Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: 2EGS5mTcCpKP01SJrsH8sVXISATa9OwzJNgaGOmthH8=
Subject key identifier: 1C:8C:97:DD:FB:CD:35:9E:9E:9C:DA:4F:99:C8:9E:F2:DF:1F:C6:9E
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019FA89A35A2EE552A90691E2ADA7D297608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 03A0
Signing time: Tue 28 Jul 2026 12:01:46 +0000
Manifest this update: Tue 28 Jul 2026 12:01:46 +0000
Manifest next update: Wed 29 Jul 2026 12:01:46 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: CdH8GrdOsnwC8qWkLD6TNtl6GCi9Mr5RAx75KpLR0mE=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:35:a2:ee:55:2a:90:69:1e:2a:da:7d:29:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Jul 28 12:01:46 2026 GMT
Not After : Jul 29 12:01:46 2026 GMT
Subject: CN=1c8c97ddfbcd359e9e9cda4f99c89ef2df1fc69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:c5:dc:ef:2a:e3:88:5c:9c:d5:98:f1:bf:
35:72:43:44:89:86:bc:3f:d3:e3:72:e3:ea:f9:c7:
61:e0:d4:5f:ee:ba:88:68:0f:ef:68:8d:8b:d3:99:
db:13:de:df:b4:b2:11:6a:46:fa:05:5a:d8:f1:db:
14:07:44:0d:e3:55:19:b7:5e:d8:e4:d7:c7:d2:40:
1b:b1:67:43:3a:75:ee:36:21:94:5c:a5:39:6e:ca:
3e:9c:88:2c:48:fa:4b:b8:80:5a:36:d8:24:7d:08:
fb:06:34:e4:ca:ee:11:4f:0d:75:7e:40:00:7e:53:
41:c7:d3:97:d2:29:05:55:a0:4a:98:e6:70:ee:4c:
14:5c:01:e6:c3:3e:da:96:a9:0d:2e:d3:7b:a2:0b:
40:1b:2a:f3:38:27:2e:4b:40:69:38:be:e0:b4:87:
a9:99:ac:80:ec:4c:64:18:8f:8f:9f:80:3e:d2:e0:
81:76:10:8e:47:a8:d4:2f:07:04:91:6c:26:3a:56:
aa:ca:8e:9e:bc:ec:07:c5:04:8e:99:8b:0c:42:37:
33:ee:0a:8f:7b:4d:dd:c5:46:d0:59:8b:8e:58:f7:
94:96:64:aa:09:fb:3e:57:53:ea:59:c6:18:f4:08:
a6:d4:a2:a5:a9:0f:e8:48:09:50:a6:a8:6d:b8:c0:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:97:DD:FB:CD:35:9E:9E:9C:DA:4F:99:C8:9E:F2:DF:1F:C6:9E
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b9:5b:60:f0:46:e0:f9:4c:60:66:f9:e9:30:fd:7d:c5:b9:
7f:46:f3:48:72:b4:a6:2c:05:1f:c4:cd:82:b5:92:25:53:a5:
53:19:48:b1:7d:5e:d8:9d:3b:bc:ce:54:94:da:57:c6:99:a4:
58:6f:11:29:91:02:2c:17:1f:14:63:e8:0d:33:e8:dc:94:cf:
8f:f7:cf:d0:ce:9d:4a:5a:93:40:d8:e8:2f:d3:a3:bd:c1:9a:
55:e8:c0:74:df:cd:40:69:c2:c1:bc:e3:77:7c:41:18:a2:fe:
f1:e4:6f:28:61:42:c1:17:ad:94:3b:d3:4d:3f:e9:27:5f:c3:
4e:df:12:0e:45:1f:8a:b9:25:66:2e:a2:7e:f1:ff:42:cf:ca:
ca:02:28:32:ce:2b:06:be:b4:9c:5b:b2:3f:4b:83:ee:45:8f:
76:ff:46:97:11:bc:e8:32:e0:44:da:90:f4:50:bd:c7:97:a8:
da:f9:55:32:0f:4e:fa:7c:48:61:44:37:30:2e:43:ff:46:7d:
a0:80:fd:1b:72:5a:c6:0c:ca:77:ee:e2:a9:83:ce:3f:d1:e0:
4d:2b:67:90:44:00:e5:8e:d6:a4:d0:57:bc:42:12:db:f3:9c:
03:3d:ec:fc:73:e7:03:e2:03:14:eb:3e:e0:fd:27:62:3e:f0:
94:34:82:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omjWi7lUqkGkeKtp9KXYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjQ2Yjg4YjgyOWI0YTNhYWRjMjgwZGExNDViNjNlOTll
OTJhMGUwHhcNMjYwNzI4MTIwMTQ2WhcNMjYwNzI5MTIwMTQ2WjAzMTEwLwYDVQQD
EygxYzhjOTdkZGZiY2QzNTllOWU5Y2RhNGY5OWM4OWVmMmRmMWZjNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZnF3O8q44hcnNWY8b81ckNEiYa8
P9PjcuPq+cdh4NRf7rqIaA/vaI2L05nbE97ftLIRakb6BVrY8dsUB0QN41UZt17Y
5NfH0kAbsWdDOnXuNiGUXKU5bso+nIgsSPpLuIBaNtgkfQj7BjTkyu4RTw11fkAA
flNBx9OX0ikFVaBKmOZw7kwUXAHmwz7alqkNLtN7ogtAGyrzOCcuS0BpOL7gtIep
mayA7ExkGI+Pn4A+0uCBdhCOR6jULwcEkWwmOlaqyo6evOwHxQSOmYsMQjcz7gqP
e03dxUbQWYuOWPeUlmSqCfs+V1PqWcYY9Aim1KKlqQ/oSAlQpqhtuMDk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByMl937zTWenpzaT5nInvLfH8aeMB8GA1UdIwQY
MBaAFKgka4i4KbSjqtwoDaFFtj6Z6SoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEt
NDkwYzg4MzAxZmNlLzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEtNDkwYzg4MzAxZmNl
LzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrlbYPBG
4PlMYGb56TD9fcW5f0bzSHK0piwFH8TNgrWSJVOlUxlIsX1e2J07vM5UlNpXxpmk
WG8RKZECLBcfFGPoDTPo3JTPj/fP0M6dSlqTQNjoL9OjvcGaVejAdN/NQGnCwbzj
d3xBGKL+8eRvKGFCwRetlDvTTT/pJ1/DTt8SDkUfirklZi6ifvH/Qs/KygIoMs4r
Br60nFuyP0uD7kWPdv9GlxG86DLgRNqQ9FC9x5eo2vlVMg9O+nxIYUQ3MC5D/0Z9
oID9G3JaxgzKd+7iqYPOP9HgTStnkEQA5Y7WpNBXvEIS2/OcAz3s/HPnA+IDFOs+
4P0nYj7wlDSCwQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:33 2026 by rpki-client