Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: yK0bfEg1AMNXd/x8NNUCA9TlEeJ/PBlqJiQELkHQ4jE=
Subject key identifier: 16:28:5B:9A:EF:72:BA:50:3E:0B:AB:4E:7E:05:C4:3F:F8:37:72:43
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019D996209DF9B84143E9D358B0D66036912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 095A
Signing time: Fri 17 Apr 2026 03:00:32 +0000
Manifest this update: Fri 17 Apr 2026 03:00:32 +0000
Manifest next update: Sat 18 Apr 2026 03:00:32 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: oPmwPpi3YvFuxWpiv0faIDQe9Vfx7aLRNRRXWqTjd6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:09:df:9b:84:14:3e:9d:35:8b:0d:66:03:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Apr 17 03:00:32 2026 GMT
Not After : Apr 18 03:00:32 2026 GMT
Subject: CN=16285b9aef72ba503e0bab4e7e05c43ff8377243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:68:c9:5e:2f:75:b4:8b:7e:fa:bd:af:4a:
41:59:53:6a:50:c8:b4:83:54:85:7c:49:37:72:99:
31:56:5f:f4:1e:5d:98:53:df:e2:1e:11:c8:81:94:
50:c0:3f:81:e7:ba:80:23:1f:66:5d:57:85:2b:3d:
79:ba:fa:c0:af:7e:6d:1f:51:2e:af:86:8b:13:09:
cd:70:7d:c4:cf:14:0b:bb:a3:7d:42:fe:a1:89:9f:
e2:27:e4:3c:59:5e:4d:3b:92:44:2e:30:40:2a:38:
ac:a9:ad:67:c3:97:28:74:b3:bc:97:04:85:f6:f5:
67:7f:2c:aa:fa:c0:ed:5f:fc:7c:27:36:a3:a2:fe:
c8:f5:b9:7c:e6:f1:6f:f3:7e:1a:38:4e:17:3c:d4:
12:cd:a3:4d:66:11:f9:85:6b:aa:ff:1d:87:26:35:
ad:a2:e4:b2:e8:fe:b5:c4:cd:14:23:d3:61:74:53:
e3:de:84:dc:59:ac:ad:b7:84:b2:21:0b:f7:8a:ed:
29:bd:9d:2d:00:a6:f7:93:2f:e6:c7:85:b6:b3:98:
06:64:37:4f:fd:39:fb:07:fb:d6:14:a6:6a:74:73:
45:ee:44:63:48:ef:d5:f0:3b:e3:06:fb:34:8f:8d:
61:4b:05:ab:a8:a5:83:8b:8f:87:35:b1:5f:a6:a5:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:5B:9A:EF:72:BA:50:3E:0B:AB:4E:7E:05:C4:3F:F8:37:72:43
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e4:20:3c:73:fc:0b:5a:0b:84:67:3f:2b:bc:8f:00:68:bf:
26:a8:7b:4b:6c:d3:91:7f:9b:c2:1c:c9:fe:6d:63:bb:c4:f1:
8f:21:a2:80:6c:e9:46:4f:85:3c:8d:5f:42:c3:2d:9e:16:4e:
04:aa:32:12:64:f8:f2:84:64:2d:80:4e:c5:33:ac:7f:a7:27:
8a:af:9d:a6:6c:59:5b:62:a0:88:ed:8a:8a:5b:42:17:22:3d:
de:a9:71:80:e2:4b:3c:2b:f3:d5:6b:0a:b5:dc:4a:91:9d:6b:
f8:70:bd:1d:e3:50:c6:b1:7c:fc:f0:fb:de:8b:29:0d:6a:9b:
81:41:2f:81:3e:db:43:fd:64:09:42:e6:c1:db:0b:32:36:52:
6c:69:59:f3:d9:34:1a:59:17:d2:68:d4:34:b6:4b:5e:00:b8:
a2:36:97:a8:7f:50:5b:81:fd:10:e9:88:86:36:cc:09:f2:5a:
1e:4a:eb:d2:ec:2e:15:76:4a:1d:a8:d5:0a:e8:14:79:e4:02:
97:45:8a:9f:f1:8a:2e:2f:d3:cf:7b:af:f9:54:fb:ca:ed:fb:
75:36:04:3f:97:85:0f:65:b2:63:8a:2b:3b:23:76:6b:ba:23:
33:99:ff:8e:5c:f5:ce:42:79:3a:5e:f4:71:4c:40:45:a5:91:
0c:15:63:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYgnfm4QUPp01iw1mA2kSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmNGEwNjExZjcyYTg5MmMzMGQ4MjEyZDIxZjg2Y2Mx
M2E5NjcwHhcNMjYwNDE3MDMwMDMyWhcNMjYwNDE4MDMwMDMyWjAzMTEwLwYDVQQD
EygxNjI4NWI5YWVmNzJiYTUwM2UwYmFiNGU3ZTA1YzQzZmY4Mzc3MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMRoyV4vdbSLfvq9r0pBWVNqUMi0
g1SFfEk3cpkxVl/0Hl2YU9/iHhHIgZRQwD+B57qAIx9mXVeFKz15uvrAr35tH1Eu
r4aLEwnNcH3EzxQLu6N9Qv6hiZ/iJ+Q8WV5NO5JELjBAKjisqa1nw5codLO8lwSF
9vVnfyyq+sDtX/x8Jzajov7I9bl85vFv834aOE4XPNQSzaNNZhH5hWuq/x2HJjWt
ouSy6P61xM0UI9NhdFPj3oTcWaytt4SyIQv3iu0pvZ0tAKb3ky/mx4W2s5gGZDdP
/Tn7B/vWFKZqdHNF7kRjSO/V8DvjBvs0j41hSwWrqKWDi4+HNbFfpqUhxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYoW5rvcrpQPgurTn4FxD/4N3JDMB8GA1UdIwQY
MBaAFKo19KBhH3KoksMNghLSH4bME6lnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgt
NmJiZmU1OGExY2EwLzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgtNmJiZmU1OGExY2Ew
LzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuQgPHP8
C1oLhGc/K7yPAGi/Jqh7S2zTkX+bwhzJ/m1ju8TxjyGigGzpRk+FPI1fQsMtnhZO
BKoyEmT48oRkLYBOxTOsf6cniq+dpmxZW2KgiO2KiltCFyI93qlxgOJLPCvz1WsK
tdxKkZ1r+HC9HeNQxrF8/PD73ospDWqbgUEvgT7bQ/1kCULmwdsLMjZSbGlZ89k0
GlkX0mjUNLZLXgC4ojaXqH9QW4H9EOmIhjbMCfJaHkrr0uwuFXZKHajVCugUeeQC
l0WKn/GKLi/Tz3uv+VT7yu37dTYEP5eFD2WyY4orOyN2a7ojM5n/jlz1zkJ5Ol70
cUxARaWRDBVjtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:53 2026 by rpki-client