Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: 040bObcu3YkQSGIUdUX0Y/rvn6w2n6pYvWal2W0WCNg=
Subject key identifier: F1:99:E0:D1:91:07:BB:37:EB:77:82:6A:A6:4E:5A:16:6D:DB:32:5F
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 019CAAC70692600CA1A841F9D6131F153000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0F7C
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: GuUQabt2k0I5-qJJOMBc68ywwdc.roa (hash: Xq2BynkEhHcna9VYb0KvlZPGBlElBggMhxm3EhEPnM0=)
2: NSXY549oyeJh_ywPWUFsoFAfnFE.roa (hash: PqAKJQyPO77ShWqR8N9V3ypCb33ovrN70zA1E2ZocLc=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: QN5+Oy6RPpVtoH4LdpeefUQbFWPtOTlTZ2SeMOThuBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:06:92:60:0c:a1:a8:41:f9:d6:13:1f:15:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=f199e0d19107bb37eb77826aa64e5a166ddb325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:76:da:51:51:5d:41:e5:47:a4:b0:b1:92:
dd:0c:3b:7e:5e:53:ac:3c:ce:60:62:a6:12:46:5f:
c3:e6:95:0b:5e:10:49:b7:d3:69:3a:31:db:50:dd:
72:fe:5a:90:b1:60:55:3e:4f:f2:29:b2:f5:a3:52:
7d:fa:38:f8:26:b6:95:0a:35:9e:47:2e:ed:0c:a2:
a5:3d:6c:6a:c4:64:87:2f:da:fd:7d:74:f9:2c:ce:
65:d6:87:f4:0c:5b:ce:e7:15:aa:db:1f:0d:08:c3:
c3:59:66:de:d6:81:b9:f3:f2:8e:be:eb:94:da:f5:
c8:78:43:b9:08:9b:01:e9:70:2f:a8:86:63:2d:76:
c2:15:84:bc:d2:07:e0:10:19:37:d3:56:7d:18:c3:
a1:46:6b:22:ba:f4:7e:f2:be:5c:f9:b7:7e:2e:1d:
a2:77:29:cf:9c:c5:43:49:bc:9c:98:e2:49:d0:46:
03:fa:8a:0f:85:38:06:60:13:39:d9:c2:b2:17:f6:
e6:52:18:2a:9c:b2:65:4f:70:ca:49:f2:d4:e9:57:
70:21:5d:e8:50:cf:e6:cf:f6:36:08:a5:d3:c2:5c:
36:de:55:ec:e1:58:3f:c1:2a:c7:78:74:d8:8e:1a:
57:6d:f8:9f:bc:10:9e:7d:3e:9f:27:dc:8e:01:6f:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:E0:D1:91:07:BB:37:EB:77:82:6A:A6:4E:5A:16:6D:DB:32:5F
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:93:6b:0e:13:29:ed:26:d1:72:54:ea:86:ea:93:fb:06:
18:04:4e:5c:21:3b:68:62:7c:f1:4e:56:4a:1b:d3:ec:2b:9d:
cb:ab:93:76:e6:7f:e2:1a:8c:41:15:45:08:e4:9c:dd:40:ee:
04:5d:57:31:ea:2d:97:03:7c:d5:93:17:2e:3a:88:46:72:c8:
17:da:4d:16:25:92:89:60:47:48:78:a0:c2:13:ed:d0:10:c6:
04:53:33:4d:8d:b8:7e:3a:0c:c8:12:70:b4:e6:d1:ea:01:fb:
ba:39:95:0c:59:ab:9c:29:80:5d:45:0c:fc:03:97:db:5e:7b:
1f:f6:68:63:29:cd:a6:4b:b9:2c:3e:8e:c3:bb:20:79:9a:0d:
48:f9:dc:b2:b4:62:1f:e5:2e:41:4f:a7:65:bb:a8:08:18:15:
76:70:d6:44:bb:c1:24:ba:99:0c:0e:5c:a4:75:67:57:5e:70:
ad:42:ad:38:73:d8:dd:8d:fd:f3:4a:20:30:d7:57:16:a0:b2:
09:fb:c6:74:19:c8:71:1e:45:8a:95:48:10:60:60:06:87:50:
77:7c:86:30:58:81:20:ab:d4:57:67:39:8b:61:c2:05:41:40:
f2:f1:d6:29:2b:d9:2f:8c:cf:84:0e:5c:6a:67:3a:ae:8e:8b:
a5:ee:53:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwaSYAyhqEH51hMfFTAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZmMzkzMzUwYzc3NTk4YzEyMWFjZDNjOTJmNzA0ODU3
NmVmODkwHhcNMjYwMzAxMTkwMTM1WhcNMjYwMzAyMTkwMTM1WjAzMTEwLwYDVQQD
EyhmMTk5ZTBkMTkxMDdiYjM3ZWI3NzgyNmFhNjRlNWExNjZkZGIzMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23t22lFRXUHlR6SwsZLdDDt+XlOs
PM5gYqYSRl/D5pULXhBJt9NpOjHbUN1y/lqQsWBVPk/yKbL1o1J9+jj4JraVCjWe
Ry7tDKKlPWxqxGSHL9r9fXT5LM5l1of0DFvO5xWq2x8NCMPDWWbe1oG58/KOvuuU
2vXIeEO5CJsB6XAvqIZjLXbCFYS80gfgEBk301Z9GMOhRmsiuvR+8r5c+bd+Lh2i
dynPnMVDSbycmOJJ0EYD+ooPhTgGYBM52cKyF/bmUhgqnLJlT3DKSfLU6VdwIV3o
UM/mz/Y2CKXTwlw23lXs4Vg/wSrHeHTYjhpXbfifvBCefT6fJ9yOAW+6XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGZ4NGRB7s363eCaqZOWhZt2zJfMB8GA1UdIwQY
MBaAFKjG85M1DHdZjBIazTyS9wSFdu+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3Nzct
YzZiY2EwMWIyZmY4LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3NzctYzZiY2EwMWIyZmY4
LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqSTaw4T
Ke0m0XJU6obqk/sGGAROXCE7aGJ88U5WShvT7Cudy6uTduZ/4hqMQRVFCOSc3UDu
BF1XMeotlwN81ZMXLjqIRnLIF9pNFiWSiWBHSHigwhPt0BDGBFMzTY24fjoMyBJw
tObR6gH7ujmVDFmrnCmAXUUM/AOX2157H/ZoYynNpku5LD6Ow7sgeZoNSPncsrRi
H+UuQU+nZbuoCBgVdnDWRLvBJLqZDA5cpHVnV15wrUKtOHPY3Y3980ogMNdXFqCy
CfvGdBnIcR5FipVIEGBgBodQd3yGMFiBIKvUV2c5i2HCBUFA8vHWKSvZL4zPhA5c
amc6ro6Lpe5TSA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:58 2026 by rpki-client