Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: 2M5C5/FTlenCgAXfWVuGjfTLGSnKpKpWd4Yoamwz6Tg=
Subject key identifier: 66:26:3D:09:A3:83:25:DC:32:00:FE:17:6A:63:5D:AE:27:5E:4A:47
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 019CAB33F7A49EDF1E8B99A30026FD9BBBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 10AE
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: a8dxxiPCuafVW1pqgQGmv3vqh6s.roa (hash: rc0rV/NjxsPC/BhNPsXHclt7GZGOVjNNBw3HxehbP5Y=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: sPkuN/8rcJ233VbX+r6yG8vOrMW9oBkq3CHLlmYNPLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f7:a4:9e:df:1e:8b:99:a3:00:26:fd:9b:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=66263d09a38325dc3200fe176a635dae275e4a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:63:13:dc:2c:ee:4d:b4:5c:38:a8:c6:20:
2c:ce:02:f8:23:f9:82:77:f8:4b:cf:88:21:3e:a4:
b1:f5:69:e4:e0:5e:ce:1e:3a:98:12:bb:68:f4:47:
21:ba:12:db:9e:32:61:2a:bb:45:f4:a3:67:39:02:
a5:3d:63:0f:76:0f:3d:6b:29:6d:25:d0:0a:50:fa:
4f:59:ed:d3:4a:95:2f:bb:fb:35:b8:20:a7:ed:0c:
c9:46:4a:41:00:fe:10:35:e2:8a:ff:96:84:01:31:
2a:73:22:d5:bf:38:4a:65:f0:46:41:4d:e8:af:f0:
b7:c6:e0:00:3c:4e:90:b7:e4:a0:23:34:e3:63:31:
bf:15:83:71:b0:64:54:9e:54:cd:28:86:81:78:32:
52:16:47:56:7c:a0:13:08:66:18:58:33:f9:cc:09:
62:22:86:37:31:c3:29:dc:06:54:1e:c2:0c:4f:c4:
38:73:bc:39:86:9b:95:7c:1f:fe:6e:e1:46:5c:f1:
c1:a8:e2:8a:ad:36:7b:7d:0b:8d:af:70:8c:ab:25:
60:8c:49:96:c5:a6:e7:c5:8d:17:6c:36:ab:80:ab:
e4:c6:d2:2e:f1:90:fb:dd:c4:6c:57:14:e1:5f:b2:
c9:23:32:76:38:55:d0:b8:c0:3d:bc:07:ed:f1:5a:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:3D:09:A3:83:25:DC:32:00:FE:17:6A:63:5D:AE:27:5E:4A:47
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:32:30:68:15:a4:d0:d6:40:4b:b3:45:dd:81:1a:c4:98:20:
26:0a:0e:e0:16:8f:b1:2e:e6:47:2f:eb:59:95:93:f6:97:15:
fc:3c:aa:32:8e:d1:da:cb:36:a1:f3:8b:fb:51:0e:af:01:6e:
33:ce:fc:19:9e:db:16:59:b3:be:21:97:fd:ee:8f:2e:a9:a4:
32:ea:4d:f9:c8:2b:23:53:f7:49:e5:83:d1:eb:c9:3f:e7:8b:
05:81:ee:74:e6:fe:78:e9:a0:08:9b:43:57:8a:6d:84:46:cb:
f7:44:e4:81:88:20:c1:77:22:38:b6:d0:57:e6:74:9b:e3:c5:
01:df:3e:a3:82:b5:f9:24:15:9c:fb:e4:79:4f:f8:32:54:b9:
63:6b:5f:9a:db:dc:c1:1f:ca:3c:df:77:19:7d:a5:63:a5:a6:
63:fc:9a:ef:52:f0:51:ec:ce:7c:5f:39:33:85:ec:d2:ca:fa:
22:2e:5d:fe:57:d9:17:09:07:ad:a4:41:2f:05:b3:04:c8:d4:
57:cf:17:88:4f:74:33:8b:75:4a:c5:f4:7b:fb:79:51:5c:a4:
75:8b:69:1b:70:7d:7e:24:4c:ae:c8:41:ba:a7:65:37:5d:3d:
05:aa:fb:90:78:32:e0:cf:37:86:8b:5a:45:c5:9a:2e:35:90:
89:32:b4:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM/eknt8ei5mjACb9m7u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmRhODM0YjMyY2IxMmM0YmRhZTMzZjY3MmYzNDhkOTgz
ZjMxNzYwHhcNMjYwMzAxMjEwMDM1WhcNMjYwMzAyMjEwMDM1WjAzMTEwLwYDVQQD
Eyg2NjI2M2QwOWEzODMyNWRjMzIwMGZlMTc2YTYzNWRhZTI3NWU0YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWdjE9ws7k20XDioxiAszgL4I/mC
d/hLz4ghPqSx9Wnk4F7OHjqYErto9EchuhLbnjJhKrtF9KNnOQKlPWMPdg89aylt
JdAKUPpPWe3TSpUvu/s1uCCn7QzJRkpBAP4QNeKK/5aEATEqcyLVvzhKZfBGQU3o
r/C3xuAAPE6Qt+SgIzTjYzG/FYNxsGRUnlTNKIaBeDJSFkdWfKATCGYYWDP5zAli
IoY3McMp3AZUHsIMT8Q4c7w5hpuVfB/+buFGXPHBqOKKrTZ7fQuNr3CMqyVgjEmW
xabnxY0XbDargKvkxtIu8ZD73cRsVxThX7LJIzJ2OFXQuMA9vAft8VrkmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYmPQmjgyXcMgD+F2pjXa4nXkpHMB8GA1UdIwQY
MBaAFKttqDSzLLEsS9rjP2cvNI2YPzF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgt
NTg2N2NhNzc4OTdlLzEvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgtNTg2N2NhNzc4OTdl
LzEvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjIwaBWk
0NZAS7NF3YEaxJggJgoO4BaPsS7mRy/rWZWT9pcV/DyqMo7R2ss2ofOL+1EOrwFu
M878GZ7bFlmzviGX/e6PLqmkMupN+cgrI1P3SeWD0evJP+eLBYHudOb+eOmgCJtD
V4pthEbL90TkgYggwXciOLbQV+Z0m+PFAd8+o4K1+SQVnPvkeU/4MlS5Y2tfmtvc
wR/KPN93GX2lY6WmY/ya71LwUezOfF85M4Xs0sr6Ii5d/lfZFwkHraRBLwWzBMjU
V88XiE90M4t1SsX0e/t5UVykdYtpG3B9fiRMrshBuqdlN109Bar7kHgy4M83hota
RcWaLjWQiTK0ag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:14 2026 by rpki-client