Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: r0asfy/mN2gdrPZq9EYcBej0vbRXGEuWyd5HXV4q5Lg=
Subject key identifier: E1:D0:49:8D:61:5F:01:BF:03:F6:B4:CC:B8:9B:EC:63:F6:73:E3:A9
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019D992B5AD308671CBC13B557DEF887A6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0EF4
Signing time: Fri 17 Apr 2026 02:00:48 +0000
Manifest this update: Fri 17 Apr 2026 02:00:48 +0000
Manifest next update: Sat 18 Apr 2026 02:00:48 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: lGqiQY6o+Cyo7gQORxe6bXZt7QXU1+UlvkU1VzJzenY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:5a:d3:08:67:1c:bc:13:b5:57:de:f8:87:a6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Apr 17 02:00:48 2026 GMT
Not After : Apr 18 02:00:48 2026 GMT
Subject: CN=e1d0498d615f01bf03f6b4ccb89bec63f673e3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:8d:5b:d6:36:99:d7:ae:32:c3:54:18:77:
02:38:e1:21:68:fd:4a:34:ff:39:14:fd:0f:7a:27:
1d:43:fb:3d:79:f9:23:59:ae:27:5f:d3:a2:2c:55:
e3:4e:23:f3:ce:2f:ad:84:aa:b5:bd:60:44:d6:9a:
60:d7:f7:6c:17:b5:69:79:cb:f5:ad:1f:94:b5:c9:
9d:e9:04:64:0a:69:9f:a6:ba:b2:92:d9:ff:78:1f:
c5:a3:1d:87:85:e5:ef:86:da:eb:37:7e:7c:13:b9:
82:f4:79:3e:44:f1:cb:89:25:5f:f4:9b:f5:d2:3c:
19:16:ae:31:6f:13:bd:59:31:d1:5e:e6:d4:2a:b6:
a8:dd:98:d5:54:92:57:83:08:55:f7:b9:5d:6f:07:
74:20:68:da:45:60:97:b7:7f:61:c6:67:86:39:e8:
8c:a9:ed:8a:12:e8:c2:2f:1c:13:f8:65:19:1b:c3:
1d:dc:5f:b9:17:b3:de:46:a0:d2:e9:42:8a:94:ff:
6f:10:35:f7:f9:8d:56:3e:24:62:62:d2:25:aa:14:
d5:f1:c6:66:78:34:89:cf:48:ba:4a:6b:39:03:d6:
37:ca:31:2a:cc:cd:30:8a:94:39:b6:fe:bd:14:16:
96:45:47:55:f9:34:6f:a4:84:f8:ef:ed:08:5e:72:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:49:8D:61:5F:01:BF:03:F6:B4:CC:B8:9B:EC:63:F6:73:E3:A9
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:5f:5d:24:0b:be:15:b6:7a:c6:4a:70:0d:cd:51:e5:35:
58:ae:8c:7e:e4:c9:0e:6d:56:59:09:e7:7f:3b:49:b2:2d:4b:
d9:53:35:98:5d:cc:e1:bd:e8:ed:c0:ab:96:33:30:63:ba:ee:
4e:17:4c:a7:c5:a8:16:be:4d:6d:bd:aa:aa:81:d7:54:51:bb:
28:b9:c2:3b:3c:ea:c7:28:85:7b:60:ba:ae:88:f5:1c:d9:05:
a5:bc:2e:c9:5f:8c:d3:6a:31:9d:ce:61:f2:75:77:72:5f:4b:
70:6f:ad:42:01:ea:4b:71:92:27:30:2c:6e:1b:ed:36:58:1d:
7b:80:8f:4c:73:c0:b0:21:3e:4d:b8:34:b9:f7:ed:f0:e1:97:
a3:e8:4e:ec:37:f6:95:11:25:a4:1d:fb:13:5c:e8:c8:4b:71:
ef:2e:71:d8:3a:11:53:fd:0b:57:be:3e:7b:88:f3:ea:84:c8:
b5:f9:2f:39:9a:b3:ee:49:6f:12:b6:78:2b:21:71:62:1b:c4:
cd:79:a8:c5:83:47:01:0c:bb:aa:12:b7:27:8f:fe:18:a4:ac:
ef:10:df:61:e9:c7:ea:13:53:b2:bf:4f:f7:eb:1e:34:c9:76:
07:4a:d1:91:14:9d:94:46:5a:69:67:7b:ef:28:09:96:ee:d9:
78:45:75:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK1rTCGccvBO1V974h6bdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj
NGFkZmYwHhcNMjYwNDE3MDIwMDQ4WhcNMjYwNDE4MDIwMDQ4WjAzMTEwLwYDVQQD
EyhlMWQwNDk4ZDYxNWYwMWJmMDNmNmI0Y2NiODliZWM2M2Y2NzNlM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsaNW9Y2mdeuMsNUGHcCOOEhaP1K
NP85FP0PeicdQ/s9efkjWa4nX9OiLFXjTiPzzi+thKq1vWBE1ppg1/dsF7Vpecv1
rR+Utcmd6QRkCmmfprqyktn/eB/Fox2HheXvhtrrN358E7mC9Hk+RPHLiSVf9Jv1
0jwZFq4xbxO9WTHRXubUKrao3ZjVVJJXgwhV97ldbwd0IGjaRWCXt39hxmeGOeiM
qe2KEujCLxwT+GUZG8Md3F+5F7PeRqDS6UKKlP9vEDX3+Y1WPiRiYtIlqhTV8cZm
eDSJz0i6Sms5A9Y3yjEqzM0wipQ5tv69FBaWRUdV+TRvpIT47+0IXnKanQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHQSY1hXwG/A/a0zLib7GP2c+OpMB8GA1UdIwQY
MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt
MmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi
LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZchfXSQL
vhW2esZKcA3NUeU1WK6MfuTJDm1WWQnnfztJsi1L2VM1mF3M4b3o7cCrljMwY7ru
ThdMp8WoFr5Nbb2qqoHXVFG7KLnCOzzqxyiFe2C6roj1HNkFpbwuyV+M02oxnc5h
8nV3cl9LcG+tQgHqS3GSJzAsbhvtNlgde4CPTHPAsCE+Tbg0ufft8OGXo+hO7Df2
lRElpB37E1zoyEtx7y5x2DoRU/0LV74+e4jz6oTItfkvOZqz7klvErZ4KyFxYhvE
zXmoxYNHAQy7qhK3J4/+GKSs7xDfYenH6hNTsr9P9+seNMl2B0rRkRSdlEZaaWd7
7ygJlu7ZeEV1Dg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:43 2026 by rpki-client