
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: PlUKmS9ZpzJm5NuEGHTSfE6Oj8t6d9NGv7SuMvejeBY=
Subject key identifier: 4E:4C:4C:5A:56:3E:C2:9F:E4:16:94:F6:BA:5F:6C:4E:FB:D3:FA:88
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 019D98BD8858F23B8E350BDFF0631DFA7C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 1129
Signing time: Fri 17 Apr 2026 00:00:51 +0000
Manifest this update: Fri 17 Apr 2026 00:00:51 +0000
Manifest next update: Sat 18 Apr 2026 00:00:51 +0000
Files and hashes: 1: a8dxxiPCuafVW1pqgQGmv3vqh6s.roa (hash: rc0rV/NjxsPC/BhNPsXHclt7GZGOVjNNBw3HxehbP5Y=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: yQwTfq+gKw/xcAW+sb62CIG3Gi/I7S5oQOM9j6zO3vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:88:58:f2:3b:8e:35:0b:df:f0:63:1d:fa:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Apr 17 00:00:51 2026 GMT
Not After : Apr 18 00:00:51 2026 GMT
Subject: CN=4e4c4c5a563ec29fe41694f6ba5f6c4efbd3fa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:45:f6:4b:47:2d:4b:b2:92:d6:bf:54:59:
84:bf:39:e4:2f:95:b3:20:90:5b:d2:ca:01:7c:de:
4e:de:02:12:88:50:de:47:9a:2b:b0:77:35:6f:a1:
4e:1e:9e:b4:a2:d5:e6:24:6d:06:d4:50:55:6d:79:
bf:81:3d:aa:61:27:05:a3:16:97:e4:06:32:89:4d:
fc:2e:46:5e:f5:51:99:98:01:2f:80:75:27:46:0d:
ba:ba:fc:42:2a:e8:c6:b0:ee:f3:67:41:87:80:12:
a0:17:80:56:3a:9a:33:4a:d3:a3:1b:24:04:d9:d4:
25:e3:84:97:04:3b:d3:11:91:e9:21:e5:3f:ce:5f:
80:f0:0b:00:f1:41:6d:4e:39:25:f1:86:a3:c8:8f:
19:44:e8:be:64:c1:19:b7:05:1e:93:a9:32:56:d7:
f0:bf:fe:76:87:19:b7:7e:23:58:9f:1a:1a:e5:82:
f1:60:b3:86:e1:34:87:b3:10:58:33:05:fa:59:3f:
0c:6d:85:6b:29:e7:67:4e:f6:1b:04:2e:f8:e9:a4:
54:70:02:a3:4e:a2:f1:8d:61:8b:2e:90:68:71:fc:
31:21:06:c4:9f:92:0c:ad:d6:a2:68:c7:59:c9:06:
f2:f8:20:33:33:2b:f9:c0:f1:8e:c0:33:26:d3:ba:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4C:4C:5A:56:3E:C2:9F:E4:16:94:F6:BA:5F:6C:4E:FB:D3:FA:88
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:f4:d7:02:bb:38:98:e3:46:de:aa:da:b2:a6:70:cb:62:
d5:c6:85:18:f4:b0:08:54:a8:1b:d6:e9:ea:d8:bd:29:c0:d2:
ff:84:64:4d:06:b0:6c:38:bd:0d:cd:43:dd:b0:85:55:9c:94:
32:66:2d:8b:8a:c7:93:70:28:5e:4c:80:e3:aa:1d:98:f2:a9:
a5:8f:d9:78:c7:5f:13:8c:8c:4a:48:58:36:e5:9f:b8:25:91:
b5:46:32:ae:06:e2:6e:04:be:98:26:e6:25:80:9a:af:f0:4a:
90:65:c6:9c:dc:41:72:fb:1c:4b:ba:6c:82:1b:c4:44:ef:61:
8e:0d:ac:6c:a7:fb:06:dc:5c:da:db:00:b3:0b:19:d1:26:7e:
b0:24:e0:1e:34:3c:1e:dc:29:66:fb:d1:56:72:65:07:e2:03:
17:76:85:4e:64:a7:4e:4c:59:bb:d8:6b:1e:cd:85:a9:30:f8:
80:1e:86:df:85:bf:8f:d5:c1:a3:e6:75:e7:9d:29:e5:1f:2b:
fb:a3:5d:28:cd:ee:99:84:6a:04:93:42:94:7f:de:2c:3f:39:
b0:e4:d2:5b:72:94:e6:9f:21:71:1d:c7:90:61:c9:00:36:b1:
fb:ed:bb:e4:63:dc:c8:39:e3:0a:8f:6c:0f:c1:a3:d7:51:fb:
6d:ff:c9:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvYhY8juONQvf8GMd+nwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmRhODM0YjMyY2IxMmM0YmRhZTMzZjY3MmYzNDhkOTgz
ZjMxNzYwHhcNMjYwNDE3MDAwMDUxWhcNMjYwNDE4MDAwMDUxWjAzMTEwLwYDVQQD
Eyg0ZTRjNGM1YTU2M2VjMjlmZTQxNjk0ZjZiYTVmNmM0ZWZiZDNmYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfZF9ktHLUuykta/VFmEvznkL5Wz
IJBb0soBfN5O3gISiFDeR5orsHc1b6FOHp60otXmJG0G1FBVbXm/gT2qYScFoxaX
5AYyiU38LkZe9VGZmAEvgHUnRg26uvxCKujGsO7zZ0GHgBKgF4BWOpozStOjGyQE
2dQl44SXBDvTEZHpIeU/zl+A8AsA8UFtTjkl8YajyI8ZROi+ZMEZtwUek6kyVtfw
v/52hxm3fiNYnxoa5YLxYLOG4TSHsxBYMwX6WT8MbYVrKednTvYbBC746aRUcAKj
TqLxjWGLLpBocfwxIQbEn5IMrdaiaMdZyQby+CAzMyv5wPGOwDMm07obWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5MTFpWPsKf5BaU9rpfbE770/qIMB8GA1UdIwQY
MBaAFKttqDSzLLEsS9rjP2cvNI2YPzF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgt
NTg2N2NhNzc4OTdlLzEvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgtNTg2N2NhNzc4OTdl
LzEvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYf01wK7
OJjjRt6q2rKmcMti1caFGPSwCFSoG9bp6ti9KcDS/4RkTQawbDi9Dc1D3bCFVZyU
MmYti4rHk3AoXkyA46odmPKppY/ZeMdfE4yMSkhYNuWfuCWRtUYyrgbibgS+mCbm
JYCar/BKkGXGnNxBcvscS7psghvERO9hjg2sbKf7Btxc2tsAswsZ0SZ+sCTgHjQ8
HtwpZvvRVnJlB+IDF3aFTmSnTkxZu9hrHs2FqTD4gB6G34W/j9XBo+Z1550p5R8r
+6NdKM3umYRqBJNClH/eLD85sOTSW3KU5p8hcR3HkGHJADax++275GPcyDnjCo9s
D8Gj11H7bf/JEA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:52 2026 by rpki-client