Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: nQ3VHenmeDZe9f0hzk6UgQEd1Mi8as/gbc7dT7oKo6Y=
Subject key identifier: 2A:A1:DE:B6:59:7E:3E:C3:88:3A:57:E4:51:06:A1:59:61:C5:59:4A
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019D9962A95E8C66D6BF8484A4E666139765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0983
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: TZWXF0O7O1h1lQytEhK4gbNrJO+rbqLQGD3j/CrPDhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a9:5e:8c:66:d6:bf:84:84:a4:e6:66:13:97:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=2aa1deb6597e3ec3883a57e45106a15961c5594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:fa:48:ab:24:95:80:8a:62:06:37:d2:82:
9b:ff:f9:e0:b1:88:31:37:38:66:9f:75:f5:5f:ac:
96:e3:33:00:6c:2c:6b:74:81:79:c5:18:65:85:7f:
d9:d2:ac:06:a3:39:e3:b5:10:be:36:d6:eb:3e:e3:
44:18:19:6d:60:31:2d:9b:6b:fb:45:ce:68:1f:ab:
2e:0e:c0:91:2f:5f:b7:e1:0a:93:4e:29:a5:34:a6:
ff:1f:22:a1:6e:02:f2:f6:e2:fe:2f:d9:0e:30:4c:
64:b4:e4:c3:0d:4e:7f:24:a3:f5:bf:91:03:5b:b8:
fb:c8:c2:e3:66:73:63:ce:63:16:db:fe:8e:16:0a:
84:1f:6d:69:c8:cd:06:b9:94:2b:34:31:a3:1e:51:
30:e4:bc:3c:f6:38:db:51:e0:a0:26:4e:4f:1d:d7:
aa:09:48:25:6a:7e:79:d1:15:50:5b:9a:47:48:56:
d9:77:16:7b:5e:4d:21:25:05:86:29:67:4c:2a:ea:
21:5f:6c:b0:d7:a5:0d:1a:54:cd:7b:75:69:29:e9:
3a:d2:06:be:4d:c7:9f:f5:55:d7:e2:73:78:ec:9e:
c7:86:31:b4:7c:9a:ef:b9:29:d1:25:ad:98:e4:06:
b9:b8:00:7d:a5:d6:01:10:50:07:2b:66:8a:c7:0e:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A1:DE:B6:59:7E:3E:C3:88:3A:57:E4:51:06:A1:59:61:C5:59:4A
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7b:f6:69:4e:d4:06:b3:76:3e:df:90:04:49:8e:4a:bb:7f:
be:08:c9:ff:fb:d3:ae:ef:97:35:16:31:64:62:b6:52:29:6e:
10:51:71:60:67:59:7d:e9:cf:c6:bb:9f:81:42:a7:96:cf:0b:
57:ce:75:f9:38:4d:39:c6:25:a4:0f:88:ef:23:4d:64:6d:f3:
81:14:d8:86:1c:39:3f:55:66:de:fb:02:fb:1d:31:9c:e6:bf:
9c:54:05:9f:f3:2b:c6:30:6d:10:10:5e:6e:cf:72:43:1a:6f:
7f:06:4e:79:fa:24:ea:56:29:49:60:52:6d:7d:b7:3a:cd:41:
fb:70:40:f3:d1:fa:2d:41:80:4c:53:ad:eb:42:4e:48:dc:d8:
0d:6f:be:09:1e:c9:5a:c1:9c:ed:cc:5d:28:c1:22:15:3f:d9:
a3:d6:c5:b3:f1:6b:c9:a5:96:fe:ad:b7:84:d8:7f:97:4c:9f:
75:39:46:01:c9:f5:c9:17:61:01:d0:40:7f:f7:34:e1:23:5d:
fa:06:40:5c:99:ef:b3:07:38:97:84:0b:c6:ce:55:2f:2f:79:
19:75:f2:53:74:40:58:d1:c4:0f:b0:8f:9a:af:bf:13:99:1f:
7d:84:38:ea:4e:4b:c7:1b:72:7c:06:30:d4:69:7c:37:7e:3f:
7f:4d:4a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYqlejGbWv4SEpOZmE5dlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjYwNDE3MDMwMTEzWhcNMjYwNDE4MDMwMTEzWjAzMTEwLwYDVQQD
EygyYWExZGViNjU5N2UzZWMzODgzYTU3ZTQ1MTA2YTE1OTYxYzU1OTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pH6SKsklYCKYgY30oKb//ngsYgx
Nzhmn3X1X6yW4zMAbCxrdIF5xRhlhX/Z0qwGoznjtRC+NtbrPuNEGBltYDEtm2v7
Rc5oH6suDsCRL1+34QqTTimlNKb/HyKhbgLy9uL+L9kOMExktOTDDU5/JKP1v5ED
W7j7yMLjZnNjzmMW2/6OFgqEH21pyM0GuZQrNDGjHlEw5Lw89jjbUeCgJk5PHdeq
CUglan550RVQW5pHSFbZdxZ7Xk0hJQWGKWdMKuohX2yw16UNGlTNe3VpKek60ga+
Tcef9VXX4nN47J7HhjG0fJrvuSnRJa2Y5Aa5uAB9pdYBEFAHK2aKxw4MTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqh3rZZfj7DiDpX5FEGoVlhxVlKMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXv2aU7U
BrN2Pt+QBEmOSrt/vgjJ//vTru+XNRYxZGK2UiluEFFxYGdZfenPxrufgUKnls8L
V851+ThNOcYlpA+I7yNNZG3zgRTYhhw5P1Vm3vsC+x0xnOa/nFQFn/MrxjBtEBBe
bs9yQxpvfwZOefok6lYpSWBSbX23Os1B+3BA89H6LUGATFOt60JOSNzYDW++CR7J
WsGc7cxdKMEiFT/Zo9bFs/FryaWW/q23hNh/l0yfdTlGAcn1yRdhAdBAf/c04SNd
+gZAXJnvswc4l4QLxs5VLy95GXXyU3RAWNHED7CPmq+/E5kffYQ46k5LxxtyfAYw
1Gl8N34/f01KZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:45 2026 by rpki-client