Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: lCywAPq6ZsFvZvRI68VyROtsfjhOCtJs0Xxnn3DLtlw=
Subject key identifier: AE:4E:3C:16:26:69:A9:45:19:63:A2:8A:EB:63:9B:F5:C6:B2:BD:33
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019DA3AEEF6041889364054213A242F93CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0F5C
Signing time: Sun 19 Apr 2026 03:00:43 +0000
Manifest this update: Sun 19 Apr 2026 03:00:43 +0000
Manifest next update: Mon 20 Apr 2026 03:00:43 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: 75ixy9UqcdK+EkQHsq4nrepjkbcXnM8gUNyVGpmi/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:ef:60:41:88:93:64:05:42:13:a2:42:f9:3c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Apr 19 03:00:43 2026 GMT
Not After : Apr 20 03:00:43 2026 GMT
Subject: CN=ae4e3c162669a9451963a28aeb639bf5c6b2bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:1b:a4:7c:80:d6:95:a2:c0:6e:af:2f:d6:
ac:cd:3b:aa:28:66:8e:dc:b1:e9:10:fa:fc:9a:2b:
6d:0b:d1:fc:ac:a9:a1:07:1d:be:ee:b5:c8:98:6a:
5d:0f:09:61:f9:06:44:7d:76:19:28:38:ba:93:a0:
80:58:09:7c:1b:b5:f7:71:ce:cd:a4:1c:ef:87:63:
55:1a:29:be:21:1f:5f:c6:6e:74:41:5e:8e:c7:26:
ab:00:8c:bb:16:b7:fc:0d:98:7b:4c:ec:91:75:27:
6f:26:0a:eb:c6:1e:16:c3:30:01:70:24:a1:5c:a0:
a5:f4:c1:3c:34:d5:a1:3c:38:ae:c0:d4:5b:f5:40:
9d:ac:e4:00:2f:e4:5d:77:3d:12:e0:2f:02:b1:05:
2e:bc:73:94:5b:24:00:ff:d7:46:0b:96:35:fb:65:
14:a0:a2:71:11:ab:69:64:23:9f:7a:57:2d:d1:b8:
6c:8b:9e:49:d5:ac:99:57:54:50:3e:3d:3e:de:75:
2b:20:3c:48:3a:53:ee:37:cf:37:04:61:17:f3:dc:
de:05:3f:bc:ce:78:3f:1d:d5:f9:7e:f8:98:cb:be:
75:e2:0a:8a:9a:5b:60:4b:47:7e:fa:2b:1b:08:c2:
83:27:9e:22:89:c2:19:44:ea:d5:cb:41:52:53:07:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:3C:16:26:69:A9:45:19:63:A2:8A:EB:63:9B:F5:C6:B2:BD:33
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1f:b3:2c:24:a5:c2:93:1c:a6:5b:6e:bf:7c:36:c0:23:6f:
db:a6:31:a5:61:5d:0f:0a:0d:9b:4e:4a:37:0a:5a:4c:86:02:
9d:c8:d3:ba:d0:ff:83:0f:00:0b:2c:b4:6d:27:9a:e1:3c:59:
07:1a:8a:ec:1f:d2:c2:5c:56:74:54:33:be:17:d9:14:8f:32:
ec:7d:5b:77:27:4b:f3:5f:47:cc:4e:96:68:76:45:76:28:c8:
de:32:be:ce:03:98:ee:7b:b8:e9:3c:c3:9b:73:f6:b1:62:ba:
88:8f:ee:1e:9c:87:4c:27:1c:f9:b9:94:59:6b:a7:f7:4d:fd:
0c:7e:66:d0:3a:e5:78:16:b8:33:84:fb:c1:7d:28:10:3f:2c:
bf:0f:c1:65:75:95:06:72:2f:25:b1:da:c3:38:55:15:15:7e:
b7:c7:94:02:8e:c8:e2:04:6d:14:a4:2c:3d:68:18:4e:cd:1b:
0c:33:71:1f:bc:a1:cc:3d:af:cb:e7:78:3d:39:4f:41:c7:c8:
3a:ec:3b:1c:2b:28:9c:65:4e:53:76:88:27:9c:4e:fe:8b:67:
f9:66:82:a0:08:99:70:12:1c:42:df:b8:29:90:f3:d9:fc:74:
d1:b4:66:18:0a:c8:eb:5e:b4:01:c9:f2:6c:81:d3:5b:89:ae:
c0:6d:e7:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jru9gQYiTZAVCE6JC+Tz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2
MTljY2QwHhcNMjYwNDE5MDMwMDQzWhcNMjYwNDIwMDMwMDQzWjAzMTEwLwYDVQQD
EyhhZTRlM2MxNjI2NjlhOTQ1MTk2M2EyOGFlYjYzOWJmNWM2YjJiZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFobpHyA1pWiwG6vL9aszTuqKGaO
3LHpEPr8mittC9H8rKmhBx2+7rXImGpdDwlh+QZEfXYZKDi6k6CAWAl8G7X3cc7N
pBzvh2NVGim+IR9fxm50QV6OxyarAIy7Frf8DZh7TOyRdSdvJgrrxh4WwzABcCSh
XKCl9ME8NNWhPDiuwNRb9UCdrOQAL+Rddz0S4C8CsQUuvHOUWyQA/9dGC5Y1+2UU
oKJxEatpZCOfelct0bhsi55J1ayZV1RQPj0+3nUrIDxIOlPuN883BGEX89zeBT+8
zng/HdX5fviYy7514gqKmltgS0d++isbCMKDJ54iicIZROrVy0FSUwdIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5OPBYmaalFGWOiiutjm/XGsr0zMB8GA1UdIwQY
MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt
ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw
LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwR+zLCSl
wpMcpltuv3w2wCNv26YxpWFdDwoNm05KNwpaTIYCncjTutD/gw8ACyy0bSea4TxZ
BxqK7B/SwlxWdFQzvhfZFI8y7H1bdydL819HzE6WaHZFdijI3jK+zgOY7nu46TzD
m3P2sWK6iI/uHpyHTCcc+bmUWWun9039DH5m0DrleBa4M4T7wX0oED8svw/BZXWV
BnIvJbHawzhVFRV+t8eUAo7I4gRtFKQsPWgYTs0bDDNxH7yhzD2vy+d4PTlPQcfI
Ouw7HCsonGVOU3aIJ5xO/otn+WaCoAiZcBIcQt+4KZDz2fx00bRmGArI6160Acny
bIHTW4muwG3nZg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:23 2026 by rpki-client