Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: Bm2ucrhCgRoB/oe6NAXVPjF3Bt9KrPoNXiYC/IY5oSo=
Subject key identifier: 36:28:24:EC:F8:0A:C0:65:2D:25:23:81:15:45:94:CC:5A:AC:22:06
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019CAB6B29809B1D04A45287A349369C1959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 13E2
Signing time: Sun 01 Mar 2026 22:00:52 +0000
Manifest this update: Sun 01 Mar 2026 22:00:52 +0000
Manifest next update: Mon 02 Mar 2026 22:00:52 +0000
Files and hashes: 1: 3FimOljJosTayAtjbZa6x1Z1MXs.roa (hash: MeEGr+necOtlrJoGJSW1/wG4DV94jp5QrV4hS1BQHCg=)
2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: bqDV77BTikUWdEMVezASI/y1IgGMhIgYsVlYzFhrtbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:29:80:9b:1d:04:a4:52:87:a3:49:36:9c:19:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Mar 1 22:00:52 2026 GMT
Not After : Mar 2 22:00:52 2026 GMT
Subject: CN=362824ecf80ac0652d252381154594cc5aac2206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:ca:81:0b:d0:63:da:28:03:05:7c:98:d6:
9f:24:f2:50:cb:7b:c3:4c:11:6c:f5:e5:b1:c9:b4:
08:08:4d:4d:43:69:de:88:3a:b0:08:30:f5:8a:1f:
da:f6:ea:5e:66:57:e6:90:08:4e:15:ef:52:20:30:
f7:61:ae:8c:0c:23:cc:03:83:3e:fa:23:d1:b9:2a:
fd:2a:9a:35:a3:f1:70:c2:bd:4b:c4:1a:45:fa:76:
2d:b5:91:d2:7e:a2:ef:52:cf:7e:ae:7b:9e:80:0e:
c5:e7:9b:38:a6:a2:70:84:d3:e3:1f:c8:84:9b:f1:
95:d3:10:e0:8f:e5:aa:13:83:ea:c1:79:af:e9:8f:
bc:53:ff:a0:c4:61:54:87:12:3d:60:5a:f3:36:ce:
33:ff:4d:23:c7:3c:87:d0:85:26:16:d9:79:ea:be:
17:25:af:4a:97:01:84:e7:0e:76:e3:66:e6:7d:52:
e9:79:5d:ca:0c:b4:59:ea:32:25:61:12:86:79:c8:
b4:22:e3:6b:f8:79:fc:62:ae:cd:e0:7b:45:26:1a:
3f:f4:fe:61:7e:b0:9b:c8:60:f5:bf:c9:aa:00:ff:
bc:c2:ad:31:73:1f:81:ae:82:ee:77:c5:38:3a:46:
ee:58:a5:16:4d:02:55:f0:c4:36:ba:f7:a1:3a:ff:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:28:24:EC:F8:0A:C0:65:2D:25:23:81:15:45:94:CC:5A:AC:22:06
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4f:26:83:aa:c6:c3:df:42:18:68:3b:bf:ea:1e:e5:ad:ee:
72:da:c1:e9:17:ff:2e:ce:46:4b:c6:19:77:3d:ea:0c:97:08:
54:1f:f9:46:6e:70:90:43:ab:68:11:98:67:05:af:67:84:a0:
02:dc:ca:c8:66:cc:45:01:1e:49:29:c1:67:1e:61:2b:f6:6f:
7a:d5:cf:df:d5:b3:40:3b:0b:bc:e2:65:77:15:6b:40:75:bb:
ca:70:bf:8e:b5:21:21:6b:07:a7:56:98:73:87:66:03:46:01:
19:b4:20:31:52:5d:aa:08:cb:cf:29:1d:8f:fb:0c:0c:4c:dd:
66:a7:3d:ac:20:2f:98:74:92:4b:b9:8c:35:0e:64:49:2e:91:
77:b0:fa:2b:90:36:a1:66:45:31:01:67:cb:00:71:99:04:82:
c0:58:b0:87:6a:2f:a0:f9:5a:ec:55:cd:bc:8c:c9:c7:a9:8a:
cc:b9:de:3e:f3:41:d6:b1:34:83:4d:22:5f:43:bf:93:a7:d7:
3c:7f:6f:8c:59:58:60:09:bb:e0:73:12:c6:f5:40:f7:4b:44:
8a:82:76:1f:e4:73:a7:0c:7a:69:52:1d:dc:74:22:fe:7c:5b:
5a:48:1e:67:9e:9c:82:61:df:af:7e:ea:4f:73:32:98:d2:82:
2a:8b:8b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraymAmx0EpFKHo0k2nBlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj
ZTBmNmIwHhcNMjYwMzAxMjIwMDUyWhcNMjYwMzAyMjIwMDUyWjAzMTEwLwYDVQQD
EygzNjI4MjRlY2Y4MGFjMDY1MmQyNTIzODExNTQ1OTRjYzVhYWMyMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlrKgQvQY9ooAwV8mNafJPJQy3vD
TBFs9eWxybQICE1NQ2neiDqwCDD1ih/a9upeZlfmkAhOFe9SIDD3Ya6MDCPMA4M+
+iPRuSr9Kpo1o/Fwwr1LxBpF+nYttZHSfqLvUs9+rnuegA7F55s4pqJwhNPjH8iE
m/GV0xDgj+WqE4PqwXmv6Y+8U/+gxGFUhxI9YFrzNs4z/00jxzyH0IUmFtl56r4X
Ja9KlwGE5w5242bmfVLpeV3KDLRZ6jIlYRKGeci0IuNr+Hn8Yq7N4HtFJho/9P5h
frCbyGD1v8mqAP+8wq0xcx+BroLud8U4OkbuWKUWTQJV8MQ2uvehOv8IRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYoJOz4CsBlLSUjgRVFlMxarCIGMB8GA1UdIwQY
MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt
ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2
LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIE8mg6rG
w99CGGg7v+oe5a3uctrB6Rf/Ls5GS8YZdz3qDJcIVB/5Rm5wkEOraBGYZwWvZ4Sg
AtzKyGbMRQEeSSnBZx5hK/ZvetXP39WzQDsLvOJldxVrQHW7ynC/jrUhIWsHp1aY
c4dmA0YBGbQgMVJdqgjLzykdj/sMDEzdZqc9rCAvmHSSS7mMNQ5kSS6Rd7D6K5A2
oWZFMQFnywBxmQSCwFiwh2ovoPla7FXNvIzJx6mKzLnePvNB1rE0g00iX0O/k6fX
PH9vjFlYYAm74HMSxvVA90tEioJ2H+Rzpwx6aVId3HQi/nxbWkgeZ56cgmHfr37q
T3MymNKCKouLhw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:16 2026 by rpki-client