Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: Tj+TwAi2nTvGa00l802dxc1S/eKxNrOz0UBB0TNTjxI=
Subject key identifier: A4:76:16:AA:4A:69:9F:98:CD:05:09:5C:FA:B9:35:AC:D9:C3:5F:36
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019CAC7DB3B89338FEB0B3D56FADB3C5B235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 1526
Signing time: Mon 02 Mar 2026 03:00:44 +0000
Manifest this update: Mon 02 Mar 2026 03:00:44 +0000
Manifest next update: Tue 03 Mar 2026 03:00:44 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: 5STWnRtfjFTTW7xh11f3j6GqMnmI9LCy92rNzM9XkgI=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b3:b8:93:38:fe:b0:b3:d5:6f:ad:b3:c5:b2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Mar 2 03:00:44 2026 GMT
Not After : Mar 3 03:00:44 2026 GMT
Subject: CN=a47616aa4a699f98cd05095cfab935acd9c35f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e8:15:bb:5e:31:46:02:9a:5c:16:11:a8:87:
ae:58:85:c2:02:0a:b3:98:58:4e:b9:21:ab:88:91:
3a:75:af:8f:22:41:d2:b1:80:39:cf:2a:b4:6c:e1:
41:4b:ce:85:81:9d:d5:c7:fd:d8:ae:2f:ad:93:9f:
a2:85:8d:b2:82:1a:a1:25:4f:10:38:0d:0a:1d:96:
fa:a5:b5:e6:36:5e:e7:eb:dd:6c:89:c6:a3:44:1a:
9c:50:cc:c4:ce:8e:8c:10:02:9f:43:21:97:d0:22:
3a:58:f6:d8:89:ca:22:ed:25:4c:2b:6b:1a:aa:7c:
50:f3:36:cd:27:5d:e1:9a:ca:f0:23:d3:9a:a5:d9:
de:e0:af:de:48:1c:a9:fc:cb:a9:17:39:e8:c0:76:
63:6d:6c:59:b7:dc:c4:ca:08:81:97:50:65:e6:e8:
fb:e6:40:48:34:ae:3a:c1:20:d0:d3:5c:53:76:1d:
fa:2e:10:cf:56:39:2d:e7:c7:db:a9:d7:4e:fb:f2:
df:d1:b7:b7:15:10:2b:52:19:c2:ba:5c:41:d9:1f:
c2:a1:14:67:aa:dc:17:59:9f:d9:4b:1c:0b:28:17:
55:73:c6:3e:07:b0:ca:34:a2:ea:e2:46:ca:04:df:
9a:72:5f:72:30:f8:9b:8c:69:c3:8f:8f:89:2e:e2:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:16:AA:4A:69:9F:98:CD:05:09:5C:FA:B9:35:AC:D9:C3:5F:36
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:dc:9c:9d:69:5d:94:2b:a7:3a:c9:71:e5:f3:b6:87:82:
56:c9:49:0b:bb:dc:4f:0f:f9:2e:d1:7a:2f:59:19:81:e9:cb:
f5:cf:51:71:a3:7d:8d:77:7b:92:d2:82:34:87:b5:73:2c:3c:
3c:9b:71:7f:eb:70:3a:ef:7b:dd:57:01:9b:c7:25:ff:38:09:
14:c6:bb:63:01:75:e8:39:07:4d:43:ca:3c:81:3d:e3:c4:06:
3f:44:1a:54:db:a2:a9:8a:da:6e:82:57:61:f6:96:24:37:29:
b5:73:1d:91:ae:ac:e2:24:aa:b6:c8:6d:ac:53:0b:83:13:6e:
b0:17:45:d7:f6:1e:07:38:30:ef:12:7b:e7:37:44:1d:ae:2e:
61:3e:2a:61:ff:36:24:8c:de:12:f5:4c:f2:89:8c:74:90:87:
73:9a:44:0b:49:05:65:24:49:06:72:a0:0b:2e:bc:6d:ac:af:
0c:04:be:49:64:b0:b4:cd:07:5a:c1:8e:81:9e:c1:fd:3c:88:
fb:6e:f1:7d:ff:82:33:20:29:f5:4c:6d:e8:6b:f5:47:04:a7:
7a:2f:f8:22:dd:51:53:75:2f:e6:67:d5:ef:fd:20:f9:97:58:
a8:f9:a2:37:ce:4f:e5:99:a2:15:58:a0:ad:59:03:c7:0d:ed:
f8:bf:94:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfbO4kzj+sLPVb62zxbI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi
MWIwNjYwHhcNMjYwMzAyMDMwMDQ0WhcNMjYwMzAzMDMwMDQ0WjAzMTEwLwYDVQQD
EyhhNDc2MTZhYTRhNjk5Zjk4Y2QwNTA5NWNmYWI5MzVhY2Q5YzM1ZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6egVu14xRgKaXBYRqIeuWIXCAgqz
mFhOuSGriJE6da+PIkHSsYA5zyq0bOFBS86FgZ3Vx/3Yri+tk5+ihY2yghqhJU8Q
OA0KHZb6pbXmNl7n691sicajRBqcUMzEzo6MEAKfQyGX0CI6WPbYicoi7SVMK2sa
qnxQ8zbNJ13hmsrwI9Oapdne4K/eSByp/MupFznowHZjbWxZt9zEygiBl1Bl5uj7
5kBINK46wSDQ01xTdh36LhDPVjkt58fbqddO+/Lf0be3FRArUhnCulxB2R/CoRRn
qtwXWZ/ZSxwLKBdVc8Y+B7DKNKLq4kbKBN+acl9yMPibjGnDj4+JLuI07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR2FqpKaZ+YzQUJXPq5NazZw182MB8GA1UdIwQY
MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt
ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj
LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh/cnJ1p
XZQrpzrJceXztoeCVslJC7vcTw/5LtF6L1kZgenL9c9RcaN9jXd7ktKCNIe1cyw8
PJtxf+twOu973VcBm8cl/zgJFMa7YwF16DkHTUPKPIE948QGP0QaVNuiqYraboJX
YfaWJDcptXMdka6s4iSqtshtrFMLgxNusBdF1/YeBzgw7xJ75zdEHa4uYT4qYf82
JIzeEvVM8omMdJCHc5pEC0kFZSRJBnKgCy68bayvDAS+SWSwtM0HWsGOgZ7B/TyI
+27xff+CMyAp9Uxt6Gv1RwSnei/4It1RU3Uv5mfV7/0g+ZdYqPmiN85P5ZmiFVig
rVkDxw3t+L+UoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:17 2026 by rpki-client