Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: oLkgkPy1LgRZ2Y+MpNBrKqBqBtfuCmoex9hyfh6oQ7w=
Subject key identifier: 62:C0:F3:BC:7E:99:A8:07:B7:26:3A:4F:83:6A:51:45:C6:FA:D4:10
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 019D9D07B90C7168CA05332485C9ABD46CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 1520
Signing time: Fri 17 Apr 2026 20:00:22 +0000
Manifest this update: Fri 17 Apr 2026 20:00:22 +0000
Manifest next update: Sat 18 Apr 2026 20:00:22 +0000
Files and hashes: 1: IWErWVtspulYBc2P0UkO-q5egfs.roa (hash: lBRwxz9Xohtldef78/SXShaF/JL3thmNLA+SU9F6qTI=)
2: dFq--4OMc9Rjg5-mNAsJIFvbJME.roa (hash: KdydhQpjZ/9bUOR6cl5ITO2afuDxYiCJCh8ZvZyKzpE=)
3: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: uVlLcuZ8mFEoyrmwFVRALVKxEaWyXXXo8UKjdAOXFf0=)
4: yRUaitnmXUxZxGbULPkZbaJ4rlQ.roa (hash: C+dkviU9NULiViFs9l9KMMoHApjfQiWaRWnrAEZ92P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:b9:0c:71:68:ca:05:33:24:85:c9:ab:d4:6c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Apr 17 20:00:22 2026 GMT
Not After : Apr 18 20:00:22 2026 GMT
Subject: CN=62c0f3bc7e99a807b7263a4f836a5145c6fad410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:56:e4:8f:9e:10:c0:d7:ad:56:4d:e7:5a:
f3:8c:06:dd:85:e8:16:f3:5b:da:db:c7:b1:12:f2:
9b:e6:10:65:78:50:16:bf:32:7e:14:da:ba:c1:cc:
87:36:8d:84:44:d1:9f:82:90:a8:df:74:47:e8:19:
7b:14:91:12:79:7b:02:f1:e5:92:f3:a1:ac:40:fb:
e3:94:72:2b:00:18:74:82:7e:ab:87:b1:c4:62:a7:
6f:f1:b5:5f:86:23:25:b3:f5:6e:dd:b7:27:cd:d1:
c4:5d:2e:54:e3:9d:27:5a:54:66:f7:06:6b:53:ec:
d2:35:c8:aa:da:a6:96:3b:e2:f1:c2:96:cc:84:bc:
8e:57:9d:07:a5:ff:24:92:30:bc:9f:ca:15:16:6b:
bd:03:f8:37:ef:52:66:17:0a:41:98:c7:15:14:87:
a4:ca:09:27:7b:d9:47:4e:65:ab:24:0d:4e:53:b6:
ce:12:9f:47:c0:32:08:7e:a9:ef:7a:78:c5:83:1b:
28:4d:9c:44:54:9c:b1:26:80:d2:a9:c2:c7:61:f8:
43:fb:cb:ef:18:74:3e:15:d2:73:74:98:f4:d3:63:
8a:2e:cb:1e:39:5d:2d:38:08:48:16:d5:a9:d1:df:
f5:ec:69:28:d0:3c:6d:80:8b:18:63:69:c7:b3:e4:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:F3:BC:7E:99:A8:07:B7:26:3A:4F:83:6A:51:45:C6:FA:D4:10
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:51:57:9f:2a:af:6f:6f:b5:b1:8a:c9:5b:36:84:1d:f4:98:
ac:9c:ab:e8:b9:42:37:66:3c:0b:52:fe:7b:8c:26:14:5c:f4:
90:6e:8c:00:54:89:34:9f:c7:dd:5c:cc:21:e9:48:7d:8d:49:
67:f3:b3:50:30:67:61:d0:a6:33:17:d8:3f:dc:2e:56:35:7a:
ab:31:52:a2:8d:4a:13:7c:97:65:86:61:3a:4f:16:97:e4:3f:
b7:c8:9d:a8:6b:97:bf:1d:c5:22:a2:0c:35:1d:05:ef:ef:b5:
90:42:86:c7:8b:f7:75:c1:01:71:5b:d9:db:1e:2c:1d:bf:bc:
21:60:f7:65:82:c0:48:07:41:99:27:5b:66:27:f4:d3:72:64:
7b:f8:50:62:6b:dd:a9:c4:f2:8a:1c:cd:e0:d9:a0:db:7c:8d:
30:f3:e2:1b:89:20:87:5b:c9:1e:ad:83:8e:44:ec:01:0e:b4:
7f:22:cb:11:59:d1:ef:d4:a1:5a:eb:35:2f:7a:85:f5:1e:f9:
f0:4a:82:3e:84:24:3d:fa:40:33:58:f7:ea:6a:c1:89:5b:59:
bf:ef:9b:e2:6e:85:08:52:f6:9d:70:94:3b:7a:fa:3e:d0:b2:
e5:29:3d:c8:dd:8c:f5:3d:2d:5e:27:eb:2b:93:94:61:d2:36:
e6:96:70:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dB7kMcWjKBTMkhcmr1GzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh
NjVjYTMwHhcNMjYwNDE3MjAwMDIyWhcNMjYwNDE4MjAwMDIyWjAzMTEwLwYDVQQD
Eyg2MmMwZjNiYzdlOTlhODA3YjcyNjNhNGY4MzZhNTE0NWM2ZmFkNDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+BW5I+eEMDXrVZN51rzjAbdhegW
81va28exEvKb5hBleFAWvzJ+FNq6wcyHNo2ERNGfgpCo33RH6Bl7FJESeXsC8eWS
86GsQPvjlHIrABh0gn6rh7HEYqdv8bVfhiMls/Vu3bcnzdHEXS5U450nWlRm9wZr
U+zSNciq2qaWO+LxwpbMhLyOV50Hpf8kkjC8n8oVFmu9A/g371JmFwpBmMcVFIek
ygkne9lHTmWrJA1OU7bOEp9HwDIIfqnvenjFgxsoTZxEVJyxJoDSqcLHYfhD+8vv
GHQ+FdJzdJj002OKLsseOV0tOAhIFtWp0d/17Gko0DxtgIsYY2nHs+QJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLA87x+magHtyY6T4NqUUXG+tQQMB8GA1UdIwQY
MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt
ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2
LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFFXnyqv
b2+1sYrJWzaEHfSYrJyr6LlCN2Y8C1L+e4wmFFz0kG6MAFSJNJ/H3VzMIelIfY1J
Z/OzUDBnYdCmMxfYP9wuVjV6qzFSoo1KE3yXZYZhOk8Wl+Q/t8idqGuXvx3FIqIM
NR0F7++1kEKGx4v3dcEBcVvZ2x4sHb+8IWD3ZYLASAdBmSdbZif003Jke/hQYmvd
qcTyihzN4Nmg23yNMPPiG4kgh1vJHq2DjkTsAQ60fyLLEVnR79ShWus1L3qF9R75
8EqCPoQkPfpAM1j36mrBiVtZv++b4m6FCFL2nXCUO3r6PtCy5Sk9yN2M9T0tXifr
K5OUYdI25pZwEg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:17:51 2026 by rpki-client