Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: Qn6PtLHwi799fCdYJM/IIxs5VieC9tC9sFH+ZCsREKE=
Subject key identifier: 7A:4F:5E:4D:C5:2F:64:58:C5:2C:33:56:7F:60:12:59:18:91:C4:19
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019DA30A987540BC68A8338EC4BF592D9598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 0294
Signing time: Sun 19 Apr 2026 00:01:13 +0000
Manifest this update: Sun 19 Apr 2026 00:01:13 +0000
Manifest next update: Mon 20 Apr 2026 00:01:13 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: KaW14WoA1czV3ycLRZORAMuSPsQ9F/E/aRSJsg8lCCI=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:98:75:40:bc:68:a8:33:8e:c4:bf:59:2d:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Apr 19 00:01:13 2026 GMT
Not After : Apr 20 00:01:13 2026 GMT
Subject: CN=7a4f5e4dc52f6458c52c33567f6012591891c419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:50:89:73:da:ff:93:db:b3:92:d2:20:93:
69:ac:45:ac:46:58:d7:c4:58:51:f3:81:dd:06:02:
d4:5f:a9:bb:22:0c:cc:ea:00:02:58:70:82:9f:fc:
77:c8:16:60:41:67:7b:be:96:5e:13:13:03:09:00:
43:b0:c8:c7:29:02:c2:a7:ca:8a:06:f5:53:00:86:
79:95:7a:a0:e4:25:47:bf:74:14:03:d9:57:39:d4:
34:5e:03:2b:9e:c5:dd:22:36:51:75:2d:5c:87:4d:
fe:d5:92:9d:e2:65:fe:ba:eb:e2:ba:e3:9a:4c:5b:
0e:8d:32:19:78:c6:f4:3d:5e:68:5d:0e:3a:8d:cd:
b5:d8:09:84:1b:ff:89:55:f5:3c:a9:05:65:ca:00:
01:97:7e:de:df:5b:62:34:3f:89:7a:a4:df:04:69:
f3:7e:a4:4e:07:0f:8b:11:16:4e:c0:91:c9:46:df:
a8:9c:6a:d8:43:c1:ec:50:59:c5:8f:3d:5a:2f:69:
3e:42:3e:0d:ab:d5:5f:53:d9:88:d3:12:26:0a:d3:
fd:4e:8d:83:22:3b:00:e6:80:36:ce:51:79:de:b8:
b7:0c:af:f7:eb:55:24:23:cf:34:08:95:0c:67:da:
40:d8:94:0e:ad:72:e3:e5:e0:3c:22:c0:46:72:9d:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4F:5E:4D:C5:2F:64:58:C5:2C:33:56:7F:60:12:59:18:91:C4:19
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6f:4f:53:4c:ab:b4:d5:98:53:a7:fe:23:8d:c3:53:58:4b:
48:10:66:8a:75:d9:f2:35:33:1c:04:18:db:d8:65:95:c5:91:
ba:6e:55:65:b3:c4:98:5b:11:c3:cb:78:dd:4e:26:c3:7f:7f:
3c:a4:e3:1c:a1:53:d4:b6:45:91:06:83:cd:f3:7f:fd:11:af:
26:b3:cb:97:5e:07:0b:19:23:f8:12:a2:b1:c4:5d:62:4f:d8:
18:30:57:7d:fc:a9:8b:3f:7e:73:b0:c3:7f:75:88:2e:77:83:
14:2f:43:02:28:4f:6b:a0:cf:ad:3f:fb:5c:47:89:82:b2:0a:
a4:4f:c8:d8:c6:6a:cc:0c:ad:d6:09:c5:76:a6:58:6b:d6:78:
db:d6:d4:fb:76:da:7d:3a:75:58:a6:1a:e9:4a:b4:e1:b4:91:
d5:5c:0d:f4:a1:89:3c:6b:2d:c7:dc:81:4f:56:ea:14:34:73:
4e:40:14:92:40:4d:1f:7a:a8:b4:a5:bb:07:34:79:0d:23:8e:
fa:d6:ea:d3:64:22:20:d5:64:06:90:43:64:7d:cc:49:59:60:
94:65:d4:63:af:1c:9e:41:d0:e8:ae:77:35:e0:9b:d1:6f:93:
fc:44:f0:d9:38:c6:41:f1:4b:f7:17:dc:58:58:83:99:80:8c:
83:4a:14:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCph1QLxoqDOOxL9ZLZWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjQ2Yjg4YjgyOWI0YTNhYWRjMjgwZGExNDViNjNlOTll
OTJhMGUwHhcNMjYwNDE5MDAwMTEzWhcNMjYwNDIwMDAwMTEzWjAzMTEwLwYDVQQD
Eyg3YTRmNWU0ZGM1MmY2NDU4YzUyYzMzNTY3ZjYwMTI1OTE4OTFjNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFtQiXPa/5Pbs5LSIJNprEWsRljX
xFhR84HdBgLUX6m7IgzM6gACWHCCn/x3yBZgQWd7vpZeExMDCQBDsMjHKQLCp8qK
BvVTAIZ5lXqg5CVHv3QUA9lXOdQ0XgMrnsXdIjZRdS1ch03+1ZKd4mX+uuviuuOa
TFsOjTIZeMb0PV5oXQ46jc212AmEG/+JVfU8qQVlygABl37e31tiND+JeqTfBGnz
fqROBw+LERZOwJHJRt+onGrYQ8HsUFnFjz1aL2k+Qj4Nq9VfU9mI0xImCtP9To2D
IjsA5oA2zlF53ri3DK/361UkI880CJUMZ9pA2JQOrXLj5eA8IsBGcp3PIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpPXk3FL2RYxSwzVn9gElkYkcQZMB8GA1UdIwQY
MBaAFKgka4i4KbSjqtwoDaFFtj6Z6SoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEt
NDkwYzg4MzAxZmNlLzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEtNDkwYzg4MzAxZmNl
LzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW9PU0yr
tNWYU6f+I43DU1hLSBBminXZ8jUzHAQY29hllcWRum5VZbPEmFsRw8t43U4mw39/
PKTjHKFT1LZFkQaDzfN//RGvJrPLl14HCxkj+BKiscRdYk/YGDBXffypiz9+c7DD
f3WILneDFC9DAihPa6DPrT/7XEeJgrIKpE/I2MZqzAyt1gnFdqZYa9Z429bU+3ba
fTp1WKYa6Uq04bSR1VwN9KGJPGstx9yBT1bqFDRzTkAUkkBNH3qotKW7BzR5DSOO
+tbq02QiINVkBpBDZH3MSVlglGXUY68cnkHQ6K53NeCb0W+T/ETw2TjGQfFL9xfc
WFiDmYCMg0oUxw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:01:44 2026 by rpki-client