Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: O8gqB/0MxqD7tLWjJ66OzOd1oUj8PFfxVnE5pg3B9m4=
Subject key identifier: B8:E7:BD:1D:57:0F:EC:A4:FE:50:D2:96:2E:C7:B1:7A:19:4B:C5:D8
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 019CA9B39F8315AED74C58B0F3CA63AC2183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 14:00:47 +0000
Manifest this update: Sun 01 Mar 2026 14:00:47 +0000
Manifest next update: Mon 02 Mar 2026 14:00:47 +0000
Files and hashes: 1: eYVzKhVxRl0S4NV-8z3jnKXYp7g.roa (hash: FCmQv16BfxP+owog0Mj/PEYM7uRcKJlUX18aeU4hB40=)
2: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: VCYAReAv5mnduZlA+O2axfw8IysSGY+I/td3KTmNz64=)
3: xV6FBBeDoPLgKQuqzg8O7q-72L4.roa (hash: bdyv+UoIDEOcCmHbnZjDztZ9hQAFyZKMucdHwquQvzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9f:83:15:ae:d7:4c:58:b0:f3:ca:63:ac:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Mar 1 14:00:47 2026 GMT
Not After : Mar 2 14:00:47 2026 GMT
Subject: CN=b8e7bd1d570feca4fe50d2962ec7b17a194bc5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:b3:05:8f:e8:7b:3f:e5:d1:aa:40:9d:f5:
a3:08:8e:e3:da:f2:8b:2c:27:ac:f7:d8:ac:72:e1:
f3:dc:48:cc:48:f2:c3:3a:fc:47:89:e4:cd:04:17:
9a:24:c1:9d:60:fb:32:42:f2:7d:d5:e5:89:13:2d:
ef:a8:4f:6e:c9:80:5d:43:ff:bc:f1:77:fc:c0:f5:
1f:2b:7c:29:d9:9c:da:dd:43:cb:3c:a9:8b:27:d0:
2a:e1:ca:62:cf:fe:c3:66:72:a7:b3:e8:15:57:28:
a7:7e:a4:48:ce:5b:a4:c0:10:92:42:8f:9a:b2:e2:
73:a9:fb:77:55:cb:08:47:0a:48:c4:01:86:38:8e:
49:0b:cd:93:6a:8f:cc:52:f0:64:3a:65:94:68:7c:
98:55:7d:5b:cf:42:4f:22:58:42:4e:80:c0:4d:ee:
93:02:e2:13:77:5d:d7:c3:37:f9:2a:2d:0b:a4:7d:
f7:ef:4f:10:53:68:5a:51:fb:62:5d:79:e3:41:66:
ad:83:33:b9:36:d0:b5:9f:9d:0d:61:be:bd:7e:cd:
d5:6e:3d:56:fa:b0:87:44:eb:59:50:df:0d:46:99:
d0:26:c3:6b:04:01:e5:d4:91:57:fe:46:de:40:b0:
bd:41:33:bd:b8:a2:2e:b7:af:f7:54:f7:c8:17:f2:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:BD:1D:57:0F:EC:A4:FE:50:D2:96:2E:C7:B1:7A:19:4B:C5:D8
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:a2:2e:ae:1d:39:b8:b7:3a:77:15:7c:67:c2:44:ce:3c:
b9:ee:80:77:59:6c:be:a9:37:a0:2e:11:44:b0:47:3b:a5:99:
e7:c8:5d:13:5b:0d:a5:2a:d5:dd:30:e8:0e:af:83:3b:10:ba:
0e:48:c9:4e:96:20:23:9e:14:94:ba:70:4c:ec:d7:bb:cb:27:
8f:7e:8a:9c:9f:05:02:92:c4:42:f4:5f:f8:b3:ed:93:ab:48:
0f:09:22:24:be:6a:7e:f7:51:66:2d:f4:71:f4:75:fe:7e:0f:
3c:fa:6f:15:e5:4a:d9:3d:cc:e7:dd:c1:6c:c1:9e:94:61:d9:
b7:4d:11:af:19:f9:72:c1:9a:58:0d:48:2e:da:e5:8e:d3:ae:
d0:88:96:e0:9e:fa:12:d0:35:a5:6e:b8:1c:a4:91:2a:99:b4:
0e:70:c7:82:c8:fe:10:e1:62:59:fa:ab:52:7c:21:7e:e5:b6:
76:2f:59:d9:d1:f5:9d:b7:f6:21:0d:57:bf:e8:68:a0:c8:e3:
7f:fa:5c:48:ab:e2:83:90:5e:54:22:00:b4:4e:b5:ba:69:ba:
fd:1c:b7:7d:9d:38:d3:8e:ee:2e:42:0d:6c:2c:5e:c3:3f:9d:
1b:5e:ab:b7:18:cb:3a:06:9a:31:d6:67:f0:06:cd:a6:9c:42:
02:ae:fc:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps5+DFa7XTFiw88pjrCGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4
MzZmMWEwHhcNMjYwMzAxMTQwMDQ3WhcNMjYwMzAyMTQwMDQ3WjAzMTEwLwYDVQQD
EyhiOGU3YmQxZDU3MGZlY2E0ZmU1MGQyOTYyZWM3YjE3YTE5NGJjNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XezBY/oez/l0apAnfWjCI7j2vKL
LCes99iscuHz3EjMSPLDOvxHieTNBBeaJMGdYPsyQvJ91eWJEy3vqE9uyYBdQ/+8
8Xf8wPUfK3wp2Zza3UPLPKmLJ9Aq4cpiz/7DZnKns+gVVyinfqRIzlukwBCSQo+a
suJzqft3VcsIRwpIxAGGOI5JC82Tao/MUvBkOmWUaHyYVX1bz0JPIlhCToDATe6T
AuITd13Xwzf5Ki0LpH33708QU2haUftiXXnjQWatgzO5NtC1n50NYb69fs3Vbj1W
+rCHROtZUN8NRpnQJsNrBAHl1JFX/kbeQLC9QTO9uKIut6/3VPfIF/IbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjnvR1XD+yk/lDSli7HsXoZS8XYMB8GA1UdIwQY
MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt
MjNhYzc1ODA0OGVjLzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj
LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddCiLq4d
Obi3OncVfGfCRM48ue6Ad1lsvqk3oC4RRLBHO6WZ58hdE1sNpSrV3TDoDq+DOxC6
DkjJTpYgI54UlLpwTOzXu8snj36KnJ8FApLEQvRf+LPtk6tIDwkiJL5qfvdRZi30
cfR1/n4PPPpvFeVK2T3M593BbMGelGHZt00Rrxn5csGaWA1ILtrljtOu0IiW4J76
EtA1pW64HKSRKpm0DnDHgsj+EOFiWfqrUnwhfuW2di9Z2dH1nbf2IQ1Xv+hooMjj
f/pcSKvig5BeVCIAtE61umm6/Ry3fZ04047uLkINbCxewz+dG16rtxjLOgaaMdZn
8AbNppxCAq78gg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:54 2026 by rpki-client