Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: yf7rztjxZ2carVwde5OHiLiV2ksQ3sViwpa/j1kaMlE=
Subject key identifier: 59:DB:F6:D0:2C:02:3A:16:70:D6:0E:84:39:D2:10:76:A0:20:E4:09
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019D992AFFDEE51DFF3D0AAE8B1F22625575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0E2A
Signing time: Fri 17 Apr 2026 02:00:25 +0000
Manifest this update: Fri 17 Apr 2026 02:00:25 +0000
Manifest next update: Sat 18 Apr 2026 02:00:25 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
4: b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa (hash: AyGNKQTPsYrYHZ1HAXTaHMHz0cT3+QNKk6bga2VEm6U=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: PGp1UVdcLTu/zaUt1OoxHih9NyI7GLFEk3o6pssJ1k0=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:ff:de:e5:1d:ff:3d:0a:ae:8b:1f:22:62:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Apr 17 02:00:25 2026 GMT
Not After : Apr 18 02:00:25 2026 GMT
Subject: CN=59dbf6d02c023a1670d60e8439d21076a020e409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:4e:13:8c:20:49:25:0d:e7:26:a5:bd:f1:
5a:62:a9:60:23:c6:b3:06:20:24:ed:c4:fb:94:e9:
2b:e4:28:f0:bc:a8:2f:42:d4:de:2f:63:21:77:4c:
75:e4:a1:39:b0:d9:e8:90:24:3a:8b:4b:d9:04:5c:
c4:7d:8f:5e:56:45:fe:98:46:56:d7:92:65:ab:ca:
63:f0:85:31:82:0d:72:4a:23:4c:48:22:ea:22:f0:
05:b0:30:8b:96:76:e1:95:14:64:bd:6d:76:d7:ec:
4c:13:d2:80:98:cc:00:b3:b3:5b:e0:c0:c8:31:9a:
8d:4a:0c:37:7d:91:d4:b8:c3:e9:92:a8:c8:15:b8:
59:cf:52:85:e8:45:fd:54:84:4b:20:4d:96:cf:0a:
66:bb:ac:43:53:84:1a:2b:e9:cf:75:ca:df:f1:5d:
7b:07:d0:c6:11:a8:da:85:dc:b5:09:10:19:24:b8:
f1:44:65:be:10:ba:c6:f4:04:c1:13:8a:a7:4d:5f:
55:0e:9e:6f:c1:84:c1:20:75:ac:44:38:6c:46:e8:
d8:a8:57:ba:1e:df:c5:77:f6:aa:8b:ea:d0:59:02:
22:46:85:47:cc:d9:5f:72:e8:5e:73:90:25:72:53:
9a:f8:76:46:31:25:25:b1:7d:10:fd:bf:44:90:79:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:F6:D0:2C:02:3A:16:70:D6:0E:84:39:D2:10:76:A0:20:E4:09
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f7:49:34:2e:b6:87:cc:28:1b:45:44:5f:df:e3:07:f8:1a:
c0:b9:d4:ce:61:ee:06:4d:60:01:4d:f4:de:eb:26:43:76:3b:
c1:5a:cd:61:a8:c0:d9:d7:06:ac:d6:40:c4:b4:47:a1:bb:16:
c1:73:ff:35:ec:52:e1:bd:71:22:40:ca:7d:86:f2:e9:0b:61:
5c:c3:26:52:0b:87:e3:34:90:38:f9:d9:2f:c2:91:fa:2a:8c:
a1:aa:ed:58:33:62:37:d7:7b:f1:28:59:c0:7a:29:97:fe:65:
25:22:24:95:6b:92:5c:22:a6:e8:58:ba:3d:68:cb:8e:a8:03:
e5:63:04:ed:ac:c4:f8:a9:01:8e:e2:89:40:d4:4a:58:6e:40:
c0:90:11:1e:a6:9e:08:07:55:1a:d8:33:94:2a:63:6e:1d:52:
8d:42:34:8f:1a:c4:c2:55:c8:ac:6f:a7:97:8f:c7:31:64:84:
ac:c5:7a:f6:f5:33:3d:63:ad:36:af:2d:49:88:63:9d:47:ef:
74:d2:ba:23:23:f5:27:54:24:bf:da:b6:10:e7:2b:c1:4d:e6:
b8:7f:28:3c:36:69:f6:a6:53:94:2b:96:43:e9:04:b1:9b:eb:
ce:1d:dc:54:ea:80:32:fe:b7:57:76:41:92:11:d3:30:53:1b:
db:8d:f7:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKv/e5R3/PQquix8iYlV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjYwNDE3MDIwMDI1WhcNMjYwNDE4MDIwMDI1WjAzMTEwLwYDVQQD
Eyg1OWRiZjZkMDJjMDIzYTE2NzBkNjBlODQzOWQyMTA3NmEwMjBlNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/5OE4wgSSUN5yalvfFaYqlgI8az
BiAk7cT7lOkr5CjwvKgvQtTeL2Mhd0x15KE5sNnokCQ6i0vZBFzEfY9eVkX+mEZW
15Jlq8pj8IUxgg1ySiNMSCLqIvAFsDCLlnbhlRRkvW121+xME9KAmMwAs7Nb4MDI
MZqNSgw3fZHUuMPpkqjIFbhZz1KF6EX9VIRLIE2Wzwpmu6xDU4QaK+nPdcrf8V17
B9DGEajahdy1CRAZJLjxRGW+ELrG9ATBE4qnTV9VDp5vwYTBIHWsRDhsRujYqFe6
Ht/Fd/aqi+rQWQIiRoVHzNlfcuhec5AlclOa+HZGMSUlsX0Q/b9EkHn7wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnb9tAsAjoWcNYOhDnSEHagIOQJMB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/dJNC62
h8woG0VEX9/jB/gawLnUzmHuBk1gAU303usmQ3Y7wVrNYajA2dcGrNZAxLRHobsW
wXP/NexS4b1xIkDKfYby6QthXMMmUguH4zSQOPnZL8KR+iqMoartWDNiN9d78ShZ
wHopl/5lJSIklWuSXCKm6Fi6PWjLjqgD5WME7azE+KkBjuKJQNRKWG5AwJARHqae
CAdVGtgzlCpjbh1SjUI0jxrEwlXIrG+nl4/HMWSErMV69vUzPWOtNq8tSYhjnUfv
dNK6IyP1J1Qkv9q2EOcrwU3muH8oPDZp9qZTlCuWQ+kEsZvrzh3cVOqAMv63V3ZB
khHTMFMb2433fw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:37 2026 by rpki-client