Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: 55xA7p9WUJT62012jIR2sjxO7UbVQY+BTWLVM8qz+tQ=
Subject key identifier: 91:3F:D6:48:9C:12:8D:CC:27:BF:93:01:B9:1D:F7:92:E8:7D:23:65
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019DA4C1B25F9A2E2487DEB3AB567B66E961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 023E
Signing time: Sun 19 Apr 2026 08:00:50 +0000
Manifest this update: Sun 19 Apr 2026 08:00:50 +0000
Manifest next update: Mon 20 Apr 2026 08:00:50 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: GNPQrRNbD74A+glXLDGUgPZCLHVWRCKkOibl06rJV1A=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:b2:5f:9a:2e:24:87:de:b3:ab:56:7b:66:e9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Apr 19 08:00:50 2026 GMT
Not After : Apr 20 08:00:50 2026 GMT
Subject: CN=913fd6489c128dcc27bf9301b91df792e87d2365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:af:09:d5:72:e6:3e:11:8e:74:46:a9:1f:
0c:6b:5b:8a:8a:9b:80:ab:fe:02:c8:1d:3d:ad:7f:
02:6b:f1:2f:b1:37:db:c2:b5:c1:6d:87:fc:00:f5:
fc:27:ad:bd:f3:33:3a:ba:e3:5d:bc:de:c3:00:a8:
91:21:66:a5:ed:9b:45:14:a6:91:8e:3c:1e:ea:72:
b4:9d:f3:8d:3c:67:75:4e:ad:ba:41:12:ea:5d:d9:
50:55:08:7a:af:01:db:f6:58:65:aa:1c:86:2d:b3:
13:0f:9c:59:6c:5e:38:da:db:ab:67:74:2e:3e:7d:
14:64:02:9f:64:c5:3e:07:2d:de:51:f9:72:ed:9b:
ce:52:d2:e3:28:d4:06:26:3b:fa:3f:c2:d9:96:93:
d1:2a:07:3f:ae:aa:15:84:54:4f:e0:81:47:51:0d:
a3:59:9a:7b:d1:83:37:1a:29:cb:e6:9d:c5:cc:98:
51:25:06:a1:2f:55:fb:f4:7e:3c:1c:f8:1c:14:59:
e0:fa:57:4d:29:f3:5a:9f:71:07:8f:24:ac:08:94:
0c:ad:f5:ee:9e:b0:29:f9:0f:cc:c0:a6:dd:94:26:
aa:fa:b9:fb:56:e0:57:11:e0:83:ca:67:77:61:f8:
aa:f2:da:21:ee:a6:d0:06:f9:e2:87:93:4e:6e:af:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3F:D6:48:9C:12:8D:CC:27:BF:93:01:B9:1D:F7:92:E8:7D:23:65
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:62:75:34:55:6d:b8:8a:fa:e7:69:98:4b:38:1f:c9:ee:0b:
88:ae:93:5f:56:f4:3e:aa:c5:59:5b:04:e0:a2:99:08:7f:86:
49:96:f0:7f:65:94:57:43:2b:f0:6b:57:b9:bb:8c:9b:53:3a:
39:9c:81:1b:50:fd:41:f3:88:fb:9c:ff:a1:d7:f1:76:42:73:
54:54:94:ed:f8:69:09:7f:b9:a4:6f:2d:42:17:7b:09:55:fc:
3c:9d:b1:29:da:b0:b9:b8:2e:f1:82:75:a3:38:c6:68:9a:b0:
72:44:65:80:12:1b:09:8e:1f:a4:6a:47:1e:36:87:8a:87:a9:
2e:e4:0e:11:6f:9a:1b:8c:09:6b:fc:a7:49:10:19:a8:ae:f4:
2d:63:12:ff:12:15:6d:31:67:75:53:f4:f3:ab:0b:cd:6d:e9:
b3:c4:a2:ca:84:89:e2:c6:57:68:1b:34:53:8f:3a:65:5b:75:
15:20:e3:99:13:18:4d:31:37:c4:81:77:33:b4:39:68:b3:05:
9e:dd:3a:d7:24:e2:e4:16:13:84:39:6a:01:79:1d:0b:d1:cc:
2a:7c:94:68:1b:0f:48:ea:90:86:fc:cd:9d:03:76:31:ed:86:
35:4a:73:58:f8:fb:2d:94:27:20:fa:e1:a5:8a:4a:76:e4:c2:
3d:8c:9d:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwbJfmi4kh96zq1Z7ZulhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzBkM2I2OTlhYzVhZWZmMmRiODhhNWNiYzFjOWQ4ZDA5
YzcyMzEwHhcNMjYwNDE5MDgwMDUwWhcNMjYwNDIwMDgwMDUwWjAzMTEwLwYDVQQD
Eyg5MTNmZDY0ODljMTI4ZGNjMjdiZjkzMDFiOTFkZjc5MmU4N2QyMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKOvCdVy5j4RjnRGqR8Ma1uKipuA
q/4CyB09rX8Ca/EvsTfbwrXBbYf8APX8J6298zM6uuNdvN7DAKiRIWal7ZtFFKaR
jjwe6nK0nfONPGd1Tq26QRLqXdlQVQh6rwHb9lhlqhyGLbMTD5xZbF442turZ3Qu
Pn0UZAKfZMU+By3eUfly7ZvOUtLjKNQGJjv6P8LZlpPRKgc/rqoVhFRP4IFHUQ2j
WZp70YM3GinL5p3FzJhRJQahL1X79H48HPgcFFng+ldNKfNan3EHjySsCJQMrfXu
nrAp+Q/MwKbdlCaq+rn7VuBXEeCDymd3Yfiq8toh7qbQBvnih5NObq/orQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE/1kicEo3MJ7+TAbkd95LofSNlMB8GA1UdIwQY
MBaAFENw07aZrFrv8tuIpcvBydjQnHIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEt
MTQ1YTAxMjc4OTQ4LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEtMTQ1YTAxMjc4OTQ4
LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2J1NFVt
uIr652mYSzgfye4LiK6TX1b0PqrFWVsE4KKZCH+GSZbwf2WUV0Mr8GtXubuMm1M6
OZyBG1D9QfOI+5z/odfxdkJzVFSU7fhpCX+5pG8tQhd7CVX8PJ2xKdqwubgu8YJ1
ozjGaJqwckRlgBIbCY4fpGpHHjaHioepLuQOEW+aG4wJa/ynSRAZqK70LWMS/xIV
bTFndVP086sLzW3ps8SiyoSJ4sZXaBs0U486ZVt1FSDjmRMYTTE3xIF3M7Q5aLMF
nt061yTi5BYThDlqAXkdC9HMKnyUaBsPSOqQhvzNnQN2Me2GNUpzWPj7LZQnIPrh
pYpKduTCPYydLA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:50:36 2026 by rpki-client