Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: x64f2wpYsNyG/vL4JImt4baMVsx4uymZxc8fGMCndpE=
Subject key identifier: 00:32:7D:DB:A8:BB:96:7C:CF:4C:A6:C3:64:CA:2F:00:F8:A0:1E:F2
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019CAB340A234ED727CD7C3B3BD2BF874FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: gx/JRWJoq2QZbsS5XMMit5WCK3YJ9uz+EhPL1x/Qpwk=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0a:23:4e:d7:27:cd:7c:3b:3b:d2:bf:87:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=00327ddba8bb967ccf4ca6c364ca2f00f8a01ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:c1:c5:cf:0f:85:2a:c0:22:3e:d2:1f:62:
1c:44:34:84:80:54:9f:c9:35:2f:b8:3d:2d:94:1d:
0e:d3:bb:7f:23:97:11:55:71:53:c5:0a:fa:f2:4d:
37:a5:2f:4d:d3:c8:95:46:a2:e8:2d:f8:dc:ee:3c:
2c:fb:a5:e9:05:fd:48:82:5f:cb:b2:97:8d:73:3f:
b3:38:df:ed:00:92:34:45:13:59:de:03:17:64:96:
b8:ab:d3:86:b3:be:b9:de:99:3d:ab:e2:53:b6:ac:
19:94:e2:e7:3b:84:d0:71:4e:8c:70:f5:8d:af:e6:
5e:68:99:31:63:f1:0d:7b:49:c3:0c:3a:16:47:60:
c2:32:b0:9b:b3:e9:28:89:5a:7c:5b:12:c4:b3:43:
46:e0:da:5b:46:2b:16:3c:02:5c:f2:9a:01:cb:7b:
0c:fc:5e:1e:d3:6d:07:c8:0f:49:71:c5:63:12:63:
d9:83:00:47:c6:53:bd:85:2a:21:8b:55:a9:80:cc:
9f:8c:0f:e5:71:44:f8:5c:04:6b:7a:bc:cd:84:7f:
86:e8:c9:dd:e2:1a:d4:3f:a8:97:3c:d8:ce:12:67:
1b:44:68:4b:f1:f6:de:22:2a:0a:44:f8:8e:29:15:
23:32:68:72:bd:a7:a5:83:f3:6e:a4:24:f9:57:39:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:7D:DB:A8:BB:96:7C:CF:4C:A6:C3:64:CA:2F:00:F8:A0:1E:F2
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:00:64:0e:e8:66:a8:53:46:92:e6:f3:68:ce:f8:58:20:
21:c2:c8:ad:37:57:41:32:42:4b:0e:75:91:69:4e:1a:d3:3a:
90:9f:6f:a7:20:80:22:ae:b6:67:76:25:8a:81:e7:bf:87:75:
87:6d:f2:69:52:1f:4a:d0:da:5d:0c:77:fe:c3:99:7b:50:74:
82:07:61:bb:27:a2:7a:aa:8a:9c:ab:4b:6b:30:bf:44:5a:f3:
05:7e:a0:7f:01:00:8e:19:f9:e9:39:69:ca:3f:65:d4:23:36:
6e:48:1c:36:55:59:7c:f8:29:b6:ee:bb:df:a0:42:fd:da:bf:
b3:e8:e5:b4:11:78:18:c2:73:d5:4f:0f:c9:83:25:27:6d:f3:
28:56:d0:57:56:7f:b1:82:7d:35:31:85:9f:39:87:1d:bb:63:
14:74:a7:39:cd:fe:40:4e:b8:db:26:14:78:d2:f2:2a:5b:05:
05:1c:c3:a0:17:b6:12:d6:ce:28:19:93:ec:17:5a:89:f6:01:
b9:d7:44:89:43:7f:b4:7e:0c:f2:28:77:c2:3d:e2:b8:6b:58:
6c:58:80:1b:0d:15:fa:0c:f6:42:4c:68:21:b5:5d:56:4f:33:
73:f0:7d:9e:44:9a:08:83:69:98:b5:e7:02:84:9c:32:b8:68:
55:6f:70:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNAojTtcnzXw7O9K/h0/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMGQ1YjMwYjQ2YzdiOTdiMmRiYzQ1ODljZWEzNjIyYWQ3
NTYxNTYwHhcNMjYwMzAxMjEwMDQwWhcNMjYwMzAyMjEwMDQwWjAzMTEwLwYDVQQD
EygwMDMyN2RkYmE4YmI5NjdjY2Y0Y2E2YzM2NGNhMmYwMGY4YTAxZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCrBxc8PhSrAIj7SH2IcRDSEgFSf
yTUvuD0tlB0O07t/I5cRVXFTxQr68k03pS9N08iVRqLoLfjc7jws+6XpBf1Igl/L
speNcz+zON/tAJI0RRNZ3gMXZJa4q9OGs7653pk9q+JTtqwZlOLnO4TQcU6McPWN
r+ZeaJkxY/ENe0nDDDoWR2DCMrCbs+koiVp8WxLEs0NG4NpbRisWPAJc8poBy3sM
/F4e020HyA9JccVjEmPZgwBHxlO9hSohi1WpgMyfjA/lcUT4XARrerzNhH+G6Mnd
4hrUP6iXPNjOEmcbRGhL8fbeIioKRPiOKRUjMmhyvaelg/NupCT5VzlFqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAyfduou5Z8z0ymw2TKLwD4oB7yMB8GA1UdIwQY
MBaAFNENWzC0bHuXstvEWJzqNiKtdWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUt
M2U0MGQwMTc0MGIyLzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUtM2U0MGQwMTc0MGIy
LzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4UAZA7o
ZqhTRpLm82jO+FggIcLIrTdXQTJCSw51kWlOGtM6kJ9vpyCAIq62Z3YlioHnv4d1
h23yaVIfStDaXQx3/sOZe1B0ggdhuyeieqqKnKtLazC/RFrzBX6gfwEAjhn56Tlp
yj9l1CM2bkgcNlVZfPgptu6736BC/dq/s+jltBF4GMJz1U8PyYMlJ23zKFbQV1Z/
sYJ9NTGFnzmHHbtjFHSnOc3+QE642yYUeNLyKlsFBRzDoBe2EtbOKBmT7BdaifYB
uddEiUN/tH4M8ih3wj3iuGtYbFiAGw0V+gz2QkxoIbVdVk8zc/B9nkSaCINpmLXn
AoScMrhoVW9wWQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:03 2026 by rpki-client