Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: OneNu6hH/rv3MFFLiGa0fEvyy127u/59oU8sXUfp//4=
Subject key identifier: 59:5E:64:D6:DA:AD:7D:E1:37:6F:15:1D:5B:1A:4A:57:97:72:9F:D2
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019EBEED14CEA1DE7C5D6051D419415BB0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 0327
Signing time: Sat 13 Jun 2026 03:01:08 +0000
Manifest this update: Sat 13 Jun 2026 03:01:08 +0000
Manifest next update: Sun 14 Jun 2026 03:01:08 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: zdMLFyzV/Fasxgjk68hdrYUfRW6ro0o+z5BYbHbEAuo=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:14:ce:a1:de:7c:5d:60:51:d4:19:41:5b:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Jun 13 03:01:08 2026 GMT
Not After : Jun 14 03:01:08 2026 GMT
Subject: CN=595e64d6daad7de1376f151d5b1a4a5797729fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:ee:f3:92:25:42:95:35:42:1c:44:fe:24:
5b:23:23:53:ae:b4:cc:39:83:28:90:0f:94:87:ed:
b5:f5:65:2c:5a:84:3e:f3:1f:8c:6e:4a:10:27:69:
02:c9:ca:9a:28:49:57:83:28:f7:39:32:61:e4:88:
a8:40:e9:f7:31:1f:cb:94:58:6f:8b:81:77:64:67:
18:46:90:99:ed:3d:2d:18:3e:9f:4e:31:c7:08:6c:
7d:d7:80:5b:7b:55:93:c1:35:6c:25:29:63:ff:ab:
67:40:8c:ba:5e:8a:7d:1c:e1:f1:9e:f6:22:49:5e:
72:fd:35:9e:85:67:d4:d7:f2:f0:43:c9:0c:e1:b3:
19:07:c6:d0:4c:64:f5:d1:ee:26:48:d6:23:75:4d:
6c:26:0e:86:e8:98:1d:2b:1d:6a:cb:61:66:6d:15:
f4:b7:86:7c:c0:88:9a:e5:65:0e:53:03:85:9a:dc:
91:4a:c8:fb:8f:8f:ac:b5:55:06:e4:f8:84:e0:cb:
02:19:95:ba:c2:b4:7b:e6:ca:fc:6f:f5:4e:1b:48:
17:0b:40:41:64:10:4c:4c:eb:a9:95:b2:66:c3:85:
75:b8:61:3c:3a:8a:07:a6:64:36:ee:24:f4:4e:4c:
75:62:d9:2f:de:7b:fa:f2:b6:c8:79:06:19:2e:bf:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:64:D6:DA:AD:7D:E1:37:6F:15:1D:5B:1A:4A:57:97:72:9F:D2
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:17:8e:f2:a3:e8:d2:7c:32:1e:32:79:ec:6a:53:1a:93:4e:
59:5d:90:14:f0:1a:a9:57:e3:d0:25:9b:f6:58:f0:0d:09:dc:
b2:a4:0e:3c:4f:c1:92:13:1c:12:44:55:7a:f3:34:9c:c5:3e:
06:49:b7:e6:ac:a9:43:dd:28:06:4b:29:36:a3:46:2f:20:fd:
ec:c7:ed:a9:60:1f:5c:c1:d5:53:bc:3b:98:da:c0:db:03:38:
b8:23:40:07:15:c1:1d:56:8c:ef:b6:e0:c0:82:48:89:51:ac:
cb:69:1c:cc:80:75:31:d8:3d:1f:d5:c2:69:d7:5b:d4:63:a1:
5d:2e:fc:7e:13:73:70:c1:2e:51:94:29:40:f3:cf:63:3d:8a:
62:9f:aa:3c:57:eb:76:26:0d:a5:d8:92:3c:52:14:74:3d:7c:
ed:0f:af:7d:dd:64:2d:9b:c1:14:c7:68:c5:29:5a:5d:e0:7b:
7b:7f:09:2a:e3:d3:56:40:9f:cd:fb:f3:8a:4a:42:91:15:fc:
df:a2:ff:62:02:dd:ef:02:15:f0:86:05:55:b3:09:95:b8:16:
ef:02:82:bf:99:64:8f:ac:de:0d:e6:47:fc:67:7e:3d:a7:22:
08:12:c1:93:e1:1e:f3:bf:4b:f2:08:ba:41:05:6a:0b:c2:f3:
00:fc:bc:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7RTOod58XWBR1BlBW7DhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjQ2Yjg4YjgyOWI0YTNhYWRjMjgwZGExNDViNjNlOTll
OTJhMGUwHhcNMjYwNjEzMDMwMTA4WhcNMjYwNjE0MDMwMTA4WjAzMTEwLwYDVQQD
Eyg1OTVlNjRkNmRhYWQ3ZGUxMzc2ZjE1MWQ1YjFhNGE1Nzk3NzI5ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHju85IlQpU1QhxE/iRbIyNTrrTM
OYMokA+Uh+219WUsWoQ+8x+MbkoQJ2kCycqaKElXgyj3OTJh5IioQOn3MR/LlFhv
i4F3ZGcYRpCZ7T0tGD6fTjHHCGx914Bbe1WTwTVsJSlj/6tnQIy6Xop9HOHxnvYi
SV5y/TWehWfU1/LwQ8kM4bMZB8bQTGT10e4mSNYjdU1sJg6G6JgdKx1qy2FmbRX0
t4Z8wIia5WUOUwOFmtyRSsj7j4+stVUG5PiE4MsCGZW6wrR75sr8b/VOG0gXC0BB
ZBBMTOuplbJmw4V1uGE8OooHpmQ27iT0Tkx1Ytkv3nv68rbIeQYZLr+9PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFleZNbarX3hN28VHVsaSleXcp/SMB8GA1UdIwQY
MBaAFKgka4i4KbSjqtwoDaFFtj6Z6SoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEt
NDkwYzg4MzAxZmNlLzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEtNDkwYzg4MzAxZmNl
LzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaReO8qPo
0nwyHjJ57GpTGpNOWV2QFPAaqVfj0CWb9ljwDQncsqQOPE/BkhMcEkRVevM0nMU+
Bkm35qypQ90oBkspNqNGLyD97MftqWAfXMHVU7w7mNrA2wM4uCNABxXBHVaM77bg
wIJIiVGsy2kczIB1Mdg9H9XCaddb1GOhXS78fhNzcMEuUZQpQPPPYz2KYp+qPFfr
diYNpdiSPFIUdD187Q+vfd1kLZvBFMdoxSlaXeB7e38JKuPTVkCfzfvzikpCkRX8
36L/YgLd7wIV8IYFVbMJlbgW7wKCv5lkj6zeDeZH/Gd+PaciCBLBk+Ee879L8gi6
QQVqC8LzAPy85A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:54 2026 by rpki-client