Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: J+WsbB2GnG63ESco5bQ8k3Dq35CORC2HtVU2PmjagWw=
Subject key identifier: 08:17:B7:F8:21:85:D4:0D:53:93:99:84:67:E2:74:A6:0C:DE:A8:47
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019D9B50E4B5A2468EDA83F9517A034C0682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 17F7
Signing time: Fri 17 Apr 2026 12:01:03 +0000
Manifest this update: Fri 17 Apr 2026 12:01:03 +0000
Manifest next update: Sat 18 Apr 2026 12:01:03 +0000
Files and hashes: 1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=)
2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: 0g+kf1tobTHYrOmAoJeKhXf43zcEaWFJIpFSt2DAvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e4:b5:a2:46:8e:da:83:f9:51:7a:03:4c:06:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Apr 17 12:01:03 2026 GMT
Not After : Apr 18 12:01:03 2026 GMT
Subject: CN=0817b7f82185d40d5393998467e274a60cdea847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:f3:ae:e1:59:9b:6b:e5:06:14:59:cf:1e:
19:39:98:38:2d:dc:1d:23:95:36:15:32:84:3a:ab:
1e:f1:8b:06:90:f4:af:89:ad:27:6c:c8:02:85:50:
91:a3:92:fa:91:fd:35:72:0e:ce:ae:a6:f1:6a:d9:
a7:0a:71:28:1a:ad:05:8f:a5:a6:6f:c1:e4:71:b6:
c6:d1:cc:1e:65:c1:a1:1b:5c:71:02:20:cc:2b:fe:
ae:a1:fe:69:f6:3b:fc:3d:4b:94:45:4e:03:c8:ca:
88:71:78:3b:3e:bd:32:bd:5c:6c:2d:8a:1d:b5:57:
42:12:35:f0:9f:c1:6f:f4:57:4a:d9:2a:5e:79:ca:
71:ad:44:f5:aa:85:f2:41:19:f6:20:84:9b:5e:9e:
dd:a2:19:0c:4f:5a:a8:82:05:25:50:eb:b3:e2:00:
a0:f4:e8:ec:8b:f0:ce:24:01:2b:0b:98:9d:2a:ff:
94:df:c3:f2:71:c1:92:55:e6:2a:a7:2c:37:d5:de:
54:ec:47:cd:f6:54:4a:46:c0:18:2f:00:f1:df:85:
2d:2c:8c:00:45:aa:d9:ee:6c:65:3b:a5:91:98:77:
25:66:dc:a8:0b:03:af:b5:85:ed:05:ae:7a:8f:1c:
57:d2:58:75:f0:b0:81:94:7d:e4:1f:0e:e8:f2:8c:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:B7:F8:21:85:D4:0D:53:93:99:84:67:E2:74:A6:0C:DE:A8:47
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ce:d0:64:22:10:cd:cb:0b:3c:17:27:89:c7:02:38:a3:79:
c6:71:db:61:b4:16:7f:90:88:83:66:e9:21:d6:98:9b:99:43:
ae:4d:e7:18:5b:7c:8f:4f:aa:2e:62:57:44:35:63:3e:27:48:
b9:f8:13:ec:a3:00:8b:9f:c4:b3:17:0a:b2:7e:4c:cc:ce:8d:
1e:f5:13:5a:1e:43:86:57:23:35:f8:49:35:5c:08:ee:09:58:
a1:46:17:23:12:a8:a0:8a:46:3e:76:03:27:34:f9:4c:49:ee:
98:73:46:a0:08:81:75:76:e3:d9:ba:3e:b8:96:be:85:c2:84:
77:ee:ed:34:9c:9a:1c:d7:05:c9:ed:7f:5c:a2:af:7e:16:e8:
e8:79:24:39:e8:62:a8:5f:db:1f:7f:e8:79:10:10:d5:8b:47:
ed:e7:01:16:86:66:bb:08:b7:30:c9:e2:56:ce:26:70:16:66:
6e:d9:a0:7f:1a:ef:f6:a5:af:c9:9e:6b:07:5d:85:61:e4:0e:
6d:da:c8:a1:ba:86:db:e8:b0:09:f4:4b:72:e4:4b:d5:55:00:
e9:05:d1:26:0a:66:36:87:6e:1e:f2:29:50:68:30:5c:54:d2:
07:2e:a1:b2:88:40:66:48:a0:07:23:58:08:b9:0e:08:e3:95:
e3:34:ab:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUOS1okaO2oP5UXoDTAaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk
MGMzYzkwHhcNMjYwNDE3MTIwMTAzWhcNMjYwNDE4MTIwMTAzWjAzMTEwLwYDVQQD
EygwODE3YjdmODIxODVkNDBkNTM5Mzk5ODQ2N2UyNzRhNjBjZGVhODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KbzruFZm2vlBhRZzx4ZOZg4Ldwd
I5U2FTKEOqse8YsGkPSvia0nbMgChVCRo5L6kf01cg7OrqbxatmnCnEoGq0Fj6Wm
b8HkcbbG0cweZcGhG1xxAiDMK/6uof5p9jv8PUuURU4DyMqIcXg7Pr0yvVxsLYod
tVdCEjXwn8Fv9FdK2SpeecpxrUT1qoXyQRn2IISbXp7dohkMT1qoggUlUOuz4gCg
9Ojsi/DOJAErC5idKv+U38PyccGSVeYqpyw31d5U7EfN9lRKRsAYLwDx34UtLIwA
RarZ7mxlO6WRmHclZtyoCwOvtYXtBa56jxxX0lh18LCBlH3kHw7o8oysKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgXt/ghhdQNU5OZhGfidKYM3qhHMB8GA1UdIwQY
MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD87QZCIQ
zcsLPBcniccCOKN5xnHbYbQWf5CIg2bpIdaYm5lDrk3nGFt8j0+qLmJXRDVjPidI
ufgT7KMAi5/EsxcKsn5MzM6NHvUTWh5DhlcjNfhJNVwI7glYoUYXIxKooIpGPnYD
JzT5TEnumHNGoAiBdXbj2bo+uJa+hcKEd+7tNJyaHNcFye1/XKKvfhbo6HkkOehi
qF/bH3/oeRAQ1YtH7ecBFoZmuwi3MMniVs4mcBZmbtmgfxrv9qWvyZ5rB12FYeQO
bdrIobqG2+iwCfRLcuRL1VUA6QXRJgpmNoduHvIpUGgwXFTSBy6hsohAZkigByNY
CLkOCOOV4zSrBA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:23 2026 by rpki-client