Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: G7fMFIAU/iHTa7vbeF3b2LfUQoCbOch56rkoiJv77JM=
Subject key identifier: DE:F2:2B:B7:3C:73:B2:B1:C2:F0:A5:FA:A1:CF:AB:17:34:AB:E9:DB
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 019CAD9080BFE9F39408E25ABCA2A051EAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:00:54 +0000
Manifest this update: Mon 02 Mar 2026 08:00:54 +0000
Manifest next update: Tue 03 Mar 2026 08:00:54 +0000
Files and hashes: 1: LYw_86zqqUU-5ZAgDmKGuBI8moU.roa (hash: yws9eccxGXYISJMC2IFo/HR97Yy0+NyB/dp085XRJR8=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: Txl9t4rlzg+G8RIxDsKCag2Ml3EmcLZOhBKzl+scWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:80:bf:e9:f3:94:08:e2:5a:bc:a2:a0:51:ea:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Mar 2 08:00:54 2026 GMT
Not After : Mar 3 08:00:54 2026 GMT
Subject: CN=def22bb73c73b2b1c2f0a5faa1cfab1734abe9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:12:d0:25:0a:4f:82:a3:c5:6d:be:85:05:
6a:f9:94:55:40:68:de:bb:66:39:d8:7a:e8:72:39:
df:c4:2d:07:ff:8d:7a:35:7e:16:cf:96:00:cd:45:
e4:2a:81:7f:10:dd:bc:76:cf:e9:14:41:fb:93:fa:
a3:85:08:d7:51:a3:2c:6f:df:50:3f:fe:bd:5e:11:
9d:11:02:fb:21:f1:e5:80:ff:3c:83:d7:4c:01:cc:
fd:d2:9f:e4:c9:60:20:ee:4a:7a:0c:e1:f0:89:f7:
05:68:db:ca:6e:2e:18:11:12:25:2e:8e:1e:6d:d2:
42:69:fc:7d:3c:e7:a5:d5:79:ea:f2:f2:00:23:b4:
25:3d:24:f0:51:7d:d7:a4:fd:6a:10:e8:cd:e3:5c:
5e:f3:14:d6:e9:60:c9:39:48:26:31:a3:f2:ae:98:
40:17:49:61:68:ee:ab:70:95:34:d7:d6:1f:5f:38:
76:27:bc:2f:4b:28:57:2c:f1:d9:c1:9c:e5:de:91:
2a:b5:17:9c:91:48:12:a2:9e:29:e7:f9:52:90:61:
18:fd:ef:67:f6:9d:6d:84:57:4d:db:2f:d5:c9:5d:
bc:99:51:28:65:2f:ce:0e:f6:87:6e:d1:11:ce:29:
4a:e5:fc:94:88:4d:f7:65:44:54:d8:23:da:a2:0b:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:2B:B7:3C:73:B2:B1:C2:F0:A5:FA:A1:CF:AB:17:34:AB:E9:DB
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a3:a3:49:64:d1:c7:06:09:3a:08:ad:14:f4:c0:d5:ac:87:
26:01:3b:84:48:50:a8:45:cf:b2:bf:70:de:f1:73:91:9d:cf:
a1:c2:e2:0b:34:57:b0:46:64:93:df:89:df:b5:c8:67:b3:56:
7a:80:7f:83:84:b6:4d:09:2e:11:fb:79:25:dc:a7:83:5c:47:
da:0e:55:38:db:11:6f:32:65:fe:ca:8a:8d:3b:af:5c:90:02:
60:c2:a8:8e:b8:d9:66:03:54:cc:de:f5:11:4b:d5:3e:ed:f1:
44:d9:72:e3:dc:e6:8b:11:ec:fb:81:91:a2:5f:e4:04:d6:91:
9a:a1:d5:c6:cc:6f:69:1b:c9:25:a1:9f:40:e3:d6:05:d7:6b:
e5:1d:d4:b3:0d:54:62:54:27:bc:43:fa:1a:38:61:0e:75:73:
d7:b1:ec:00:76:17:35:1e:26:5f:0d:b0:24:6a:e1:27:e0:eb:
7a:f6:f5:cd:c7:b5:a5:08:03:d3:03:57:57:9f:4d:c9:19:9d:
03:e9:b1:4c:1e:54:aa:20:48:a8:66:6f:60:e7:c2:6f:85:44:
55:18:cd:6e:f7:30:2e:dc:af:3a:83:2c:d0:d4:80:e3:f8:0a:
ad:35:3e:ea:b3:ad:98:b2:5e:4d:f2:e3:06:22:05:b5:6e:d7:
f3:d4:3b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkIC/6fOUCOJavKKgUer4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYjA2MDE2NmQ2NGNlYWQwZTI5NTc5N2U4ZDI3YzU1ZDg4
OThiYzIwHhcNMjYwMzAyMDgwMDU0WhcNMjYwMzAzMDgwMDU0WjAzMTEwLwYDVQQD
EyhkZWYyMmJiNzNjNzNiMmIxYzJmMGE1ZmFhMWNmYWIxNzM0YWJlOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yES0CUKT4KjxW2+hQVq+ZRVQGje
u2Y52HrocjnfxC0H/416NX4Wz5YAzUXkKoF/EN28ds/pFEH7k/qjhQjXUaMsb99Q
P/69XhGdEQL7IfHlgP88g9dMAcz90p/kyWAg7kp6DOHwifcFaNvKbi4YERIlLo4e
bdJCafx9POel1Xnq8vIAI7QlPSTwUX3XpP1qEOjN41xe8xTW6WDJOUgmMaPyrphA
F0lhaO6rcJU019YfXzh2J7wvSyhXLPHZwZzl3pEqtReckUgSop4p5/lSkGEY/e9n
9p1thFdN2y/VyV28mVEoZS/ODvaHbtERzilK5fyUiE33ZURU2CPaoguNRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7yK7c8c7KxwvCl+qHPqxc0q+nbMB8GA1UdIwQY
MBaAFKuwYBZtZM6tDilXl+jSfFXYiYvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQt
NmIxMzY0OTRlM2RjLzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQtNmIxMzY0OTRlM2Rj
LzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6OjSWTR
xwYJOgitFPTA1ayHJgE7hEhQqEXPsr9w3vFzkZ3PocLiCzRXsEZkk9+J37XIZ7NW
eoB/g4S2TQkuEft5Jdyng1xH2g5VONsRbzJl/sqKjTuvXJACYMKojrjZZgNUzN71
EUvVPu3xRNly49zmixHs+4GRol/kBNaRmqHVxsxvaRvJJaGfQOPWBddr5R3Usw1U
YlQnvEP6GjhhDnVz17HsAHYXNR4mXw2wJGrhJ+Drevb1zce1pQgD0wNXV59NyRmd
A+mxTB5UqiBIqGZvYOfCb4VEVRjNbvcwLtyvOoMs0NSA4/gKrTU+6rOtmLJeTfLj
BiIFtW7X89Q7JA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:10 2026 by rpki-client