Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: 0fViQGHdJ0I8Q0liOvC059bKcfrf1+MbT1uOFg8IWwQ=
Subject key identifier: 02:02:FF:47:A8:BB:5E:22:EF:9B:43:99:42:2E:A2:A0:E8:5F:1F:7C
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019CACB4BA0DD435DC917751EDA7531BCB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 1032
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (hash: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=)
2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: PdvFq3mB+Dy7wy7SrPyI1VAd7IFOSBudQd0kZ8c407s=)
3: cfefMU6VCTQ-krOdPG6PUT0K-AE.roa (hash: /iqY0OlFoitueMsNG0GZcTyMYyjjsKmq3zEGu1XC6Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ba:0d:d4:35:dc:91:77:51:ed:a7:53:1b:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=0202ff47a8bb5e22ef9b4399422ea2a0e85f1f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:63:b0:4a:00:1a:26:67:b2:fb:7f:c3:e2:
ad:c9:c1:38:9b:d1:34:57:52:6e:ae:5b:2b:dd:59:
53:81:fb:e7:fd:fd:a5:3a:29:93:1e:d7:5e:57:e0:
f3:2a:60:f3:95:38:b9:47:33:a7:c8:44:45:74:58:
14:67:a6:fc:9e:6a:ae:16:50:2b:8d:50:d8:2b:3c:
f3:26:95:31:59:db:ec:f5:da:62:5d:7c:53:6d:35:
77:62:b4:82:0f:96:2f:f5:37:1b:56:7b:89:ac:fd:
f4:c1:52:7f:b7:d5:74:29:98:49:9b:14:49:f9:e6:
b5:8c:ef:bc:3d:77:03:bf:a0:8e:66:19:57:ab:1c:
d7:17:bd:89:c8:d3:63:86:b7:60:81:37:2e:2c:9a:
5d:8b:00:8e:b1:7c:ec:8f:65:62:a6:d0:08:30:ac:
ea:f7:0a:95:17:61:a6:1c:e9:40:5a:78:11:7a:34:
ac:55:ee:09:4f:e2:12:22:4d:ab:49:15:e4:8b:58:
6d:bc:e9:06:88:63:96:ff:f0:2c:a3:97:97:16:8b:
71:cb:ef:0c:62:5a:7e:12:30:7e:39:5e:86:0f:e3:
4d:8b:d8:8d:d7:54:3a:a1:ee:c6:cb:ac:21:91:79:
7d:3b:68:d5:3f:72:d3:ff:27:a8:b4:76:e6:14:86:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:FF:47:A8:BB:5E:22:EF:9B:43:99:42:2E:A2:A0:E8:5F:1F:7C
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:16:d6:7b:97:57:79:ec:88:dd:da:2a:02:b2:7b:07:9a:7b:
96:20:0d:fd:9d:b3:0f:8c:ee:4d:8d:ae:82:a6:71:b0:3f:9a:
e9:00:3a:49:1e:fa:d7:e6:d3:3a:e1:1a:11:d8:c7:0a:3d:f5:
94:07:15:0c:44:e1:31:78:6b:1a:26:92:64:8f:b6:2a:1c:8d:
aa:0a:e8:b1:49:fd:83:9b:72:fb:cc:28:41:56:1a:33:76:ff:
8d:dd:b5:be:04:1c:48:35:b1:e4:60:f7:06:a0:ad:10:63:22:
19:43:37:3b:f5:1b:6f:27:c9:a7:e3:08:c1:0d:a8:5f:30:99:
a5:7e:bb:e8:6a:5f:4f:86:9d:d3:06:9d:42:bf:fb:c6:ff:db:
c7:b2:bb:f9:21:99:e9:40:0a:bb:c7:99:69:c2:6f:7e:3e:e2:
d8:19:35:6b:d7:23:da:b0:fc:c9:03:1d:1e:47:7f:f7:a9:0c:
cd:3b:e3:ea:4a:54:d9:6c:c5:cd:b9:cb:92:c4:3e:e5:7e:83:
11:90:03:ba:a3:c4:10:03:fa:17:cb:45:3e:19:37:ce:24:b0:
e5:55:95:38:35:bc:ce:07:40:4a:f2:0c:88:ea:21:09:d7:21:
d3:87:92:4c:76:6b:5f:f7:04:32:a6:b0:bf:b3:05:17:06:9c:
37:4f:df:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystLoN1DXckXdR7adTG8sIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YTRiMzVjOGUwMjU2ZWFhMmZiZjc1MWU2YzAxZTVlOTA5
YzBhMWYwHhcNMjYwMzAyMDQwMDUxWhcNMjYwMzAzMDQwMDUxWjAzMTEwLwYDVQQD
EygwMjAyZmY0N2E4YmI1ZTIyZWY5YjQzOTk0MjJlYTJhMGU4NWYxZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgdjsEoAGiZnsvt/w+KtycE4m9E0
V1Jurlsr3VlTgfvn/f2lOimTHtdeV+DzKmDzlTi5RzOnyERFdFgUZ6b8nmquFlAr
jVDYKzzzJpUxWdvs9dpiXXxTbTV3YrSCD5Yv9TcbVnuJrP30wVJ/t9V0KZhJmxRJ
+ea1jO+8PXcDv6COZhlXqxzXF72JyNNjhrdggTcuLJpdiwCOsXzsj2ViptAIMKzq
9wqVF2GmHOlAWngRejSsVe4JT+ISIk2rSRXki1htvOkGiGOW//Aso5eXFotxy+8M
Ylp+EjB+OV6GD+NNi9iN11Q6oe7Gy6whkXl9O2jVP3LT/yeotHbmFIa8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIC/0eou14i75tDmUIuoqDoXx98MB8GA1UdIwQY
MBaAFEaks1yOAlbqovv3UebAHl6QnAofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmIt
MTE3ODg2ZWI3ZDY3LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmItMTE3ODg2ZWI3ZDY3
LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhbWe5dX
eeyI3doqArJ7B5p7liAN/Z2zD4zuTY2ugqZxsD+a6QA6SR761+bTOuEaEdjHCj31
lAcVDEThMXhrGiaSZI+2KhyNqgrosUn9g5ty+8woQVYaM3b/jd21vgQcSDWx5GD3
BqCtEGMiGUM3O/UbbyfJp+MIwQ2oXzCZpX676GpfT4ad0wadQr/7xv/bx7K7+SGZ
6UAKu8eZacJvfj7i2Bk1a9cj2rD8yQMdHkd/96kMzTvj6kpU2WzFzbnLksQ+5X6D
EZADuqPEEAP6F8tFPhk3ziSw5VWVODW8zgdASvIMiOohCdch04eSTHZrX/cEMqaw
v7MFFwacN0/fxw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:06 2026 by rpki-client