Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: LkuQcFleBGCBtGHCByvSEZnzy7W0zgHfw7fM/7x+r70=
Subject key identifier: CA:A5:26:4C:AC:35:CD:3B:88:90:FB:96:47:88:83:7B:BF:BC:4E:CD
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019CABA1EAAD9B3DE458E36954BEEA53D929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0DAF
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
4: b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa (hash: AyGNKQTPsYrYHZ1HAXTaHMHz0cT3+QNKk6bga2VEm6U=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: 10XugaTjID9QhBort1JPGvH8oHeKwS3t5Q+ExDim7mo=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ea:ad:9b:3d:e4:58:e3:69:54:be:ea:53:d9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=caa5264cac35cd3b8890fb964788837bbfbc4ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:fe:ed:d7:6c:de:7e:97:12:ad:45:31:60:
08:a7:10:34:a5:14:14:c0:cd:9e:6d:ed:81:99:0f:
30:77:9c:cf:1a:30:a5:59:a6:da:ce:c6:a8:d1:74:
60:f2:f1:bf:2c:17:39:42:ca:e8:65:96:a3:38:57:
53:9b:fc:53:e0:7a:1e:71:5a:59:7e:a8:fe:31:71:
68:03:ea:1c:a1:4a:43:8f:45:17:58:68:5a:4c:35:
f4:71:a6:ca:2e:b6:37:87:a8:e8:cf:10:3b:3c:75:
1c:c1:f6:8e:5c:b0:19:85:c1:46:96:ad:ba:cd:f6:
da:c3:c3:bb:47:14:7a:91:b7:02:fc:0b:9f:1c:39:
0b:5c:fe:c8:6c:d0:4e:37:f8:42:8d:01:ee:f7:06:
b1:c8:e5:11:a8:06:ff:a2:73:55:c0:30:78:2b:e1:
a7:d1:cb:f8:26:f3:1a:ab:ba:c3:10:09:3e:57:eb:
13:9c:3a:ae:5f:02:67:3e:32:7d:c1:37:4b:cc:87:
ec:19:66:a9:41:46:af:b3:60:f4:77:a0:78:a1:5b:
6d:7d:a5:a3:7d:55:ad:3d:55:b9:a9:ba:a8:bc:ac:
06:a8:4d:56:04:58:f9:59:69:75:86:d3:df:88:d4:
29:6f:59:3f:ab:cf:e3:a5:80:35:2c:d7:b4:86:5a:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:26:4C:AC:35:CD:3B:88:90:FB:96:47:88:83:7B:BF:BC:4E:CD
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e4:c5:cb:7f:78:88:84:60:3c:d8:55:3e:7a:85:25:b9:8a:
fb:a8:3e:62:26:97:5a:bd:c1:fa:1b:e2:a5:71:db:cb:3e:d7:
2f:13:2c:8e:39:b0:74:eb:dd:c8:93:a5:87:c4:95:ad:d7:6c:
5e:2b:ad:7c:2a:84:10:32:00:d3:87:ba:63:43:63:94:09:30:
29:5a:05:e2:ec:03:ed:2f:fc:2a:42:e6:9c:85:40:99:4a:93:
12:49:34:b4:fe:19:9b:06:c7:8b:e4:6b:ee:f9:a8:db:8d:89:
b6:71:5e:39:27:ab:47:48:f3:a4:0f:0c:4a:61:dc:fe:5d:a0:
1b:aa:11:8c:3e:75:3f:6e:db:29:f5:05:20:7a:59:7d:36:69:
28:44:74:6d:4f:cf:a9:c4:b5:6b:e6:5e:0e:85:b2:5f:a3:0c:
7a:81:10:43:da:57:92:74:26:81:e8:f8:7c:a1:39:80:a7:89:
0a:67:d8:71:c6:27:7a:a5:44:44:61:22:9f:59:f6:42:6c:04:
08:cd:5e:18:59:9f:9f:63:b1:9a:0c:98:98:99:4b:5e:51:fd:
33:af:da:7a:1d:ba:b3:14:e0:e6:58:cf:f8:b4:32:c0:3e:ef:
26:1a:97:05:de:f0:bf:f4:ba:6b:e5:e7:f6:12:a6:62:cf:f5:
30:cc:bb:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroeqtmz3kWONpVL7qU9kpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjYwMzAxMjMwMDQxWhcNMjYwMzAyMjMwMDQxWjAzMTEwLwYDVQQD
EyhjYWE1MjY0Y2FjMzVjZDNiODg5MGZiOTY0Nzg4ODM3YmJmYmM0ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d7+7dds3n6XEq1FMWAIpxA0pRQU
wM2ebe2BmQ8wd5zPGjClWabazsao0XRg8vG/LBc5QsroZZajOFdTm/xT4HoecVpZ
fqj+MXFoA+ocoUpDj0UXWGhaTDX0cabKLrY3h6jozxA7PHUcwfaOXLAZhcFGlq26
zfbaw8O7RxR6kbcC/AufHDkLXP7IbNBON/hCjQHu9waxyOURqAb/onNVwDB4K+Gn
0cv4JvMaq7rDEAk+V+sTnDquXwJnPjJ9wTdLzIfsGWapQUavs2D0d6B4oVttfaWj
fVWtPVW5qbqovKwGqE1WBFj5WWl1htPfiNQpb1k/q8/jpYA1LNe0hlrlRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqlJkysNc07iJD7lkeIg3u/vE7NMB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeTFy394
iIRgPNhVPnqFJbmK+6g+YiaXWr3B+hvipXHbyz7XLxMsjjmwdOvdyJOlh8SVrdds
XiutfCqEEDIA04e6Y0NjlAkwKVoF4uwD7S/8KkLmnIVAmUqTEkk0tP4ZmwbHi+Rr
7vmo242JtnFeOSerR0jzpA8MSmHc/l2gG6oRjD51P27bKfUFIHpZfTZpKER0bU/P
qcS1a+ZeDoWyX6MMeoEQQ9pXknQmgej4fKE5gKeJCmfYccYneqVERGEin1n2QmwE
CM1eGFmfn2OxmgyYmJlLXlH9M6/aeh26sxTg5ljP+LQywD7vJhqXBd7wv/S6a+Xn
9hKmYs/1MMy7Hg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:39 2026 by rpki-client