Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: mGSuypOkxKcw48DUyU/DXlxRnJ0WHUJuEvoc+qz+Ysk=
Subject key identifier: FF:D9:37:CC:DF:F1:E9:92:56:89:E2:A3:2A:5E:88:C3:E9:51:98:39
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 019CADC7CB1EDC1BF57B6AEFC26EB1574317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 09:01:17 +0000
Manifest this update: Mon 02 Mar 2026 09:01:17 +0000
Manifest next update: Tue 03 Mar 2026 09:01:17 +0000
Files and hashes: 1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: KtWWF3pP+UcV40z0dr4xeeYTc0LS+FKdeH6aRk57HT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:cb:1e:dc:1b:f5:7b:6a:ef:c2:6e:b1:57:43:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Mar 2 09:01:17 2026 GMT
Not After : Mar 3 09:01:17 2026 GMT
Subject: CN=ffd937ccdff1e9925689e2a32a5e88c3e9519839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:55:2b:a5:a3:22:fe:f9:53:9a:74:f4:66:
52:27:1b:47:85:7f:e7:05:6a:59:14:0f:80:58:45:
f0:83:20:5f:84:8e:6d:17:37:dc:c4:7b:17:0b:ce:
47:ea:e6:c6:55:1a:99:6f:1c:a5:c8:ad:f1:7f:fd:
2e:d3:ec:f3:6a:45:ad:62:22:5e:ef:3d:76:1c:53:
48:d7:83:6c:c3:1d:a3:6a:bb:b2:f7:c5:d2:db:65:
44:b2:63:a1:dd:0b:d8:3e:dc:79:6c:52:a3:d0:b4:
12:e4:b2:b5:f9:fa:90:e7:8e:b9:b7:fd:cc:41:72:
75:3f:58:13:2f:ee:40:29:34:36:c5:b8:b2:17:69:
29:56:88:1e:8e:9c:b8:19:83:10:45:fd:52:d9:b0:
71:e7:ff:db:63:47:3c:d0:f5:80:13:0d:55:c4:ce:
a0:4f:33:ab:44:10:77:6b:57:0b:10:cf:c0:b0:aa:
58:e9:83:de:fa:6c:b4:a2:0c:d5:bf:3f:f3:30:51:
c6:da:47:38:da:e4:08:ab:8a:c5:65:fa:ba:d3:d4:
88:1e:ba:58:94:5d:52:fd:1d:eb:4c:ee:0f:cd:6a:
5e:5b:ec:61:ec:aa:17:9f:ef:50:16:90:5c:e9:c3:
90:8b:8a:a1:0f:61:11:25:3c:76:56:f0:28:36:cb:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:37:CC:DF:F1:E9:92:56:89:E2:A3:2A:5E:88:C3:E9:51:98:39
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:f0:4f:31:00:42:3f:40:22:d6:5e:5c:bc:ae:60:c8:25:
2d:26:bc:1f:13:ab:58:bc:82:9d:d1:4a:86:51:ad:d1:1a:9e:
93:bf:64:b2:59:d9:85:8e:02:38:43:67:a3:47:7a:8e:49:37:
b7:cf:49:b0:5c:66:a7:fd:89:0c:05:d0:ba:26:78:7f:be:44:
94:1a:5e:76:26:9c:74:57:98:0a:bd:0f:0b:78:5a:55:d0:1f:
1b:a0:4f:4e:d1:64:28:3c:cf:10:83:e2:5c:82:33:3b:fa:9f:
fa:b8:13:8e:62:45:27:92:93:c3:b8:e0:5f:6e:87:7f:e0:a6:
52:52:fb:3c:b6:ee:2d:6d:b8:81:8c:33:8d:ef:5d:a9:24:4d:
68:0c:d8:4c:88:42:97:68:c1:e7:73:8a:fa:dd:5c:e5:04:e2:
12:56:e9:a2:9e:75:3e:64:52:a8:c3:1a:0e:1a:0c:7f:b6:8c:
35:07:32:b2:89:4c:38:26:d9:55:54:80:64:3c:00:4f:f8:68:
08:88:c0:72:22:52:72:80:62:2f:1a:45:61:0c:41:93:5c:3e:
11:d3:27:b0:0a:0b:63:e3:7d:90:39:ec:de:26:54:47:0b:b0:
9a:ba:47:79:60:ac:20:31:62:0b:79:b1:89:5e:ce:8a:2a:98:
1b:e9:9d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx8se3Bv1e2rvwm6xV0MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl
MzlhYzYwHhcNMjYwMzAyMDkwMTE3WhcNMjYwMzAzMDkwMTE3WjAzMTEwLwYDVQQD
EyhmZmQ5MzdjY2RmZjFlOTkyNTY4OWUyYTMyYTVlODhjM2U5NTE5ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV9VK6WjIv75U5p09GZSJxtHhX/n
BWpZFA+AWEXwgyBfhI5tFzfcxHsXC85H6ubGVRqZbxylyK3xf/0u0+zzakWtYiJe
7z12HFNI14Nswx2jaruy98XS22VEsmOh3QvYPtx5bFKj0LQS5LK1+fqQ5465t/3M
QXJ1P1gTL+5AKTQ2xbiyF2kpVogejpy4GYMQRf1S2bBx5//bY0c80PWAEw1VxM6g
TzOrRBB3a1cLEM/AsKpY6YPe+my0ogzVvz/zMFHG2kc42uQIq4rFZfq609SIHrpY
lF1S/R3rTO4PzWpeW+xh7KoXn+9QFpBc6cOQi4qhD2ERJTx2VvAoNsvTzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/ZN8zf8emSVonioypeiMPpUZg5MB8GA1UdIwQY
MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt
YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm
LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapXwTzEA
Qj9AItZeXLyuYMglLSa8HxOrWLyCndFKhlGt0Rqek79kslnZhY4COENno0d6jkk3
t89JsFxmp/2JDAXQuiZ4f75ElBpediacdFeYCr0PC3haVdAfG6BPTtFkKDzPEIPi
XIIzO/qf+rgTjmJFJ5KTw7jgX26Hf+CmUlL7PLbuLW24gYwzje9dqSRNaAzYTIhC
l2jB53OK+t1c5QTiElbpop51PmRSqMMaDhoMf7aMNQcysolMOCbZVVSAZDwAT/ho
CIjAciJScoBiLxpFYQxBk1w+EdMnsAoLY+N9kDns3iZURwuwmrpHeWCsIDFiC3mx
iV7OiiqYG+mdqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:42 2026 by rpki-client