q0DySqZ
yFVd5CsqmLgQig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:49 2026 by rpki-client