Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: Si5P1GpCf662n0cErfNXLpRWimNuwv75u/wksV2vVak=
Subject key identifier: 64:82:18:CF:D9:55:24:A0:21:1E:6A:6E:1F:E9:29:7D:13:3F:64:B7
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019D9818D35123683298FBE2B7821142275B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0DA7
Signing time: Thu 16 Apr 2026 21:00:56 +0000
Manifest this update: Thu 16 Apr 2026 21:00:56 +0000
Manifest next update: Fri 17 Apr 2026 21:00:56 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: WBTC9MvXqWHz3z+GeGY8tKTouAK8ol0rEeAr3V/6G10=)
2: oSptT-0ci_ZGXafc3V2IqTfIf0s.roa (hash: 2ePOPwiRcBxV+mjrfIP+IE/Cxy8JzrOsuyP5kjxlWXA=)
3: uIHF2AQ7vp5Pre5Cme0Crtl9d0U.roa (hash: ubz0GfoUcPQy67DfcRHCrIrq2GX41LDxGEaEZ6xFYHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d3:51:23:68:32:98:fb:e2:b7:82:11:42:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Apr 16 21:00:56 2026 GMT
Not After : Apr 17 21:00:56 2026 GMT
Subject: CN=648218cfd95524a0211e6a6e1fe9297d133f64b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:f8:a8:15:23:06:84:8c:87:32:5f:8c:d3:
e7:1a:a7:e7:b8:21:3a:7a:88:34:2d:9a:38:a6:96:
9f:63:6c:bc:3a:c9:d5:3c:80:5c:ab:aa:f9:5c:22:
af:a6:5f:37:bb:c1:fe:b8:e9:31:71:11:7e:37:4e:
4c:fa:0f:ab:d1:c1:b4:69:69:e6:18:12:e2:20:39:
26:1d:39:65:4e:c6:35:a5:30:c7:2b:3d:16:17:99:
50:a2:a7:f4:67:41:42:41:8c:34:95:81:dd:ac:f7:
e2:e9:d2:1b:ed:cf:82:f0:c7:6b:f0:47:67:92:03:
79:5f:68:ce:b5:d3:55:95:1b:f8:27:97:aa:3c:1e:
27:14:b5:70:84:3c:2b:19:60:d2:1d:14:2a:98:ac:
3d:25:49:2a:8c:57:aa:5e:3f:06:4e:43:ba:f5:54:
53:15:04:76:6b:a9:95:01:55:99:14:c9:b7:af:f8:
8c:50:85:79:b1:f6:98:2c:ac:80:ec:51:62:39:01:
a3:53:97:32:c9:46:a4:c2:88:00:2c:a7:b4:72:2f:
9a:6a:9e:5a:a8:71:46:77:8b:c1:57:da:3c:b1:58:
a5:49:73:e8:21:e6:73:d7:00:96:0b:d3:f5:85:54:
3b:61:1f:34:c6:6d:ed:c9:60:58:d5:52:ce:54:96:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:82:18:CF:D9:55:24:A0:21:1E:6A:6E:1F:E9:29:7D:13:3F:64:B7
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:76:f5:bf:ba:4e:c8:b8:36:4e:fa:7b:b2:06:3a:99:f9:
35:46:87:9c:fe:e6:de:0e:12:e2:b1:48:8c:a7:11:ab:16:a3:
88:7c:18:13:5f:31:1e:15:2b:5c:d9:07:5e:f4:17:76:ff:c8:
6b:c5:dc:9c:94:98:bf:1b:76:0b:e5:18:38:7e:27:1f:df:8f:
90:1b:2f:83:da:f0:52:16:ce:ec:08:13:1f:6f:08:22:e0:34:
fe:b4:03:45:97:fd:5d:54:15:81:f7:ab:f3:32:55:7b:dc:bd:
ac:e4:f8:22:ec:30:2a:90:a1:ac:84:e0:69:c9:92:4a:d0:4c:
d6:52:cb:28:5b:07:c2:97:ab:60:2e:cb:65:1f:40:27:36:4b:
cf:6a:88:c4:49:1e:7c:8b:57:d7:6d:ca:56:16:8c:8d:eb:cc:
11:0e:e8:36:24:06:ea:9f:93:51:8d:05:2c:5f:04:79:91:b1:
f4:0d:ab:a7:01:39:7d:7b:66:b1:c8:e0:c9:bf:ef:2b:e3:12:
b0:19:23:ff:f6:a6:08:ef:00:42:78:6b:45:f3:cc:ad:a0:70:
10:12:0b:1c:a1:4d:38:15:a1:79:a8:6f:76:c8:ff:56:f1:43:
f5:48:b7:86:30:38:66:0a:91:8d:41:43:a2:82:7f:4d:f3:4a:
a7:74:b5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGNNRI2gymPvit4IRQidbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw
MTkwODQwHhcNMjYwNDE2MjEwMDU2WhcNMjYwNDE3MjEwMDU2WjAzMTEwLwYDVQQD
Eyg2NDgyMThjZmQ5NTUyNGEwMjExZTZhNmUxZmU5Mjk3ZDEzM2Y2NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKL4qBUjBoSMhzJfjNPnGqfnuCE6
eog0LZo4ppafY2y8OsnVPIBcq6r5XCKvpl83u8H+uOkxcRF+N05M+g+r0cG0aWnm
GBLiIDkmHTllTsY1pTDHKz0WF5lQoqf0Z0FCQYw0lYHdrPfi6dIb7c+C8Mdr8Edn
kgN5X2jOtdNVlRv4J5eqPB4nFLVwhDwrGWDSHRQqmKw9JUkqjFeqXj8GTkO69VRT
FQR2a6mVAVWZFMm3r/iMUIV5sfaYLKyA7FFiOQGjU5cyyUakwogALKe0ci+aap5a
qHFGd4vBV9o8sVilSXPoIeZz1wCWC9P1hVQ7YR80xm3tyWBY1VLOVJboVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSCGM/ZVSSgIR5qbh/pKX0TP2S3MB8GA1UdIwQY
MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt
ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw
LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9N29b+6
Tsi4Nk76e7IGOpn5NUaHnP7m3g4S4rFIjKcRqxajiHwYE18xHhUrXNkHXvQXdv/I
a8XcnJSYvxt2C+UYOH4nH9+PkBsvg9rwUhbO7AgTH28IIuA0/rQDRZf9XVQVgfer
8zJVe9y9rOT4IuwwKpChrITgacmSStBM1lLLKFsHwperYC7LZR9AJzZLz2qIxEke
fItX123KVhaMjevMEQ7oNiQG6p+TUY0FLF8EeZGx9A2rpwE5fXtmscjgyb/vK+MS
sBkj//amCO8AQnhrRfPMraBwEBILHKFNOBWheahvdsj/VvFD9Ui3hjA4ZgqRjUFD
ooJ/TfNKp3S1xQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:59 2026 by rpki-client