Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: iUqekxDhm5Z7qpTGqlNUec6HZK9Bm63+zA9wRDhm+IU=
Subject key identifier: 0B:7A:AD:6F:5F:BE:7B:7D:E3:5C:3A:94:97:E5:6D:B3:B8:26:72:CB
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019DA4F879114C2D775C16236B654593A2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 09:00:40 +0000
Manifest this update: Sun 19 Apr 2026 09:00:40 +0000
Manifest next update: Mon 20 Apr 2026 09:00:40 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: WscDSaBdwhQ00GiKl4dhGXikMGHJtl7eyFWicsjsSDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:79:11:4c:2d:77:5c:16:23:6b:65:45:93:a2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: Apr 19 09:00:40 2026 GMT
Not After : Apr 20 09:00:40 2026 GMT
Subject: CN=0b7aad6f5fbe7b7de35c3a9497e56db3b82672cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:fb:7f:bb:d7:bd:17:5a:50:6d:8a:28:2a:
28:b4:fa:c6:6d:fc:be:c0:e7:73:b1:f1:f1:41:44:
38:19:9e:fe:3c:6f:4c:48:e2:87:53:c1:a3:f0:be:
bd:2d:33:01:52:7f:ff:7c:3c:b3:b2:db:08:5f:08:
dd:4c:11:f2:e0:be:9d:fc:49:d3:9a:98:fa:92:5c:
d9:28:95:e8:94:f4:20:d9:40:4d:3a:d2:2c:31:a8:
e9:80:4a:56:dc:03:ce:4c:fd:e5:ce:bf:02:e0:6d:
5d:9f:a3:6c:cb:76:ca:b5:f4:bc:f1:13:53:1d:da:
f8:75:03:85:74:23:0c:c2:a0:1d:1f:eb:3c:26:da:
c3:d1:93:95:a7:7b:0e:cf:a5:1f:ea:19:99:c6:b1:
c5:ba:5b:da:ee:d7:e1:1a:79:76:3d:b7:31:df:07:
b2:0a:88:fe:b5:b8:e4:be:f2:fd:36:a7:0c:59:5d:
e3:02:be:e8:58:08:a7:a7:68:46:7b:41:2d:21:b2:
e5:45:9b:dc:b9:21:cf:18:0d:53:71:e7:0c:5c:ff:
81:68:aa:11:af:97:ab:25:43:7d:ff:0f:ad:1e:61:
11:14:22:2c:9b:c5:92:cd:8d:3b:b6:dc:67:e1:08:
03:66:6e:cf:f0:8f:ec:0c:ae:08:21:6b:0d:ef:27:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:AD:6F:5F:BE:7B:7D:E3:5C:3A:94:97:E5:6D:B3:B8:26:72:CB
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b8:53:ce:a2:2b:5b:47:d6:3d:ca:fa:8c:fd:9f:15:5c:7b:
36:0c:71:fb:f3:42:9a:66:27:e7:91:5d:05:fb:28:2c:be:95:
f7:65:da:f8:2e:6b:e4:c7:da:b1:ba:2e:60:f5:8f:9e:dd:f5:
09:f2:50:19:8d:da:7c:98:e6:ab:ea:ba:aa:bb:a9:9d:b9:d2:
ed:2c:00:68:60:4e:cb:0c:77:a4:6a:60:79:e2:46:5d:7e:b5:
8d:cb:54:41:6e:3c:28:f1:b6:88:1d:9f:fb:c8:4d:a4:45:c7:
45:d6:f6:7d:b7:2b:e3:81:0a:93:4d:db:42:2d:40:23:8d:12:
c1:d7:9e:c3:4e:4a:31:19:43:25:9c:3b:be:12:24:12:b5:35:
0d:06:f1:6f:26:ec:1f:0f:bf:e1:90:06:8b:58:18:89:8a:64:
e8:65:42:7a:71:d2:6a:9d:64:78:36:19:90:6c:9f:14:83:3d:
e2:70:2c:3d:f8:76:ba:c4:9c:68:aa:5d:c4:8e:c8:e0:0c:ec:
3e:db:0c:02:9b:45:02:df:5c:9e:23:d7:e8:a0:15:54:d7:4f:
aa:2f:cc:18:08:42:f8:2c:8e:13:7e:8e:26:c3:7a:2d:6e:5f:
51:48:95:00:05:7f:53:75:be:0d:ce:16:dc:c6:33:11:87:f1:
4d:c2:81:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+HkRTC13XBYja2VFk6KwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWYwNmEwNWJjMzI5ZjAwMDU1MTJiOWU4YjgxODUwM2I0
YTk3MDIwHhcNMjYwNDE5MDkwMDQwWhcNMjYwNDIwMDkwMDQwWjAzMTEwLwYDVQQD
EygwYjdhYWQ2ZjVmYmU3YjdkZTM1YzNhOTQ5N2U1NmRiM2I4MjY3MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTT7f7vXvRdaUG2KKCootPrGbfy+
wOdzsfHxQUQ4GZ7+PG9MSOKHU8Gj8L69LTMBUn//fDyzstsIXwjdTBHy4L6d/EnT
mpj6klzZKJXolPQg2UBNOtIsMajpgEpW3APOTP3lzr8C4G1dn6Nsy3bKtfS88RNT
Hdr4dQOFdCMMwqAdH+s8JtrD0ZOVp3sOz6Uf6hmZxrHFulva7tfhGnl2Pbcx3wey
Coj+tbjkvvL9NqcMWV3jAr7oWAinp2hGe0EtIbLlRZvcuSHPGA1TcecMXP+BaKoR
r5erJUN9/w+tHmERFCIsm8WSzY07ttxn4QgDZm7P8I/sDK4IIWsN7ycLpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt6rW9fvnt941w6lJflbbO4JnLLMB8GA1UdIwQY
MBaAFKqfBqBbwynwAFUSuei4GFA7SpcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9lMWNiODctZDhjNi00ZDMxLWE3OTgt
NGUyN2Q4OGIyODFhLzEvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9lMWNiODctZDhjNi00ZDMxLWE3OTgtNGUyN2Q4OGIyODFh
LzEvcXA4R29GdkRLZkFBVlJLNTZMZ1lVRHRLbHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbhTzqIr
W0fWPcr6jP2fFVx7Ngxx+/NCmmYn55FdBfsoLL6V92Xa+C5r5MfasbouYPWPnt31
CfJQGY3afJjmq+q6qrupnbnS7SwAaGBOywx3pGpgeeJGXX61jctUQW48KPG2iB2f
+8hNpEXHRdb2fbcr44EKk03bQi1AI40Swdeew05KMRlDJZw7vhIkErU1DQbxbybs
Hw+/4ZAGi1gYiYpk6GVCenHSap1keDYZkGyfFIM94nAsPfh2usScaKpdxI7I4Azs
PtsMAptFAt9cniPX6KAVVNdPqi/MGAhC+CyOE36OJsN6LW5fUUiVAAV/U3W+Dc4W
3MYzEYfxTcKBig==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:31:00 2026 by rpki-client