Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: eZIYLVypJgNCOljki3kUVD/Wr4IgKYJZgtPx5sXkpP8=
Subject key identifier: B8:94:1D:4C:6D:21:1E:9E:5D:45:02:BE:04:24:4E:F0:D2:C9:9E:74
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 019CACB45C3FF0017AC69FE3B8781891E3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 04:00:27 +0000
Manifest this update: Mon 02 Mar 2026 04:00:27 +0000
Manifest next update: Tue 03 Mar 2026 04:00:27 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: KdrC3eV6uzuwTsO+t/Rc1OlszgJEJeSDPXJV80spF/4=)
2: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (hash: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:5c:3f:f0:01:7a:c6:9f:e3:b8:78:18:91:e3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Mar 2 04:00:27 2026 GMT
Not After : Mar 3 04:00:27 2026 GMT
Subject: CN=b8941d4c6d211e9e5d4502be04244ef0d2c99e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:42:ae:17:03:fc:84:ec:82:cd:92:0c:82:
d1:45:94:eb:83:5d:c3:75:21:b0:91:aa:01:90:b3:
2b:cd:62:2f:1d:d0:3d:aa:8a:80:eb:6d:1f:8f:a4:
6e:86:13:f0:4d:12:e5:c7:64:fa:be:8f:27:6d:51:
9b:b4:e8:e2:0f:7b:8c:c0:74:41:93:5c:4b:25:3b:
41:97:ff:80:9b:43:73:bc:69:9e:7b:60:a4:4a:6d:
88:48:e4:6f:21:19:6f:4a:65:6f:8d:1e:36:3d:17:
a8:52:32:a1:08:07:a9:21:9e:44:7e:9e:fe:fe:a2:
52:fe:0c:5e:33:c8:ac:69:c9:b2:ee:0e:f7:26:ba:
ea:26:23:36:6c:f2:62:4e:6e:72:28:7d:f1:95:04:
81:3d:8c:a6:33:80:9d:7e:24:74:44:8a:cb:8e:f0:
4d:5c:81:91:f1:75:10:3c:cb:f6:a7:ed:2f:ea:52:
36:60:eb:d8:6a:5e:67:32:35:d5:13:d9:cd:90:11:
8f:66:ab:44:88:3a:34:72:fb:8e:0f:c2:c4:64:f6:
23:b8:72:f7:c7:0c:67:70:26:67:42:ec:0c:3f:30:
b7:da:2f:bf:67:eb:f8:ba:1c:c9:96:e6:92:85:06:
89:d3:70:a6:8d:81:1d:a9:89:30:44:68:2b:4d:1a:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:1D:4C:6D:21:1E:9E:5D:45:02:BE:04:24:4E:F0:D2:C9:9E:74
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0c:6a:af:19:c3:b6:5b:39:64:f4:01:1c:27:18:6e:03:75:
97:7e:67:17:19:80:48:76:fb:59:72:3f:3f:1e:6a:9d:b9:eb:
83:4a:96:b7:cc:b6:52:f2:f3:fd:54:a4:77:c2:23:3e:36:27:
73:dd:e6:b5:04:4e:ac:9f:c8:e1:58:8b:95:1f:03:16:99:f8:
62:11:fc:34:b0:57:3e:23:44:11:5e:eb:a3:4c:c1:5e:20:8f:
51:1e:57:af:77:03:b3:f9:74:57:82:33:14:10:12:74:46:ba:
96:56:7c:c2:33:aa:16:a9:c3:54:2f:4b:f3:57:9a:af:cc:c3:
91:2b:e1:fc:5d:b3:79:e3:c1:6a:a5:d4:04:be:63:cc:bb:2b:
2b:0f:55:5c:56:e7:2d:24:d3:af:e3:88:90:6e:27:f4:95:9d:
57:b0:9c:8e:4c:52:17:9e:e8:05:88:52:a4:2b:01:c4:97:d8:
bf:6a:ad:0f:ae:6d:df:d4:d6:ab:de:54:3f:b7:2e:ee:51:10:
7b:e8:e6:1a:9a:95:f8:86:af:6d:2a:66:d3:ca:e5:c8:83:e0:
ba:c1:e2:dd:ca:71:d4:b8:a5:c4:cc:6c:7e:fd:69:27:8e:8a:
d8:2c:a3:7b:6c:21:6a:95:94:af:aa:a4:c1:95:79:cb:22:bc:
38:18:37:49
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZystFw/8AF6xp/juHgYkeOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTE2OTA5Y2E0ZGEzOTkzNWVhYjlhZjAzOGI1OGE1MjMz
MTIyYjMwHhcNMjYwMzAyMDQwMDI3WhcNMjYwMzAzMDQwMDI3WjAzMTEwLwYDVQQD
EyhiODk0MWQ0YzZkMjExZTllNWQ0NTAyYmUwNDI0NGVmMGQyYzk5ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsRCrhcD/ITsgs2SDILRRZTrg13D
dSGwkaoBkLMrzWIvHdA9qoqA620fj6RuhhPwTRLlx2T6vo8nbVGbtOjiD3uMwHRB
k1xLJTtBl/+Am0NzvGmee2CkSm2ISORvIRlvSmVvjR42PReoUjKhCAepIZ5Efp7+
/qJS/gxeM8isacmy7g73JrrqJiM2bPJiTm5yKH3xlQSBPYymM4CdfiR0RIrLjvBN
XIGR8XUQPMv2p+0v6lI2YOvYal5nMjXVE9nNkBGPZqtEiDo0cvuOD8LEZPYjuHL3
xwxncCZnQuwMPzC32i+/Z+v4uhzJluaShQaJ03CmjYEdqYkwRGgrTRoBvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLiUHUxtIR6eXUUCvgQkTvDSyZ50MB8GA1UdIwQY
MBaAFPqhaQnKTaOZNeq5rwOLWKUjMSKzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xRnBDY3BObzVrMTZybXZBNHRZcFNNeElyTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4
LTkyMGI1MmE5ZjZhNS8xLzEtcUZwQ2NwTm81azE2cm12QTR0WXBTTXhJck0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQyLzA0NjZmOC0zMzBkLTRhYzktYWMxOC05MjBiNTJhOWY2
YTUvMS8xLXFGcENjcE5vNWsxNnJtdkE0dFlwU014SXJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQxq
rxnDtls5ZPQBHCcYbgN1l35nFxmASHb7WXI/Px5qnbnrg0qWt8y2UvLz/VSkd8Ij
PjYnc93mtQROrJ/I4ViLlR8DFpn4YhH8NLBXPiNEEV7ro0zBXiCPUR5Xr3cDs/l0
V4IzFBASdEa6llZ8wjOqFqnDVC9L81ear8zDkSvh/F2zeePBaqXUBL5jzLsrKw9V
XFbnLSTTr+OIkG4n9JWdV7CcjkxSF57oBYhSpCsBxJfYv2qtD65t39TWq95UP7cu
7lEQe+jmGpqV+IavbSpm08rlyIPgusHi3cpx1LilxMxsfv1pJ46K2Cyje2whapWU
r6qkwZV5yyK8OBg3SQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:23 2026 by rpki-client