Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: tVsXKqhpGHm1/LBRNae5AsmtnTu4EfxiDP0XyAPz0pA=
Subject key identifier: 29:F8:77:61:2B:F1:B5:60:2F:24:B7:ED:0D:8B:4E:88:14:E4:D8:9A
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 019CAA8F708B3BCA6B77840FA9C090DF9847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0F36
Signing time: Sun 01 Mar 2026 18:00:52 +0000
Manifest this update: Sun 01 Mar 2026 18:00:52 +0000
Manifest next update: Mon 02 Mar 2026 18:00:52 +0000
Files and hashes: 1: _f2HEEBuezRD1LjpBU3oUL7f-cg.roa (hash: ND07CUp2q2s9xUghAhuQH6sunoACMx3Se30bMpjk0Zk=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: MTcUaQl5ueovl8TnCJM6LW2219NkixmRBJhHL9DdJdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:70:8b:3b:ca:6b:77:84:0f:a9:c0:90:df:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Mar 1 18:00:52 2026 GMT
Not After : Mar 2 18:00:52 2026 GMT
Subject: CN=29f877612bf1b5602f24b7ed0d8b4e8814e4d89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:0f:36:11:ac:c5:a0:e9:1b:12:c0:0a:d0:
5f:ac:1a:d2:b2:e8:eb:61:aa:f0:d9:89:76:c3:54:
dc:7b:ea:58:f4:eb:d4:cb:2f:6c:8f:b7:20:6f:4f:
60:7a:b4:25:23:aa:61:fa:f2:e0:d7:94:a8:0b:83:
6e:27:f5:ac:16:2c:1b:ff:1c:b9:36:e6:56:bb:52:
59:bc:2c:93:58:55:6d:50:d8:4d:09:d3:54:46:29:
6f:06:df:20:3c:1a:e6:72:44:f4:51:0e:76:9e:c6:
50:e7:9f:01:65:0e:d9:c5:51:4e:96:94:5c:3c:9a:
67:99:55:8b:68:1a:54:5d:8c:65:5c:7d:6d:32:28:
3e:51:92:da:5f:26:30:d4:b9:f2:9a:fc:24:53:a5:
2c:96:3d:b3:b7:5a:9a:02:5d:67:aa:f1:ef:0b:88:
a3:0b:9a:a3:50:62:f3:4c:ab:d0:58:71:c2:e8:71:
a6:7e:c7:fc:36:91:00:57:a6:d9:7f:77:a9:50:be:
29:f7:43:8f:46:4c:fe:cb:4c:d5:fb:dd:36:c6:24:
82:1d:b1:df:f6:a4:18:7c:6d:a2:37:ef:fa:7f:4d:
e0:c3:6a:72:e3:f3:84:08:b1:29:54:9c:83:64:43:
a9:54:e3:38:79:40:48:31:d5:ff:8a:ee:a9:c7:1c:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:77:61:2B:F1:B5:60:2F:24:B7:ED:0D:8B:4E:88:14:E4:D8:9A
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:89:0a:09:0d:58:cc:ab:8d:0a:b7:4c:10:3d:85:79:05:
ce:57:ef:f6:fd:cd:f3:54:a5:37:73:d5:62:ce:15:bd:42:55:
6c:aa:f0:13:4c:cc:3a:3a:cd:ed:ed:8c:04:62:a8:a0:84:7d:
92:ec:33:f5:13:5f:5d:76:0e:49:98:65:cf:53:2e:b3:1f:d2:
05:30:74:24:71:3b:11:43:c3:f0:26:07:0b:dc:c0:a6:88:4f:
19:ec:9b:10:c8:56:c8:d2:01:35:f0:e1:17:7e:90:20:ae:be:
f4:79:23:7b:f1:bf:84:4d:ec:22:42:1a:45:64:9f:39:fc:56:
58:82:97:d6:99:8f:52:c4:17:61:8b:f3:c9:db:b3:f3:fa:c4:
0f:9c:ad:b0:a5:40:54:53:ef:38:8c:a8:9d:a2:f2:b2:3e:94:
67:a0:23:78:31:e9:fe:4a:2c:ea:ae:3f:0e:b1:9a:b4:10:19:
df:24:43:3f:a2:d4:e8:9b:76:65:cd:66:98:ac:28:27:ff:f3:
e5:d4:91:3f:0a:aa:0a:84:1d:6c:09:ea:26:26:b7:d0:95:21:
cc:14:47:13:aa:52:63:cd:65:e6:c3:17:78:24:a7:96:0d:bf:
41:0f:66:d5:c5:e1:33:c8:fa:a0:b9:76:eb:17:b1:2a:3e:e8:
11:c0:be:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj3CLO8prd4QPqcCQ35hHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzExM2M3YWVhNmI3MTRhMDYwZTlmN2MzZTcxNTY5ZTYw
M2QzOTUwHhcNMjYwMzAxMTgwMDUyWhcNMjYwMzAyMTgwMDUyWjAzMTEwLwYDVQQD
EygyOWY4Nzc2MTJiZjFiNTYwMmYyNGI3ZWQwZDhiNGU4ODE0ZTRkODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTQPNhGsxaDpGxLACtBfrBrSsujr
Yarw2Yl2w1Tce+pY9OvUyy9sj7cgb09gerQlI6ph+vLg15SoC4NuJ/WsFiwb/xy5
NuZWu1JZvCyTWFVtUNhNCdNURilvBt8gPBrmckT0UQ52nsZQ558BZQ7ZxVFOlpRc
PJpnmVWLaBpUXYxlXH1tMig+UZLaXyYw1LnymvwkU6Uslj2zt1qaAl1nqvHvC4ij
C5qjUGLzTKvQWHHC6HGmfsf8NpEAV6bZf3epUL4p90OPRkz+y0zV+902xiSCHbHf
9qQYfG2iN+/6f03gw2py4/OECLEpVJyDZEOpVOM4eUBIMdX/iu6pxxyplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn4d2Er8bVgLyS37Q2LTogU5NiaMB8GA1UdIwQY
MBaAFKvBE8euprcUoGDp98PnFWnmA9OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYt
MWQwYTRlYzgyN2FiLzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYtMWQwYTRlYzgyN2Fi
LzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuqJCgkN
WMyrjQq3TBA9hXkFzlfv9v3N81SlN3PVYs4VvUJVbKrwE0zMOjrN7e2MBGKooIR9
kuwz9RNfXXYOSZhlz1Musx/SBTB0JHE7EUPD8CYHC9zApohPGeybEMhWyNIBNfDh
F36QIK6+9Hkje/G/hE3sIkIaRWSfOfxWWIKX1pmPUsQXYYvzyduz8/rED5ytsKVA
VFPvOIyonaLysj6UZ6AjeDHp/kos6q4/DrGatBAZ3yRDP6LU6Jt2Zc1mmKwoJ//z
5dSRPwqqCoQdbAnqJia30JUhzBRHE6pSY81l5sMXeCSnlg2/QQ9m1cXhM8j6oLl2
6xexKj7oEcC+mQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:44 2026 by rpki-client