Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: XJWi2zc5hp8CH/cHVNOwUWaPw2T8p3NTEOjO4qBkT6c=
Subject key identifier: 38:A9:B5:39:DA:B9:71:E4:6C:04:15:ED:1D:DE:A2:31:C6:92:6F:6C
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019D99997F74138266DC79BC66EA743B8076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 16F7
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: qW12XIPi+9bW3Jof2SBn2u86ApDFlYw91zmV6WZM8eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7f:74:13:82:66:dc:79:bc:66:ea:74:3b:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=38a9b539dab971e46c0415ed1ddea231c6926f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:04:2b:94:a9:f3:3e:a1:e8:bf:04:7a:03:
3d:8b:8f:5a:f4:d4:09:38:39:3a:d4:84:5f:7c:2b:
cd:c1:b9:b9:39:f8:18:0f:d7:89:a7:24:58:97:2f:
ad:74:f7:a9:3f:94:30:a8:f3:5b:93:85:61:02:08:
1a:04:48:7a:1d:cc:55:5d:7e:b8:dd:f3:79:2f:2d:
8e:2a:a9:be:eb:57:d8:89:6e:81:2d:19:88:26:5b:
f3:e8:56:7c:8e:01:81:5a:8c:9c:2d:a2:b1:76:48:
6e:f3:5a:75:b0:84:9a:13:8f:cc:fa:d8:6b:33:9b:
39:de:09:fc:03:8e:5d:39:58:62:8e:90:2d:33:9c:
1e:3b:71:a0:97:5c:e7:05:e7:f9:1e:7a:a5:55:4c:
26:b2:06:bb:4e:6a:6c:5d:84:c0:1a:e6:57:03:c6:
b6:d4:a6:66:40:da:28:81:84:74:ff:69:ca:2f:62:
d4:4e:04:c8:7c:fd:47:36:05:81:5d:fb:89:8a:98:
9c:e5:53:09:9f:d1:09:35:78:65:2f:0b:7b:58:4f:
eb:d4:6e:16:2d:b6:75:76:cf:47:53:93:4f:92:cb:
bb:36:f5:c1:86:ff:ef:ea:1a:81:b5:9d:39:00:b4:
39:0a:f3:35:56:f6:72:59:d9:6f:1a:4e:34:22:77:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A9:B5:39:DA:B9:71:E4:6C:04:15:ED:1D:DE:A2:31:C6:92:6F:6C
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8c:da:e7:de:51:00:b6:e5:07:fc:73:91:1e:6d:e7:72:cd:
4e:ca:2e:d8:33:7f:f2:1b:bc:bd:e7:44:1c:51:1e:fe:fa:83:
76:d2:2e:b2:d1:5e:90:98:a8:87:29:7a:d3:b1:5b:59:d0:76:
7f:bf:a8:8f:63:dd:5e:d9:97:1a:1e:ba:36:a7:52:c8:a0:a6:
4a:8e:b1:e3:ea:29:60:0b:d2:e3:e3:88:2f:8c:3d:4d:13:2b:
29:dc:38:bb:ba:59:1d:97:4f:d3:3e:81:12:4f:d2:97:5e:bd:
c8:ec:5b:ae:ed:8e:91:19:57:cc:74:5f:65:98:7f:25:5a:6f:
d0:43:97:7c:71:79:24:14:75:70:44:04:64:1e:bb:c5:ef:29:
3a:bb:90:bf:68:80:89:57:ec:52:33:ed:ce:9f:15:a4:f6:10:
cb:64:9b:eb:d8:9f:f0:37:67:8f:6a:a1:ab:f3:b8:49:aa:03:
aa:c7:61:e9:33:03:30:4b:1e:04:19:73:42:a7:ec:97:ee:3b:
86:3a:81:f5:1e:34:2f:e9:c6:f6:50:40:a8:6e:df:c8:40:92:
c9:bb:33:39:9e:36:09:cc:b1:aa:b5:00:ff:a2:a8:93:b6:cb:
92:13:0a:c1:c2:aa:f0:f5:ae:28:7a:3c:5a:62:6e:98:10:7b:
5d:1e:f0:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmX90E4Jm3Hm8Zup0O4B2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTc1ODAyZTdlZmI4NjUzZTNhZjU5Y2JmMWJjMDY1Mzhi
Y2E2NzEwHhcNMjYwNDE3MDQwMTA2WhcNMjYwNDE4MDQwMTA2WjAzMTEwLwYDVQQD
EygzOGE5YjUzOWRhYjk3MWU0NmMwNDE1ZWQxZGRlYTIzMWM2OTI2ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzQEK5Sp8z6h6L8EegM9i49a9NQJ
ODk61IRffCvNwbm5OfgYD9eJpyRYly+tdPepP5QwqPNbk4VhAggaBEh6HcxVXX64
3fN5Ly2OKqm+61fYiW6BLRmIJlvz6FZ8jgGBWoycLaKxdkhu81p1sISaE4/M+thr
M5s53gn8A45dOVhijpAtM5weO3Ggl1znBef5HnqlVUwmsga7TmpsXYTAGuZXA8a2
1KZmQNoogYR0/2nKL2LUTgTIfP1HNgWBXfuJipic5VMJn9EJNXhlLwt7WE/r1G4W
LbZ1ds9HU5NPksu7NvXBhv/v6hqBtZ05ALQ5CvM1VvZyWdlvGk40InecAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiptTnauXHkbAQV7R3eojHGkm9sMB8GA1UdIwQY
MBaAFKjnWALn77hlPjr1nL8bwGU4vKZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjkt
NDExZjU4MzdmZWZhLzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjktNDExZjU4MzdmZWZh
LzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYza595R
ALblB/xzkR5t53LNTsou2DN/8hu8vedEHFEe/vqDdtIustFekJiohyl607FbWdB2
f7+oj2PdXtmXGh66NqdSyKCmSo6x4+opYAvS4+OIL4w9TRMrKdw4u7pZHZdP0z6B
Ek/Sl169yOxbru2OkRlXzHRfZZh/JVpv0EOXfHF5JBR1cEQEZB67xe8pOruQv2iA
iVfsUjPtzp8VpPYQy2Sb69if8Ddnj2qhq/O4SaoDqsdh6TMDMEseBBlzQqfsl+47
hjqB9R40L+nG9lBAqG7fyECSybszOZ42CcyxqrUA/6Kok7bLkhMKwcKq8PWuKHo8
WmJumBB7XR7wRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:57 2026 by rpki-client