Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: +byU7fLI6E1teNLiCpmhP4b/eFLcCNlqU7E8IhYE+Y4=
Subject key identifier: AE:C4:6F:7C:5D:44:E4:5D:7C:37:F1:8E:9C:70:36:F1:96:89:6C:F7
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019D9C2CF0FBD1426233471746496A5A7094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 02C5
Signing time: Fri 17 Apr 2026 16:01:23 +0000
Manifest this update: Fri 17 Apr 2026 16:01:23 +0000
Manifest next update: Sat 18 Apr 2026 16:01:23 +0000
Files and hashes: 1: TvCeC-CTMvUOvfqvZDepdi4lqnQ.roa (hash: ESVtJ3kouBpjTr4WqJWzhzotaZoW4Cj/KB3SLHg/1MA=)
2: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: 29xkFjpY0/wkYOPgccgTT/2HDazt0ahJISTqrmRX6Uo=)
3: yQ4lwVZKtZ37ncDrw-J5ETPGiug.roa (hash: YOCERM8UiZIP0yKzgGY8Yras8dDVp4zqydgV9vmHZ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:f0:fb:d1:42:62:33:47:17:46:49:6a:5a:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Apr 17 16:01:23 2026 GMT
Not After : Apr 18 16:01:23 2026 GMT
Subject: CN=aec46f7c5d44e45d7c37f18e9c7036f196896cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:76:ac:0f:6c:3d:0a:48:9a:89:cf:0c:7e:35:
61:1a:b6:6f:05:79:45:58:82:20:b0:d4:ad:fa:62:
5f:bb:61:8b:fc:05:35:74:31:15:0f:4d:90:f4:96:
1c:e7:5e:14:a6:e9:c2:8c:38:25:29:14:e2:2a:02:
04:31:81:b4:d6:f9:96:ae:81:bf:4e:8e:c5:71:5e:
ff:20:8f:77:d4:e1:21:69:47:ce:44:88:63:ba:8f:
0f:4a:98:c2:b2:50:60:b7:ea:61:0a:50:92:7a:79:
7e:8b:af:dd:a9:51:fc:43:10:60:b7:16:fd:29:da:
72:65:4b:b1:a0:90:2d:d0:2c:ba:fb:9b:50:c1:ce:
36:d8:fc:e8:f9:8c:2d:4b:05:d0:c1:21:ba:e9:6f:
c2:2f:ed:43:c2:5c:c2:d4:66:ae:fe:2d:06:c9:93:
ab:65:ee:2c:ef:44:b8:0f:9f:10:e4:56:b7:37:4f:
42:a4:71:9c:1a:39:be:9b:16:2a:1e:b1:e8:2e:70:
87:b8:2a:c1:16:88:57:93:4c:da:00:5d:3f:d7:37:
c8:3f:11:9c:29:31:0e:08:73:2c:24:79:67:be:5d:
99:e4:32:8a:a1:ab:fd:9a:02:68:14:e1:5d:d7:f5:
c2:5e:9c:73:5c:e5:6d:b9:63:34:9f:63:f2:c3:fe:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:6F:7C:5D:44:E4:5D:7C:37:F1:8E:9C:70:36:F1:96:89:6C:F7
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:5f:d9:7a:da:1d:65:e0:8a:94:16:5a:10:b5:19:e1:a1:
c2:4f:1f:9f:0c:3c:b5:a9:a0:df:06:e4:12:50:8d:5a:a6:68:
26:65:03:17:38:56:c5:65:93:8f:19:2e:73:ba:11:b9:f5:f0:
32:de:51:85:47:5c:17:a5:e8:e0:aa:11:b6:17:55:82:f7:a1:
69:a5:5b:84:18:e3:b5:d0:58:85:ef:ce:13:c8:15:66:f6:6a:
d3:a5:eb:66:56:c3:ee:f6:24:04:9d:ef:f9:11:38:ff:f6:f6:
dc:3f:0a:ec:c7:99:d5:22:2a:ff:80:76:7f:10:dd:ea:1e:6c:
f0:d9:3b:85:8b:b7:bf:a8:e7:4c:b1:c3:e9:91:d6:a3:41:90:
69:e8:f7:8d:09:40:55:13:f8:9f:67:3c:39:04:41:6d:b6:58:
5c:30:d0:ec:b1:85:b6:00:0c:fa:fe:f7:b5:c6:21:e2:89:d5:
fc:cc:74:ec:16:0a:08:f4:37:ca:47:7e:c0:4f:a9:b9:9e:a6:
bc:ae:97:8e:4e:1d:d8:c9:96:63:8f:b5:37:3f:7b:9c:ff:20:
b9:6c:86:ce:be:f2:b9:17:89:04:6b:f8:12:fa:f4:ea:58:bd:
d0:73:38:49:55:38:30:5b:dd:db:66:7e:cd:68:dd:e2:43:99:
46:01:b2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLPD70UJiM0cXRklqWnCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc4MmNkN2JiOTIyY2E0YmM2ZTgwZTc4NTdmNDkyMmY1
YzIzYzQwHhcNMjYwNDE3MTYwMTIzWhcNMjYwNDE4MTYwMTIzWjAzMTEwLwYDVQQD
EyhhZWM0NmY3YzVkNDRlNDVkN2MzN2YxOGU5YzcwMzZmMTk2ODk2Y2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33asD2w9Ckiaic8MfjVhGrZvBXlF
WIIgsNSt+mJfu2GL/AU1dDEVD02Q9JYc514UpunCjDglKRTiKgIEMYG01vmWroG/
To7FcV7/II931OEhaUfORIhjuo8PSpjCslBgt+phClCSenl+i6/dqVH8QxBgtxb9
KdpyZUuxoJAt0Cy6+5tQwc422Pzo+YwtSwXQwSG66W/CL+1DwlzC1Gau/i0GyZOr
Ze4s70S4D58Q5Fa3N09CpHGcGjm+mxYqHrHoLnCHuCrBFohXk0zaAF0/1zfIPxGc
KTEOCHMsJHlnvl2Z5DKKoav9mgJoFOFd1/XCXpxzXOVtuWM0n2Pyw/7FsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7Eb3xdRORdfDfxjpxwNvGWiWz3MB8GA1UdIwQY
MBaAFKpngs17uSLKS8boDnhX9JIvXCPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYt
YjQzMGU4ZGU3NzQ3LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYtYjQzMGU4ZGU3NzQ3
LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcj5f2Xra
HWXgipQWWhC1GeGhwk8fnww8tamg3wbkElCNWqZoJmUDFzhWxWWTjxkuc7oRufXw
Mt5RhUdcF6Xo4KoRthdVgvehaaVbhBjjtdBYhe/OE8gVZvZq06XrZlbD7vYkBJ3v
+RE4//b23D8K7MeZ1SIq/4B2fxDd6h5s8Nk7hYu3v6jnTLHD6ZHWo0GQaej3jQlA
VRP4n2c8OQRBbbZYXDDQ7LGFtgAM+v73tcYh4onV/Mx07BYKCPQ3ykd+wE+puZ6m
vK6Xjk4d2MmWY4+1Nz97nP8guWyGzr7yuReJBGv4Evr06li90HM4SVU4MFvd22Z+
zWjd4kOZRgGy/A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:44 2026 by rpki-client