Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: rb6w331iWyFG//F9agKt3uVOzxZYRAEue/voif2ss98=
Subject key identifier: B4:9F:0A:F8:43:A2:1E:69:3C:76:59:01:28:FF:92:38:25:AD:19:C1
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 019CB0FF5CE8B3B84821196E778283BD122C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 034D
Signing time: Tue 03 Mar 2026 00:00:51 +0000
Manifest this update: Tue 03 Mar 2026 00:00:51 +0000
Manifest next update: Wed 04 Mar 2026 00:00:51 +0000
Files and hashes: 1: 1-w8Q-F1I4Vy41impjChS3fMIIAk.roa (hash: PVWxllXwJBpTCgl4ua9BNgJtEDKI8J3jMk9ds1kt2/o=)
2: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: H8f3P2WlSxaRkE6XQozGeoPbGqrR0mwnTjuwhaZg7KU=)
3: yb-12kSjdtmFiYKJ7b0iZYnL188.roa (hash: d+vCdRtSTB6tb47VKY7kwlb2RuHWojh//M171AF/m/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:5c:e8:b3:b8:48:21:19:6e:77:82:83:bd:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Mar 3 00:00:51 2026 GMT
Not After : Mar 4 00:00:51 2026 GMT
Subject: CN=b49f0af843a21e693c76590128ff923825ad19c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:8c:bd:00:24:c9:d2:70:bb:a1:e9:11:8d:
60:9e:09:17:f5:be:e4:3d:62:ff:eb:49:04:a2:bb:
c3:bf:1d:98:f8:5d:a8:52:3d:bf:e6:3e:cf:d7:ae:
26:03:fd:84:ec:32:a8:a2:cd:0a:a5:73:03:71:0c:
05:0b:b6:01:a2:d7:ba:be:fa:27:4a:93:d8:8a:47:
63:81:ab:a3:51:fb:59:a0:a3:76:d0:95:ab:ab:b4:
df:7b:2b:6f:ae:95:01:89:a4:78:65:03:66:6a:ce:
d2:ff:99:85:1b:48:b8:f8:33:ca:1c:b1:bb:fb:08:
ef:dc:b4:d0:35:c8:8c:16:2b:36:c2:f1:18:30:eb:
96:5b:d7:90:78:e5:81:aa:bd:e4:91:ad:63:79:96:
7f:33:bc:09:65:49:9e:78:54:00:a0:11:4b:01:63:
28:19:4d:cd:85:b0:32:29:83:d7:00:4b:8d:5c:ca:
fe:fd:e4:43:3e:c8:a4:1d:a4:20:7b:46:00:fa:af:
85:ea:73:e7:15:88:de:48:75:fb:0c:58:8b:6b:f5:
67:0a:fa:3c:e9:46:72:bf:77:0e:94:25:a1:b3:df:
04:4e:62:0a:2d:52:bf:93:7b:9c:f2:52:3e:6d:58:
27:d3:05:44:7b:b3:47:cf:bc:c9:37:29:16:2d:ea:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:0A:F8:43:A2:1E:69:3C:76:59:01:28:FF:92:38:25:AD:19:C1
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7a:ad:2f:ac:03:fd:85:a0:fd:a9:9a:c5:ec:80:f2:da:e4:
9c:34:18:ff:85:30:cb:47:ad:70:80:6c:11:1e:10:cf:7d:ed:
af:ff:c7:0a:3b:76:b8:bc:4d:0d:f5:78:77:f7:6e:a3:30:20:
e3:25:43:c8:73:e6:a0:80:86:3b:5e:a3:6a:7a:d3:1a:d7:f0:
43:41:ad:94:8d:aa:59:48:21:1c:c5:88:2a:3c:c3:89:39:5c:
fc:6d:73:fd:21:39:32:ce:39:e7:6b:9b:49:5b:90:ed:a1:8f:
ba:1d:82:ac:80:c2:ef:b7:3b:b2:33:7d:6e:0d:75:e3:d9:cc:
d6:12:2f:aa:59:41:2f:25:ec:59:59:91:07:03:1c:e3:12:8e:
e8:26:96:7b:bc:14:71:d1:a2:dd:bb:14:74:c7:ae:4e:f2:f2:
cf:35:5d:b7:5c:1d:36:e5:23:3b:b5:50:23:7e:51:46:15:53:
d5:3b:1e:94:f1:dd:8a:23:e5:0c:42:5e:9d:6e:df:22:77:c6:
92:5c:d8:d8:5d:18:02:80:77:16:aa:c7:cc:e5:46:1a:66:58:
3f:ba:44:1e:b7:00:3f:d7:f0:24:d1:3c:56:b1:ac:f8:5c:16:
a0:c8:3f:69:7c:aa:14:86:58:51:06:99:1f:32:d6:ad:23:49:
52:8a:30:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyw/1zos7hIIRlud4KDvRIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTNmMWI4ZTI5NjVmZDAzODc4MTBhMmY2MmNmNzE0ODE2
ZDE0OTcwHhcNMjYwMzAzMDAwMDUxWhcNMjYwMzA0MDAwMDUxWjAzMTEwLwYDVQQD
EyhiNDlmMGFmODQzYTIxZTY5M2M3NjU5MDEyOGZmOTIzODI1YWQxOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxleMvQAkydJwu6HpEY1gngkX9b7k
PWL/60kEorvDvx2Y+F2oUj2/5j7P164mA/2E7DKoos0KpXMDcQwFC7YBote6vvon
SpPYikdjgaujUftZoKN20JWrq7TfeytvrpUBiaR4ZQNmas7S/5mFG0i4+DPKHLG7
+wjv3LTQNciMFis2wvEYMOuWW9eQeOWBqr3kka1jeZZ/M7wJZUmeeFQAoBFLAWMo
GU3NhbAyKYPXAEuNXMr+/eRDPsikHaQge0YA+q+F6nPnFYjeSHX7DFiLa/VnCvo8
6UZyv3cOlCWhs98ETmIKLVK/k3uc8lI+bVgn0wVEe7NHz7zJNykWLepQjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSfCvhDoh5pPHZZASj/kjglrRnBMB8GA1UdIwQY
MBaAFKlT8bjill/QOHgQovYs9xSBbRSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQt
YWU4NjMzYzE3Yjg3LzEvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQtYWU4NjMzYzE3Yjg3
LzEvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknqtL6wD
/YWg/amaxeyA8trknDQY/4Uwy0etcIBsER4Qz33tr//HCjt2uLxNDfV4d/duozAg
4yVDyHPmoICGO16janrTGtfwQ0GtlI2qWUghHMWIKjzDiTlc/G1z/SE5Ms4552ub
SVuQ7aGPuh2CrIDC77c7sjN9bg1149nM1hIvqllBLyXsWVmRBwMc4xKO6CaWe7wU
cdGi3bsUdMeuTvLyzzVdt1wdNuUjO7VQI35RRhVT1TselPHdiiPlDEJenW7fInfG
klzY2F0YAoB3FqrHzOVGGmZYP7pEHrcAP9fwJNE8VrGs+FwWoMg/aXyqFIZYUQaZ
HzLWrSNJUoowLA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 08:12:44 2026 by rpki-client