Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: sfWoOMqq2CVD6fV0jMyJsANbdIdFnh2iuyy1VsNiinI=
Subject key identifier: 69:D2:E3:14:8B:7E:E0:C5:60:FF:00:EE:B4:EC:7A:B8:67:D7:8E:1F
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019CAAC719428DADAA9B2A6BA58230AFDFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0875
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: d9T+94n7/v/Z6Tfmz+jfn11ltxFYkGX4sDTuu5DQe4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:19:42:8d:ad:aa:9b:2a:6b:a5:82:30:af:df:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=69d2e3148b7ee0c560ff00eeb4ec7ab867d78e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:7d:39:63:34:20:a5:c3:2e:8a:cb:76:41:
bd:af:48:05:fc:19:6d:66:65:65:e8:e3:02:75:b2:
37:c8:4d:d2:a2:da:3e:8b:6b:cf:a7:ec:a6:d9:3f:
ef:20:b6:a8:27:8a:75:28:df:1c:4c:54:a0:a1:7a:
21:a5:ce:d4:c9:58:55:81:47:5c:a1:be:1d:67:db:
1b:e4:90:61:96:2c:ef:f2:51:db:bb:a9:d2:3e:95:
9c:6c:6c:88:91:0c:c6:b1:a8:cd:f5:6e:f2:8c:ab:
44:9a:6f:95:5a:cd:7b:ce:e3:0e:3b:5e:ce:a3:7f:
be:a1:04:76:0f:90:61:62:f4:d1:43:0c:c1:13:76:
4f:d5:1f:d9:64:5e:47:eb:ac:36:92:ce:81:4d:11:
63:93:18:ac:f4:59:e7:6a:98:09:fd:b0:12:07:aa:
97:75:db:3a:83:54:88:a8:ec:4f:3c:1e:d5:b6:39:
ef:07:dd:95:b1:15:10:42:7a:d1:81:ba:65:95:26:
d8:ef:8c:a4:bb:1f:ed:a5:cf:23:2f:55:82:7f:d7:
b8:27:ac:b7:a5:b0:c7:73:e4:ec:71:62:33:45:65:
57:98:7e:2e:da:b9:a9:e9:1e:34:b9:19:63:6e:4c:
13:f6:e5:3e:aa:92:7c:e5:48:b9:51:f5:e6:1a:1a:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:E3:14:8B:7E:E0:C5:60:FF:00:EE:B4:EC:7A:B8:67:D7:8E:1F
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8a:7f:2c:fe:ae:98:02:fe:c2:93:02:a3:1e:20:e1:3c:83:
b6:2a:64:ce:ff:f9:48:21:b2:7e:1c:1b:7a:04:0a:5c:2c:44:
a8:89:56:ae:80:48:6f:69:77:9d:38:c2:18:ad:99:51:c7:25:
a4:dc:76:3a:91:f2:04:3c:ba:ad:67:4f:b1:c3:fb:87:08:b0:
f5:84:54:10:82:61:88:4f:75:e7:bc:fd:fd:a6:48:82:0a:44:
ee:4d:69:1d:1b:61:e0:a2:b3:05:43:5f:2d:2b:9d:70:eb:7d:
8a:9b:cd:a4:70:2f:de:da:36:50:19:58:28:1e:cd:cf:b7:aa:
85:46:0d:ba:62:28:58:39:f1:8a:f8:74:a3:13:a6:b5:af:b8:
66:75:77:fb:51:fb:67:a6:dd:dd:b5:a3:c3:7f:2b:58:7d:83:
59:38:94:7b:19:85:9c:ef:ca:33:43:ab:6d:5f:64:72:fe:5a:
b7:cc:8a:46:98:32:3c:f7:3f:46:ba:06:12:b7:c8:ed:b4:d5:
8d:6f:1c:50:c3:e4:18:2e:d8:89:3b:1f:36:86:77:b9:03:d2:
cf:c5:84:3c:72:df:33:5a:3a:db:82:b9:93:f4:8c:69:a8:b3:
94:5b:ff:78:25:75:f3:be:0b:2b:52:ed:a6:41:d0:b2:c3:5f:
4a:48:73:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxlCja2qmyprpYIwr9+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWU1NGFmY2U1MTU0NTQ3OWMwZGEwM2YyMDFhNzRlMjk5
MjdkNzgwHhcNMjYwMzAxMTkwMTQwWhcNMjYwMzAyMTkwMTQwWjAzMTEwLwYDVQQD
Eyg2OWQyZTMxNDhiN2VlMGM1NjBmZjAwZWViNGVjN2FiODY3ZDc4ZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiB9OWM0IKXDLorLdkG9r0gF/Blt
ZmVl6OMCdbI3yE3Soto+i2vPp+ym2T/vILaoJ4p1KN8cTFSgoXohpc7UyVhVgUdc
ob4dZ9sb5JBhlizv8lHbu6nSPpWcbGyIkQzGsajN9W7yjKtEmm+VWs17zuMOO17O
o3++oQR2D5BhYvTRQwzBE3ZP1R/ZZF5H66w2ks6BTRFjkxis9FnnapgJ/bASB6qX
dds6g1SIqOxPPB7VtjnvB92VsRUQQnrRgbpllSbY74ykux/tpc8jL1WCf9e4J6y3
pbDHc+TscWIzRWVXmH4u2rmp6R40uRljbkwT9uU+qpJ85Ui5UfXmGhquVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnS4xSLfuDFYP8A7rTserhn144fMB8GA1UdIwQY
MBaAFP6uVK/OUVRUecDaA/IBp04pkn14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYt
N2E2NTIzMDNhMjhhLzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYtN2E2NTIzMDNhMjhh
LzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4p/LP6u
mAL+wpMCox4g4TyDtipkzv/5SCGyfhwbegQKXCxEqIlWroBIb2l3nTjCGK2ZUccl
pNx2OpHyBDy6rWdPscP7hwiw9YRUEIJhiE9157z9/aZIggpE7k1pHRth4KKzBUNf
LSudcOt9ipvNpHAv3to2UBlYKB7Nz7eqhUYNumIoWDnxivh0oxOmta+4ZnV3+1H7
Z6bd3bWjw38rWH2DWTiUexmFnO/KM0OrbV9kcv5at8yKRpgyPPc/RroGErfI7bTV
jW8cUMPkGC7YiTsfNoZ3uQPSz8WEPHLfM1o624K5k/SMaaizlFv/eCV1874LK1Lt
pkHQssNfSkhzkw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:28 2026 by rpki-client