Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: 6OahLjRbR0aokzc+aKpmLcaJfHafN2ds0pah/DuPePU=
Subject key identifier: D1:74:65:7B:8D:4F:E2:23:E5:27:30:10:B4:23:49:18:B7:ED:EC:43
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 019CAA5871D1240B2F09C541E6AC2E9B35F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa (hash: fc9tBn+6SqJqfSW/GpPBz9lgPSF51UDlJcUc1bmbePQ=)
2: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: uPbws8IzPE9Xqjg5RxlKGaeX5yhbyzFsv6M03pFCf5Q=)
3: vm0Cb1QlvcUWqTlVtMYvi0tSg50.roa (hash: vUmX5+CcNp91eGp6cheOPjkV7E2OfS28ZKb/y8YQp0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:71:d1:24:0b:2f:09:c5:41:e6:ac:2e:9b:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=d174657b8d4fe223e5273010b4234918b7edec43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:a7:62:68:fc:21:17:14:dc:ed:d2:c6:89:
55:04:41:85:1f:23:3a:af:00:ec:54:16:89:10:74:
bd:0a:43:b3:7c:48:f3:f8:13:06:83:b8:b9:2f:87:
fa:40:ef:74:c7:1d:9d:df:17:96:ee:42:1e:de:80:
a3:f0:99:86:17:b8:9e:49:3b:bd:5f:91:a2:3d:79:
ec:4d:5e:98:4a:36:e8:a5:b3:ea:41:9a:6d:f9:05:
c9:35:fd:a3:e8:a2:ea:97:fc:db:a6:bc:40:5e:c0:
c0:08:f4:ba:34:22:01:80:9a:8a:0f:84:05:a5:76:
27:21:14:85:d6:d6:5d:a4:eb:50:c9:8b:76:df:b2:
e8:23:78:c9:72:43:8c:40:ab:d4:de:d6:9f:f8:18:
fe:dd:a3:9c:a4:3a:49:b1:5a:ce:e4:22:b6:09:16:
38:ce:27:89:b0:43:d2:0b:16:5e:62:e4:c9:5e:59:
20:ca:fc:02:3c:e1:a2:eb:2e:f8:4d:61:b5:4e:a8:
9c:82:9c:ae:af:a5:cf:cb:c2:3f:6e:00:ab:ed:1e:
a5:09:40:29:67:7b:1b:39:bf:7c:47:86:f0:7b:fb:
cc:aa:43:7e:ed:c2:d0:10:18:ed:3e:17:bb:41:a3:
e7:c1:2b:f8:1d:d7:57:ec:77:f9:e0:fa:da:40:a4:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:65:7B:8D:4F:E2:23:E5:27:30:10:B4:23:49:18:B7:ED:EC:43
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b1:34:e9:32:fa:af:ab:9c:b8:13:33:e8:ed:44:52:a6:19:
d8:7d:7f:64:4e:24:87:1a:cd:d7:c1:31:ed:5a:97:1e:1d:fd:
e1:95:b6:d4:c7:b2:1c:b4:77:e7:83:c5:88:c3:af:74:f1:15:
06:f4:8e:72:7f:70:79:23:56:e8:57:69:38:03:36:03:23:36:
77:5c:76:57:58:17:5f:b8:e7:86:45:1f:78:63:e1:33:c3:ae:
c9:eb:b6:a2:05:f0:fa:98:ac:52:4b:82:23:9b:29:5c:ed:e6:
34:de:1a:46:ce:28:ca:d6:1f:30:af:64:ee:a6:35:ed:ad:0e:
45:39:48:15:6e:95:a7:2a:da:45:20:0d:ca:d6:d6:08:73:48:
eb:51:87:94:81:17:f5:ae:af:ef:53:d3:d4:52:44:4f:b6:70:
28:a5:00:d1:77:6d:80:92:e7:38:47:c3:99:91:05:5a:d2:71:
db:29:07:2c:c1:d9:78:55:d3:79:fe:25:96:ce:e0:ea:51:3e:
dd:33:e2:cb:39:0e:eb:7e:64:e7:20:4d:62:f6:77:81:a1:31:
fb:4e:e7:ef:f3:61:15:16:55:8a:63:44:d9:25:c2:c1:12:5b:
00:00:bb:03:e8:44:97:d0:23:88:1a:ae:41:17:c4:52:2e:5e:
f2:47:a2:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHHRJAsvCcVB5qwumzX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmE1OGM2OTdhMTQ0OTk3NmIwZDExZDZmMTI2MDI1ZTE0
MDg5YzYwHhcNMjYwMzAxMTcwMDQ4WhcNMjYwMzAyMTcwMDQ4WjAzMTEwLwYDVQQD
EyhkMTc0NjU3YjhkNGZlMjIzZTUyNzMwMTBiNDIzNDkxOGI3ZWRlYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydKnYmj8IRcU3O3SxolVBEGFHyM6
rwDsVBaJEHS9CkOzfEjz+BMGg7i5L4f6QO90xx2d3xeW7kIe3oCj8JmGF7ieSTu9
X5GiPXnsTV6YSjbopbPqQZpt+QXJNf2j6KLql/zbprxAXsDACPS6NCIBgJqKD4QF
pXYnIRSF1tZdpOtQyYt237LoI3jJckOMQKvU3taf+Bj+3aOcpDpJsVrO5CK2CRY4
zieJsEPSCxZeYuTJXlkgyvwCPOGi6y74TWG1Tqicgpyur6XPy8I/bgCr7R6lCUAp
Z3sbOb98R4bwe/vMqkN+7cLQEBjtPhe7QaPnwSv4HddX7Hf54PraQKSvGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF0ZXuNT+Ij5ScwELQjSRi37exDMB8GA1UdIwQY
MBaAFKoqWMaXoUSZdrDRHW8SYCXhQInGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgt
YmU2MjJjMzEzMmRmLzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgtYmU2MjJjMzEzMmRm
LzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbE06TL6
r6ucuBMz6O1EUqYZ2H1/ZE4khxrN18Ex7VqXHh394ZW21MeyHLR354PFiMOvdPEV
BvSOcn9weSNW6FdpOAM2AyM2d1x2V1gXX7jnhkUfeGPhM8Ouyeu2ogXw+pisUkuC
I5spXO3mNN4aRs4oytYfMK9k7qY17a0ORTlIFW6VpyraRSANytbWCHNI61GHlIEX
9a6v71PT1FJET7ZwKKUA0XdtgJLnOEfDmZEFWtJx2ykHLMHZeFXTef4lls7g6lE+
3TPiyzkO635k5yBNYvZ3gaEx+07n7/NhFRZVimNE2SXCwRJbAAC7A+hEl9AjiBqu
QRfEUi5e8keirA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:38 2026 by rpki-client