Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: oHRhwVLQaTnSfpREJQJWpsv/nBWiXO4hmFonIxIkTI8=
Subject key identifier: AA:06:6D:88:DC:EC:41:48:7D:2B:F0:3D:E1:01:1E:29:88:E6:02:19
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019D99997B53BB1AD3FA150C21EA3DAA1979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0C0B
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: m/0suKyChHr7xezW4/6lu0zlwzBh7n9Q+8BTLowp3iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7b:53:bb:1a:d3:fa:15:0c:21:ea:3d:aa:19:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=aa066d88dcec41487d2bf03de1011e2988e60219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:32:8e:37:32:e9:6f:84:86:93:4a:ec:8a:
e0:95:10:97:99:c7:af:84:2f:a9:9b:34:bc:03:32:
74:b7:81:2d:79:e9:81:58:cc:5d:01:5d:2f:c9:f2:
e7:68:ac:6d:91:c5:5a:23:90:dd:37:f9:55:04:f6:
81:eb:68:d2:16:4d:c5:94:e4:49:5c:e6:a4:8c:c9:
ef:af:c1:c1:f2:c3:cc:93:a3:05:9e:fa:64:a0:d5:
4f:97:f5:cc:25:6b:cb:41:c0:78:6a:80:b0:d6:d0:
5a:6c:90:f9:05:ec:84:a9:86:6f:04:e0:6f:c2:9b:
27:c1:22:95:f1:4b:a5:37:d3:2f:81:99:68:d3:0a:
05:8d:8f:64:dc:ee:dc:ad:da:98:5f:5e:93:54:64:
65:5c:f8:39:6c:c8:00:20:a9:43:a6:cb:0a:de:4f:
1e:90:9b:3b:35:88:82:ab:ed:f0:3f:33:4f:b1:87:
ea:71:7c:9f:0e:c1:e4:e4:70:cb:61:8d:db:ff:3e:
7f:5f:d2:5c:4e:4c:84:d1:81:3a:a9:58:61:4e:3c:
a8:49:32:ce:7c:34:1c:96:63:61:da:ad:2e:e0:d2:
04:36:7c:71:03:4a:8b:12:2b:db:b1:07:d4:86:1d:
4d:0c:ec:1c:8f:48:af:7e:2f:84:44:30:b0:88:97:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:06:6D:88:DC:EC:41:48:7D:2B:F0:3D:E1:01:1E:29:88:E6:02:19
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:47:51:3f:0f:94:29:09:70:76:95:be:93:39:10:e7:a1:00:
32:f1:3f:35:82:ca:7b:a4:23:d9:f1:39:0e:d3:e5:a6:9d:5f:
9e:df:9f:76:e1:8c:a2:cb:c9:15:7c:fd:39:19:cc:79:0a:45:
17:ce:c1:b6:10:07:2e:d8:d1:ba:9c:24:15:58:f9:de:96:31:
03:b8:f4:f8:46:22:29:65:5f:f0:74:7b:1b:52:3b:e5:30:79:
13:54:45:c6:da:bd:c7:90:0b:c7:24:ed:bb:0e:7f:ce:3b:da:
5f:54:28:68:88:14:76:1a:6c:a6:43:04:17:5e:8c:10:8b:f1:
42:7a:03:c8:34:bf:34:d0:18:53:2d:7d:5c:f8:1c:e3:bb:de:
a9:8e:9f:d0:44:70:ad:05:e6:38:74:31:7e:fa:5b:f6:4e:98:
cd:24:83:8b:45:db:7a:0a:60:ce:3f:16:04:f6:77:d4:95:6a:
04:83:e0:34:b2:7e:33:55:65:8d:dd:72:7d:87:07:6a:06:77:
c4:ae:2b:a3:2c:95:28:57:f6:e3:8e:2e:6d:9d:03:6c:02:7e:
fc:8e:d3:78:c9:15:f6:d8:73:91:4f:21:9f:5f:50:83:03:81:
28:e1:43:54:f2:ea:ae:17:a5:4e:ac:1f:61:af:56:56:84:f3:
f9:a5:38:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmXtTuxrT+hUMIeo9qhl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy
YzA2ZjQwHhcNMjYwNDE3MDQwMTA1WhcNMjYwNDE4MDQwMTA1WjAzMTEwLwYDVQQD
EyhhYTA2NmQ4OGRjZWM0MTQ4N2QyYmYwM2RlMTAxMWUyOTg4ZTYwMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZEyjjcy6W+EhpNK7IrglRCXmcev
hC+pmzS8AzJ0t4EteemBWMxdAV0vyfLnaKxtkcVaI5DdN/lVBPaB62jSFk3FlORJ
XOakjMnvr8HB8sPMk6MFnvpkoNVPl/XMJWvLQcB4aoCw1tBabJD5BeyEqYZvBOBv
wpsnwSKV8UulN9MvgZlo0woFjY9k3O7crdqYX16TVGRlXPg5bMgAIKlDpssK3k8e
kJs7NYiCq+3wPzNPsYfqcXyfDsHk5HDLYY3b/z5/X9JcTkyE0YE6qVhhTjyoSTLO
fDQclmNh2q0u4NIENnxxA0qLEivbsQfUhh1NDOwcj0ivfi+ERDCwiJeKowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoGbYjc7EFIfSvwPeEBHimI5gIZMB8GA1UdIwQY
MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt
ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj
LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0dRPw+U
KQlwdpW+kzkQ56EAMvE/NYLKe6Qj2fE5DtPlpp1fnt+fduGMosvJFXz9ORnMeQpF
F87BthAHLtjRupwkFVj53pYxA7j0+EYiKWVf8HR7G1I75TB5E1RFxtq9x5ALxyTt
uw5/zjvaX1QoaIgUdhpspkMEF16MEIvxQnoDyDS/NNAYUy19XPgc47veqY6f0ERw
rQXmOHQxfvpb9k6YzSSDi0Xbegpgzj8WBPZ31JVqBIPgNLJ+M1Vljd1yfYcHagZ3
xK4royyVKFf2444ubZ0DbAJ+/I7TeMkV9thzkU8hn19QgwOBKOFDVPLqrhelTqwf
Ya9WVoTz+aU4ww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:45 2026 by rpki-client