Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: jCp3GAShMu1xG3+gvDeWZXSbvfUlzZvoFapj9bY5muY=
Subject key identifier: 64:AC:6B:B4:CD:7D:6D:D1:5E:40:DC:55:37:CE:01:41:BF:B9:36:20
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 019D99D0B0E4899B57F6CADFA64FD09287FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 1388
Signing time: Fri 17 Apr 2026 05:01:23 +0000
Manifest this update: Fri 17 Apr 2026 05:01:23 +0000
Manifest next update: Sat 18 Apr 2026 05:01:23 +0000
Files and hashes: 1: UXdNeJ_2Ddl0fTsV4WKpWbphuQI.roa (hash: 7YnRWBVkQ2KwpLyECOgcBh/stkchlYEprARWfyy/l+Q=)
2: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: EUDgAONZRdyp3ZeeT19967B92SXoKWitYzSPMIma77E=)
3: w6aExTmK4M1JcDUj2sMwX4mRvWU.roa (hash: tK7qE6NFsnQxjHhUh4pWia2W9oNUWtIhK9S5aCgGRFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b0:e4:89:9b:57:f6:ca:df:a6:4f:d0:92:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Apr 17 05:01:23 2026 GMT
Not After : Apr 18 05:01:23 2026 GMT
Subject: CN=64ac6bb4cd7d6dd15e40dc5537ce0141bfb93620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:63:93:af:5d:7c:a3:23:25:f0:09:64:fe:
f3:46:34:4a:f6:1d:1e:1b:db:ca:dc:80:c1:b1:05:
97:a3:06:09:6b:29:fb:e9:55:1b:c1:dd:b4:40:d3:
bd:01:ae:1b:4d:6f:7d:00:a4:11:22:59:c7:09:37:
98:3b:74:a5:c7:c3:49:ba:31:ad:97:98:31:8c:07:
b7:bd:d2:e4:1f:4d:92:b5:8f:38:e2:bd:ed:f6:36:
b9:d5:b6:4f:95:af:d9:0f:0a:df:d3:9a:80:86:cf:
bb:5a:bb:f7:ef:55:07:5b:0e:05:47:34:b5:dc:d3:
9a:4d:d3:e3:d0:3e:27:b4:2b:a1:51:7c:11:c7:38:
d8:06:1e:3a:60:56:8d:90:41:dc:69:a2:43:d3:44:
d1:dd:96:23:55:61:d7:f9:29:04:3b:be:9f:0a:8e:
a9:ae:56:21:c1:36:66:86:92:d3:88:48:32:c8:72:
68:02:9f:60:97:d0:bf:e0:9a:0e:69:fc:42:60:96:
91:25:c8:fb:1b:37:e5:70:b0:31:9f:ea:0b:48:61:
40:b7:f9:9f:27:02:1f:7a:13:26:90:35:54:e2:df:
06:b8:41:74:c2:cb:98:89:47:ce:3f:7b:23:d6:6b:
36:8e:13:54:f7:e3:01:1f:e4:f6:da:ad:bd:43:2f:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:6B:B4:CD:7D:6D:D1:5E:40:DC:55:37:CE:01:41:BF:B9:36:20
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:7b:2a:f0:6a:c7:38:14:10:64:20:55:ff:73:78:5c:1b:
99:f5:0f:29:d0:04:81:06:10:e0:8c:e7:2a:a8:23:c7:00:82:
96:8b:ee:a6:d3:80:04:d9:43:a0:c9:70:4c:dc:56:1f:2f:5e:
6f:da:b6:c5:f1:6d:98:ec:b9:db:61:cc:1b:f7:98:eb:d9:fc:
f2:8c:a5:38:75:51:95:f0:58:66:41:58:db:ab:de:4b:af:e1:
b4:36:29:a2:3d:2f:55:33:cb:85:0d:52:11:a6:77:81:86:93:
6a:83:b6:4f:09:04:2a:a7:4b:60:87:6d:20:9a:81:62:52:c6:
65:d6:16:72:ff:08:a7:b2:8f:45:79:d8:da:57:cf:7b:14:5b:
f8:5a:c6:77:75:9d:10:fe:15:74:a0:33:dc:26:cf:9e:12:5f:
cc:66:d9:96:70:59:11:58:ef:d2:1e:12:b9:8f:12:af:5d:55:
a2:c2:4a:9a:36:e3:25:fd:ad:7f:59:b1:55:f2:25:b4:c5:51:
56:80:14:89:c6:d8:fc:4b:f7:d7:fb:73:42:c1:87:55:dd:87:
1a:0b:ca:1b:4c:3a:11:39:31:16:a6:15:36:79:cd:45:dd:37:
41:2d:49:37:66:4c:a7:1a:9c:25:21:20:92:8a:02:82:f6:b5:
e2:12:ca:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0LDkiZtX9srfpk/Qkof/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzA5MjFkMjhjNzhlZGU4MTg0MmY3MTJlNmNmNzJiZGU1
YTYwODAwHhcNMjYwNDE3MDUwMTIzWhcNMjYwNDE4MDUwMTIzWjAzMTEwLwYDVQQD
Eyg2NGFjNmJiNGNkN2Q2ZGQxNWU0MGRjNTUzN2NlMDE0MWJmYjkzNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO1jk69dfKMjJfAJZP7zRjRK9h0e
G9vK3IDBsQWXowYJayn76VUbwd20QNO9Aa4bTW99AKQRIlnHCTeYO3Slx8NJujGt
l5gxjAe3vdLkH02StY844r3t9ja51bZPla/ZDwrf05qAhs+7Wrv371UHWw4FRzS1
3NOaTdPj0D4ntCuhUXwRxzjYBh46YFaNkEHcaaJD00TR3ZYjVWHX+SkEO76fCo6p
rlYhwTZmhpLTiEgyyHJoAp9gl9C/4JoOafxCYJaRJcj7GzflcLAxn+oLSGFAt/mf
JwIfehMmkDVU4t8GuEF0wsuYiUfOP3sj1ms2jhNU9+MBH+T22q29Qy+rfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSsa7TNfW3RXkDcVTfOAUG/uTYgMB8GA1UdIwQY
MBaAFKswkh0ox47egYQvcS5s9yveWmCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2Et
MzU0Mzk5NzI0YjFlLzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2EtMzU0Mzk5NzI0YjFl
LzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCh7KvBq
xzgUEGQgVf9zeFwbmfUPKdAEgQYQ4IznKqgjxwCClovuptOABNlDoMlwTNxWHy9e
b9q2xfFtmOy522HMG/eY69n88oylOHVRlfBYZkFY26veS6/htDYpoj0vVTPLhQ1S
EaZ3gYaTaoO2TwkEKqdLYIdtIJqBYlLGZdYWcv8Ip7KPRXnY2lfPexRb+FrGd3Wd
EP4VdKAz3CbPnhJfzGbZlnBZEVjv0h4SuY8Sr11VosJKmjbjJf2tf1mxVfIltMVR
VoAUicbY/Ev31/tzQsGHVd2HGgvKG0w6ETkxFqYVNnnNRd03QS1JN2ZMpxqcJSEg
kooCgva14hLK7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:20 2026 by rpki-client