Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: OyYllSk7o0Fy4X+Qm1uaJCshdI1btrRdtrcZpaB6pcQ=
Subject key identifier: E4:94:C5:E6:DF:AB:67:91:CD:4B:99:46:5B:1B:BF:4F:A2:44:AF:11
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 019CABD92A31AA786D634E3669C810751FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: kOPMiNd9PUPPNRyJgodQBBBl6c3EBV7Ii3pAP+pQ4Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2a:31:aa:78:6d:63:4e:36:69:c8:10:75:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=e494c5e6dfab6791cd4b99465b1bbf4fa244af11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:b9:d2:4b:ba:76:eb:8c:f3:fd:ab:94:68:
21:31:c3:fb:64:0b:d3:4f:4f:3a:3f:39:05:4e:24:
0f:cb:e6:8e:f9:0a:87:33:c3:d3:e6:74:5d:b5:e3:
45:f9:d4:5d:2e:0d:dc:0c:7f:c3:1d:d2:eb:d3:8d:
9d:bf:e8:3d:f0:a3:ba:2f:fa:e6:8d:d1:43:8d:0f:
a9:c1:d9:f8:02:c9:57:75:87:fe:13:d3:27:04:5f:
ce:b7:10:38:b9:b1:b1:fd:79:8c:84:4a:bf:58:b2:
55:9d:d5:30:fd:40:50:f6:2b:c2:53:09:3b:46:87:
3a:14:88:0f:02:33:53:d1:67:1f:7c:1f:8c:7e:9c:
7f:53:ae:07:05:d7:08:22:b7:7f:e9:ac:db:19:ff:
49:39:43:23:ea:72:e5:ec:7e:83:cf:93:eb:14:7e:
a6:66:5c:6b:9c:c7:8f:05:4c:43:d2:38:c0:7e:9b:
52:55:37:0d:e5:9d:82:bd:f8:5e:62:f7:84:35:38:
df:bb:f2:70:ae:8e:cd:f9:b4:80:32:b4:3d:8a:fb:
3f:54:57:06:d3:da:37:40:92:ca:1b:e3:10:91:74:
b5:b5:de:1a:a3:d7:0d:50:af:85:4e:cc:c1:f5:1f:
37:05:04:1d:b3:e6:3b:d5:e3:ac:e8:8a:28:d6:67:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:94:C5:E6:DF:AB:67:91:CD:4B:99:46:5B:1B:BF:4F:A2:44:AF:11
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:00:87:3b:f8:79:14:20:62:c0:cf:64:35:f8:75:b4:1b:2c:
ba:25:ee:1d:63:b6:2a:88:a4:ed:d1:64:9a:2f:b3:f9:63:b6:
8c:9e:90:cf:2e:91:a2:40:7b:1a:90:65:7a:e8:88:a1:42:db:
6e:2c:61:a5:4c:a7:82:6c:8b:5c:1a:92:7b:a6:8c:e1:89:de:
06:65:61:16:b6:e5:42:a3:5d:13:18:12:87:05:f4:72:9f:a2:
a4:84:f6:5f:2d:80:e0:e3:a1:49:95:64:4b:3c:53:1b:c5:1a:
36:a2:74:9b:f0:4c:e3:e2:9d:a8:3c:00:8f:e2:ae:d5:07:e8:
37:ba:bb:3f:fd:c6:91:e4:75:bf:7a:ed:6f:b8:ce:11:1a:42:
79:28:6c:0c:ae:b7:8f:19:1f:29:14:1a:eb:a6:68:c0:e7:de:
02:51:c9:66:24:4f:e7:6b:a0:2a:d6:34:a6:bd:2d:4f:48:ad:
6e:d8:cd:e2:ce:96:aa:0c:54:2d:6f:12:6b:11:10:7b:99:51:
2d:d1:23:81:e6:8a:36:6e:b3:4b:7e:3d:74:da:20:d3:cd:2f:
1b:a1:2d:be:7b:83:5c:2b:ac:d5:a8:8e:f8:db:04:73:05:b9:
7a:49:7a:a0:4d:11:f8:c6:20:f3:be:e4:e5:05:f3:71:1d:c9:
9e:f2:22:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2SoxqnhtY042acgQdR+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZGFiYWRkNTYyYjY4ZWM1ZTE1OGUxZTZhYzc2ZjdkYTk2
ZTczMjMwHhcNMjYwMzAyMDAwMTAxWhcNMjYwMzAzMDAwMTAxWjAzMTEwLwYDVQQD
EyhlNDk0YzVlNmRmYWI2NzkxY2Q0Yjk5NDY1YjFiYmY0ZmEyNDRhZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvK50ku6duuM8/2rlGghMcP7ZAvT
T086PzkFTiQPy+aO+QqHM8PT5nRdteNF+dRdLg3cDH/DHdLr042dv+g98KO6L/rm
jdFDjQ+pwdn4AslXdYf+E9MnBF/OtxA4ubGx/XmMhEq/WLJVndUw/UBQ9ivCUwk7
Roc6FIgPAjNT0WcffB+Mfpx/U64HBdcIIrd/6azbGf9JOUMj6nLl7H6Dz5PrFH6m
ZlxrnMePBUxD0jjAfptSVTcN5Z2CvfheYveENTjfu/Jwro7N+bSAMrQ9ivs/VFcG
09o3QJLKG+MQkXS1td4ao9cNUK+FTszB9R83BQQds+Y71eOs6Ioo1mfBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSUxebfq2eRzUuZRlsbv0+iRK8RMB8GA1UdIwQY
MBaAFPzaut1WK2jsXhWOHmrHb32pbnMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lOGJiMTMtOWY4OS00MGNhLThhNmIt
YTM5NGU4NjZiMzdjLzEvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lOGJiMTMtOWY4OS00MGNhLThhNmItYTM5NGU4NjZiMzdj
LzEvX05xNjNWWXJhT3hlRlk0ZWFzZHZmYWx1Y3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQCHO/h5
FCBiwM9kNfh1tBssuiXuHWO2Koik7dFkmi+z+WO2jJ6Qzy6RokB7GpBleuiIoULb
bixhpUyngmyLXBqSe6aM4YneBmVhFrblQqNdExgShwX0cp+ipIT2Xy2A4OOhSZVk
SzxTG8UaNqJ0m/BM4+KdqDwAj+Ku1QfoN7q7P/3GkeR1v3rtb7jOERpCeShsDK63
jxkfKRQa66ZowOfeAlHJZiRP52ugKtY0pr0tT0itbtjN4s6WqgxULW8SaxEQe5lR
LdEjgeaKNm6zS349dNog080vG6EtvnuDXCus1aiO+NsEcwW5ekl6oE0R+MYg877k
5QXzcR3JnvIiHA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:04 2026 by rpki-client