Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: VSoFRlp41kRWaEt/jXMZXW0JlYjrdHyqZ4qkpUgEKPs=
Subject key identifier: B8:47:13:0D:A4:38:31:76:4F:7C:AA:AF:5E:E2:7C:BB:81:10:09:E6
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019D98F4812DCFEE777BA42E5B990CD8896A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 0311
Signing time: Fri 17 Apr 2026 01:00:53 +0000
Manifest this update: Fri 17 Apr 2026 01:00:53 +0000
Manifest next update: Sat 18 Apr 2026 01:00:53 +0000
Files and hashes: 1: A5iuXW_cORbsvixFXow7PusXUbs.roa (hash: +5gLj6Wt4ZaNqfSC+m0HrIiKPOrW2+yDa66ixdPJ/8M=)
2: ih8GcxAhVwfWwQlPUzpQuVOLe-c.roa (hash: 3wfNubXgjKJ1/TUZb+D2ubigUZwrjebFGAnwYbZd+Zg=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: ZovdBTjcK4eQNB4XIAuHYpyo8W9C7t44aQjx4tcmjqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:81:2d:cf:ee:77:7b:a4:2e:5b:99:0c:d8:89:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Apr 17 01:00:53 2026 GMT
Not After : Apr 18 01:00:53 2026 GMT
Subject: CN=b847130da43831764f7caaaf5ee27cbb811009e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:8f:ea:53:49:11:f9:5b:bf:52:ff:e8:53:
55:7a:d2:26:8b:c0:ff:87:19:39:51:f4:8d:cf:82:
68:17:99:43:b0:8b:6e:1b:44:b4:a2:e8:a8:e9:24:
f2:ab:19:63:42:eb:51:dd:bd:4d:8a:8d:68:ae:1a:
02:54:73:39:c1:cc:dd:b5:75:4a:c6:55:e2:84:43:
5c:8a:09:da:f8:1a:f6:20:9b:92:35:9f:b5:e3:e1:
f0:bc:58:de:a6:8d:39:17:74:cd:6e:87:ee:dd:c7:
f1:c3:b2:27:bf:bd:4e:9c:17:59:fc:43:8c:ba:44:
94:9c:52:4d:2f:64:4d:af:ab:72:ac:ad:2e:08:ff:
48:ab:94:56:51:0d:af:89:b5:b6:03:8e:9e:73:f5:
d3:cc:23:7d:87:a6:1b:a3:2f:6d:1c:bc:4a:42:d9:
aa:21:d7:78:1d:73:16:cf:a2:5e:10:a6:88:aa:e7:
84:5b:5b:e7:b1:c7:f0:7f:a5:7d:79:56:cd:bc:00:
f6:12:48:16:85:35:40:95:1e:d2:2d:c5:e8:bc:ff:
fe:e2:48:20:90:0e:08:68:c8:6f:37:e3:2e:b6:8f:
e0:7d:6e:37:50:2b:2f:64:e0:85:3e:76:64:68:1f:
6e:96:11:0e:17:82:44:3c:c5:57:9b:61:77:da:a8:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:47:13:0D:A4:38:31:76:4F:7C:AA:AF:5E:E2:7C:BB:81:10:09:E6
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ba:50:ee:b7:58:16:bb:54:41:68:8a:8a:6e:79:fe:1f:cf:
16:97:c9:16:92:04:f1:57:42:2f:00:8a:a3:41:37:e3:86:4e:
3c:f7:df:1f:3a:a9:1d:aa:18:bc:c3:71:68:99:32:bf:02:68:
a8:55:aa:20:a7:1b:97:42:f1:35:a2:47:40:4f:3a:18:b7:13:
b2:5b:69:d1:22:29:47:b8:81:09:c3:e4:c6:66:4e:b8:e3:4b:
9c:19:7b:18:29:2f:87:9d:25:ca:76:99:d6:89:c7:da:7a:6b:
3e:4b:d8:b0:d7:11:5d:4e:68:56:25:c5:34:58:d5:e3:3b:72:
79:ba:dd:48:01:fa:1b:14:7d:f4:02:fa:97:dd:94:a4:f8:bc:
a5:4f:fc:91:8c:30:04:87:55:3a:ed:c2:e7:72:c5:a3:f0:a5:
bf:ec:74:ea:a1:ac:80:54:e0:07:60:b3:88:74:db:6a:54:21:
e6:a1:7e:5e:31:d8:00:3a:98:fa:66:a9:89:6b:b5:38:01:c5:
84:bf:8a:88:57:2c:51:0b:4d:47:b6:0a:a0:12:ba:3c:80:56:
ba:60:49:9d:92:84:b1:48:e0:9a:2f:3a:36:fc:7c:28:79:5d:
fd:3c:0e:0f:75:39:96:c9:4c:d7:98:dd:1d:b9:27:a8:70:73:
9b:d6:64:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9IEtz+53e6QuW5kM2IlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTIxMjk1OGQ4ZTFiYWExNDRhODJhODIxZjkzYTg5MGRj
YmE0OWEwHhcNMjYwNDE3MDEwMDUzWhcNMjYwNDE4MDEwMDUzWjAzMTEwLwYDVQQD
EyhiODQ3MTMwZGE0MzgzMTc2NGY3Y2FhYWY1ZWUyN2NiYjgxMTAwOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mCP6lNJEflbv1L/6FNVetImi8D/
hxk5UfSNz4JoF5lDsItuG0S0ouio6STyqxljQutR3b1Nio1orhoCVHM5wczdtXVK
xlXihENcigna+Br2IJuSNZ+14+HwvFjepo05F3TNbofu3cfxw7Inv71OnBdZ/EOM
ukSUnFJNL2RNr6tyrK0uCP9Iq5RWUQ2vibW2A46ec/XTzCN9h6Yboy9tHLxKQtmq
Idd4HXMWz6JeEKaIqueEW1vnscfwf6V9eVbNvAD2EkgWhTVAlR7SLcXovP/+4kgg
kA4IaMhvN+Muto/gfW43UCsvZOCFPnZkaB9ulhEOF4JEPMVXm2F32qg5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhHEw2kODF2T3yqr17ifLuBEAnmMB8GA1UdIwQY
MBaAFKpSEpWNjhuqFEqCqCH5OokNy6SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYt
YjQwMWE0YTA0NDkyLzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYtYjQwMWE0YTA0NDky
LzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbpQ7rdY
FrtUQWiKim55/h/PFpfJFpIE8VdCLwCKo0E344ZOPPffHzqpHaoYvMNxaJkyvwJo
qFWqIKcbl0LxNaJHQE86GLcTsltp0SIpR7iBCcPkxmZOuONLnBl7GCkvh50lynaZ
1onH2nprPkvYsNcRXU5oViXFNFjV4ztyebrdSAH6GxR99AL6l92UpPi8pU/8kYww
BIdVOu3C53LFo/Clv+x06qGsgFTgB2CziHTbalQh5qF+XjHYADqY+mapiWu1OAHF
hL+KiFcsUQtNR7YKoBK6PIBWumBJnZKEsUjgmi86Nvx8KHld/TwOD3U5lslM15jd
HbknqHBzm9Zk8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:54:31 2026 by rpki-client