Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: jK0NFzNPw43oRJ6SWkkcHZ/rLI3ixNxE1WSg7NT+90k=
Subject key identifier: 14:81:B5:78:67:18:F4:87:98:1B:67:02:E0:D3:49:34:90:7A:B2:6C
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 019CA946419D6BB99C5A1F496D5AE1445E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 12:01:19 +0000
Manifest this update: Sun 01 Mar 2026 12:01:19 +0000
Manifest next update: Mon 02 Mar 2026 12:01:19 +0000
Files and hashes: 1: T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa (hash: zcRDL/MU2cEJIkxNEFip0E/KypuWn835uLEU6Antv/M=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: e6DUK5YdUeTx/ju2JBMzZ4i4BSdrOVbiTGR69Yvy6zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:41:9d:6b:b9:9c:5a:1f:49:6d:5a:e1:44:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Mar 1 12:01:19 2026 GMT
Not After : Mar 2 12:01:19 2026 GMT
Subject: CN=1481b5786718f487981b6702e0d34934907ab26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:7e:b5:9b:46:99:e0:9c:9d:8d:77:50:5b:
ee:06:59:06:9e:32:33:5c:f7:35:2e:dd:18:a0:8d:
3b:14:2c:87:ec:9f:22:ba:35:7b:db:c8:f1:df:dc:
ec:da:1a:f6:c1:41:3b:bb:40:bc:b7:ab:08:61:d0:
2e:b6:26:8f:66:86:1f:1f:46:a5:90:16:9b:58:7a:
b0:7a:20:7f:cf:11:4e:ba:0b:c9:a5:cb:79:9c:5c:
35:ad:96:93:f7:59:a8:d3:e5:19:90:df:93:79:5d:
81:9c:da:0f:8f:09:c6:09:29:39:1f:54:be:eb:e6:
ea:12:01:87:67:73:c1:3d:7f:de:fe:aa:30:f4:ef:
f8:16:a7:a6:0a:ca:10:ff:51:3d:74:9a:75:1b:9e:
26:7a:7e:fa:41:e4:d5:c6:ce:56:64:3d:8d:cc:21:
38:95:75:69:af:00:a1:f7:21:cd:6a:f2:91:2d:6b:
80:e5:3b:bc:85:99:a5:15:09:76:af:fe:ef:0b:35:
9d:df:23:b7:85:01:6e:67:80:90:c7:54:24:a6:b0:
f0:64:a7:17:65:6e:60:f9:16:bd:dd:2d:2b:b2:40:
12:6c:e6:54:e4:3b:e9:2d:11:e2:af:81:1c:fb:e1:
3a:73:b5:ed:3d:f5:4f:d3:41:99:45:5c:f6:11:4c:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:B5:78:67:18:F4:87:98:1B:67:02:E0:D3:49:34:90:7A:B2:6C
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:05:b2:b5:b2:97:e7:50:c3:3d:f5:17:c3:41:d8:e1:54:
48:b1:5a:de:32:4d:0b:54:41:98:01:cd:18:8b:a5:b6:24:e0:
57:0b:8a:ff:ed:52:ad:c9:27:07:f9:a3:77:5f:75:aa:81:c6:
ac:c9:2e:0b:57:3c:35:cd:e4:3d:16:8f:5a:b3:9c:43:ad:2e:
10:d3:3a:73:44:f7:b0:6c:52:9a:28:67:ff:d4:b3:b1:2b:1f:
51:de:b9:ad:04:35:b0:40:cc:07:fb:f8:6c:a0:8a:b1:16:6e:
8a:2a:71:c1:75:93:df:77:90:1f:5a:4a:90:51:29:b8:52:c7:
9f:25:56:eb:91:08:1d:32:54:29:57:da:5e:28:5c:48:0b:1a:
fa:0e:e0:d3:2a:9a:13:7a:72:45:4d:46:0e:8f:78:0d:ae:4b:
c0:8d:eb:80:3d:e4:18:7c:c6:03:d7:91:a9:79:5d:3e:01:bc:
7c:08:9f:e4:22:3f:2e:d9:91:51:61:70:06:c5:54:ae:2b:0d:
15:76:f0:25:63:d8:61:05:09:79:f9:35:9e:c4:5d:15:b6:22:
ab:94:b9:91:48:1d:e9:22:3e:7d:06:b6:4b:2a:9b:f5:e4:a8:
2d:93:10:d2:bc:7f:0d:1c:85:72:d1:9a:59:83:be:bb:27:87:
70:de:8f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRkGda7mcWh9JbVrhRF4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTIzNTNkOWJkNWI4YzViNThjYzcxMDIxMzI0YmI5MGRk
MmRkOTEwHhcNMjYwMzAxMTIwMTE5WhcNMjYwMzAyMTIwMTE5WjAzMTEwLwYDVQQD
EygxNDgxYjU3ODY3MThmNDg3OTgxYjY3MDJlMGQzNDkzNDkwN2FiMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtht+tZtGmeCcnY13UFvuBlkGnjIz
XPc1Lt0YoI07FCyH7J8iujV728jx39zs2hr2wUE7u0C8t6sIYdAutiaPZoYfH0al
kBabWHqweiB/zxFOugvJpct5nFw1rZaT91mo0+UZkN+TeV2BnNoPjwnGCSk5H1S+
6+bqEgGHZ3PBPX/e/qow9O/4FqemCsoQ/1E9dJp1G54men76QeTVxs5WZD2NzCE4
lXVprwCh9yHNavKRLWuA5Tu8hZmlFQl2r/7vCzWd3yO3hQFuZ4CQx1QkprDwZKcX
ZW5g+Ra93S0rskASbOZU5DvpLRHir4Ec++E6c7XtPfVP00GZRVz2EUwAMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSBtXhnGPSHmBtnAuDTSTSQerJsMB8GA1UdIwQY
MBaAFKviNT2b1bjFtYzHECEyS7kN0t2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUt
ZWVjNDkwZDUwNmY3LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUtZWVjNDkwZDUwNmY3
LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF8FsrWy
l+dQwz31F8NB2OFUSLFa3jJNC1RBmAHNGIultiTgVwuK/+1SrcknB/mjd191qoHG
rMkuC1c8Nc3kPRaPWrOcQ60uENM6c0T3sGxSmihn/9SzsSsfUd65rQQ1sEDMB/v4
bKCKsRZuiipxwXWT33eQH1pKkFEpuFLHnyVW65EIHTJUKVfaXihcSAsa+g7g0yqa
E3pyRU1GDo94Da5LwI3rgD3kGHzGA9eRqXldPgG8fAif5CI/LtmRUWFwBsVUrisN
FXbwJWPYYQUJefk1nsRdFbYiq5S5kUgd6SI+fQa2Syqb9eSoLZMQ0rx/DRyFctGa
WYO+uyeHcN6Pzg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:09 2026 by rpki-client