Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: q1JM1eAJr5wcB10ah6HVJMzSSaSY6Y5iuq6ElbkgWIw=
Subject key identifier: 17:E2:07:15:07:8A:0E:03:EF:53:64:CC:39:07:31:0C:78:6F:61:1B
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 019CAC7DF952982DA532F01904C0F986E6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 12C9
Signing time: Mon 02 Mar 2026 03:01:02 +0000
Manifest this update: Mon 02 Mar 2026 03:01:02 +0000
Manifest next update: Tue 03 Mar 2026 03:01:02 +0000
Files and hashes: 1: DzshirtWicNrDuK0JWqKHNIqs0I.roa (hash: T2DQWKAIsgzJl63HpzB70Owqfsg5T+wUK5RjGOLK3uY=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: s0b+0IeDyyJl2Gj1sGnrUks262HjTdEOJp0S2kW4+cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f9:52:98:2d:a5:32:f0:19:04:c0:f9:86:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Mar 2 03:01:02 2026 GMT
Not After : Mar 3 03:01:02 2026 GMT
Subject: CN=17e20715078a0e03ef5364cc3907310c786f611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:46:05:54:43:b8:b3:ee:e9:65:25:a2:97:
c6:59:a7:dc:6b:78:17:00:16:2f:35:c4:5b:ef:c2:
5c:05:15:e1:51:42:f0:72:80:48:0d:6a:d6:fd:d3:
97:e7:bc:d3:29:48:cc:3a:dd:92:56:b8:83:1e:9c:
3e:99:b1:25:b4:d0:80:7d:09:47:ec:36:1c:1f:05:
12:0f:fe:80:d1:56:7d:8f:99:f8:c6:45:a4:ef:14:
0d:45:64:8e:3c:dc:0e:d0:2a:f6:98:33:5b:e2:88:
61:a7:24:fe:2b:84:7d:23:8a:28:bb:68:b1:ff:7a:
b8:78:68:e6:11:5f:c4:e9:2e:9d:f4:f9:55:e6:24:
8d:cd:a7:93:42:f5:c1:91:41:a2:53:ba:d1:c9:0a:
db:2c:03:15:0f:b4:c5:1e:e7:3f:78:5f:73:38:b2:
98:32:43:8f:10:d7:7c:02:97:d5:2c:1d:f7:9f:8f:
04:a6:36:92:04:0d:91:c4:2f:98:0f:0a:3c:94:d9:
93:07:56:c1:44:1b:25:45:66:f9:56:f5:14:a0:28:
4b:6b:f1:e9:ac:a5:40:f8:73:d6:9f:ec:27:fe:22:
a2:2d:79:6c:77:66:f6:30:b0:68:5d:25:6f:bc:27:
39:b0:14:41:ab:36:d1:a0:66:bb:22:c3:43:07:2b:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:07:15:07:8A:0E:03:EF:53:64:CC:39:07:31:0C:78:6F:61:1B
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:67:7c:95:89:ac:7e:30:ad:4d:8f:8c:7e:de:04:00:3b:
1e:aa:66:55:3d:c0:cf:f4:23:41:aa:6b:53:d2:97:f9:7b:a5:
6a:7a:2f:83:1f:0f:e2:de:6c:58:1d:76:f4:08:5b:2e:59:6c:
81:63:56:ed:91:86:56:a3:64:ba:ca:b4:b5:a1:24:97:77:1a:
45:16:af:3b:df:8a:1d:6e:81:2c:89:82:3c:07:06:4d:d0:69:
66:f4:12:6f:bd:b7:83:eb:de:ed:2a:79:f9:60:53:d1:51:bf:
f2:8b:7f:b2:e9:4f:e2:21:e9:ba:8d:a4:e5:60:16:be:6e:6d:
cd:91:7e:0b:7b:d1:28:63:d8:6e:5f:bd:3a:b9:2d:75:9f:cb:
b1:0c:1e:af:5d:23:ce:26:75:2f:f8:60:22:ac:b3:49:f1:40:
52:d6:c6:cd:7b:c1:07:98:15:8a:ef:10:fa:8e:69:2c:1b:21:
62:76:29:ad:5a:0c:5e:26:b7:ae:0b:f8:ba:17:eb:39:34:f8:
94:7a:dc:fa:f8:8e:e3:a4:be:11:40:ff:95:5a:38:41:da:cd:
62:f1:a9:4f:a8:7c:cd:52:0e:26:1a:9c:47:33:08:dd:42:26:
c1:78:84:58:b8:62:59:c4:06:0b:5b:67:df:f9:c2:25:57:1a:
ad:2b:87:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfflSmC2lMvAZBMD5hubxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj
NWU5NTAwHhcNMjYwMzAyMDMwMTAyWhcNMjYwMzAzMDMwMTAyWjAzMTEwLwYDVQQD
EygxN2UyMDcxNTA3OGEwZTAzZWY1MzY0Y2MzOTA3MzEwYzc4NmY2MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxFGBVRDuLPu6WUlopfGWafca3gX
ABYvNcRb78JcBRXhUULwcoBIDWrW/dOX57zTKUjMOt2SVriDHpw+mbEltNCAfQlH
7DYcHwUSD/6A0VZ9j5n4xkWk7xQNRWSOPNwO0Cr2mDNb4ohhpyT+K4R9I4oou2ix
/3q4eGjmEV/E6S6d9PlV5iSNzaeTQvXBkUGiU7rRyQrbLAMVD7TFHuc/eF9zOLKY
MkOPENd8ApfVLB33n48EpjaSBA2RxC+YDwo8lNmTB1bBRBslRWb5VvUUoChLa/Hp
rKVA+HPWn+wn/iKiLXlsd2b2MLBoXSVvvCc5sBRBqzbRoGa7IsNDByt+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfiBxUHig4D71NkzDkHMQx4b2EbMB8GA1UdIwQY
MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt
OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0
LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6tnfJWJ
rH4wrU2PjH7eBAA7HqpmVT3Az/QjQaprU9KX+Xulanovgx8P4t5sWB129AhbLlls
gWNW7ZGGVqNkusq0taEkl3caRRavO9+KHW6BLImCPAcGTdBpZvQSb723g+ve7Sp5
+WBT0VG/8ot/sulP4iHpuo2k5WAWvm5tzZF+C3vRKGPYbl+9OrktdZ/LsQwer10j
ziZ1L/hgIqyzSfFAUtbGzXvBB5gViu8Q+o5pLBshYnYprVoMXia3rgv4uhfrOTT4
lHrc+viO46S+EUD/lVo4QdrNYvGpT6h8zVIOJhqcRzMI3UImwXiEWLhiWcQGC1tn
3/nCJVcarSuHHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:15 2026 by rpki-client