Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier: K3WVKSinX+JNpKyQiRYyKg8kKfIgKWUIRhtbNRr56c4=
Subject key identifier: 2C:47:4E:55:54:A2:99:36:73:83:4A:1F:BC:F7:B5:D4:1C:66:A3:C4
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial: 019D9A3DE490BBFCC6DA2A5230861DEF011F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number: 0896
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: KyhRrbxFKMpr2N27AeRcP+IScNPpXUjn7oVrzBZ51co=)
2: f5IHBYE7NDPyB0LVrNWj1GgBNpg.roa (hash: 9Iaa5W9aUPxiaP8/fOFVvFkP2DxoYQVxx3K7Xwo06Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e4:90:bb:fc:c6:da:2a:52:30:86:1d:ef:01:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=2c474e5554a2993673834a1fbcf7b5d41c66a3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:e0:68:2a:81:3b:b5:01:e8:0e:62:be:ef:
d6:cc:2b:5e:da:0a:99:7e:57:09:b9:f8:ca:c8:ae:
9b:74:be:bb:b9:d5:0f:b8:58:93:c2:5f:78:15:14:
9e:bd:b4:e7:4d:19:7c:b7:bc:62:13:26:f4:69:3f:
20:98:3c:ff:c3:17:00:fb:90:a9:b2:a1:af:ad:d5:
c0:aa:0f:1b:6a:97:72:f7:59:68:b7:ed:42:0c:93:
13:b2:0a:00:23:2e:49:2e:51:db:c8:ba:bf:58:10:
0a:9e:a6:a9:86:b0:29:ec:29:18:62:e7:6b:c2:c2:
b9:d7:c7:25:ac:c2:d7:df:f6:11:89:7c:c4:99:e9:
b2:24:5a:10:87:26:6c:01:fb:18:ff:b0:c3:f8:60:
40:fa:39:34:8c:84:5a:3f:0d:b9:3f:13:e2:2f:5a:
b9:1a:d1:d4:85:d1:1d:39:bc:6c:8b:64:82:71:3e:
1a:f5:0f:33:0d:73:07:a8:3b:49:da:4d:3d:4c:16:
3c:ff:90:7e:8e:6a:0e:e3:c9:3e:0f:6c:73:5e:61:
1b:00:b8:99:ea:e1:7e:f2:1b:59:9c:91:b8:25:1b:
e8:a5:8e:c3:20:15:40:89:95:6f:5a:bc:1b:b6:85:
2a:42:9e:a9:d4:e5:19:63:ee:65:74:eb:72:99:50:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:4E:55:54:A2:99:36:73:83:4A:1F:BC:F7:B5:D4:1C:66:A3:C4
X509v3 Authority Key Identifier:
keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:7a:e4:e7:7f:fe:7b:73:d7:c6:cd:e4:7e:04:66:29:ef:
16:80:11:9a:d0:a8:db:6e:bc:d0:61:ef:0f:e7:95:61:e0:5e:
60:31:a1:19:d1:23:a3:3a:f6:f5:8c:dc:42:bc:71:f9:c7:fe:
be:68:fd:86:04:8c:13:e3:e5:a0:cf:d8:59:20:b4:17:41:4b:
30:79:69:7a:fd:d0:36:01:f1:f8:a1:51:c2:2a:ad:39:c9:45:
ed:fa:ee:9f:78:a3:96:be:9c:b2:8a:40:2a:63:a2:6b:25:5f:
dc:30:f7:05:0b:9c:bb:7d:18:76:df:f2:6e:c5:e8:16:f7:dd:
09:ac:ce:e5:c5:a7:51:6d:e8:7b:e3:f9:db:41:c0:b1:af:9a:
2c:58:7b:07:b7:6e:6f:5e:47:b6:fd:a0:dd:81:22:3a:d4:2c:
5a:dd:aa:a2:aa:d3:48:d7:35:79:4f:2b:14:3b:01:8a:2d:f4:
bd:fb:bc:e0:f8:0d:80:55:47:8b:1d:c7:52:6e:95:65:65:b9:
65:27:fe:31:73:bf:d8:da:dd:fe:c1:90:c0:b7:59:fa:ec:a0:
ce:bf:72:c1:9a:83:d7:71:1d:db:7a:c9:7d:cf:00:d8:30:fe:
50:9e:35:48:ef:d1:a3:03:22:86:12:83:05:aa:14:df:da:f4:
b4:6b:68:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPeSQu/zG2ipSMIYd7wEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YTcxYjRlODY5NDQxN2ViYmJjZjYyNjhiOWM4Zjk2MzE3
MGIxZjEwHhcNMjYwNDE3MDcwMDQwWhcNMjYwNDE4MDcwMDQwWjAzMTEwLwYDVQQD
EygyYzQ3NGU1NTU0YTI5OTM2NzM4MzRhMWZiY2Y3YjVkNDFjNjZhM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrngaCqBO7UB6A5ivu/WzCte2gqZ
flcJufjKyK6bdL67udUPuFiTwl94FRSevbTnTRl8t7xiEyb0aT8gmDz/wxcA+5Cp
sqGvrdXAqg8bapdy91lot+1CDJMTsgoAIy5JLlHbyLq/WBAKnqaphrAp7CkYYudr
wsK518clrMLX3/YRiXzEmemyJFoQhyZsAfsY/7DD+GBA+jk0jIRaPw25PxPiL1q5
GtHUhdEdObxsi2SCcT4a9Q8zDXMHqDtJ2k09TBY8/5B+jmoO48k+D2xzXmEbALiZ
6uF+8htZnJG4JRvopY7DIBVAiZVvWrwbtoUqQp6p1OUZY+5ldOtymVD/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxHTlVUopk2c4NKH7z3tdQcZqPEMB8GA1UdIwQY
MBaAFNanG06GlEF+u7z2Joucj5YxcLHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQt
MjkzMTEwNGM1ZjdhLzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQtMjkzMTEwNGM1Zjdh
LzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE165Od/
/ntz18bN5H4EZinvFoARmtCo22680GHvD+eVYeBeYDGhGdEjozr29YzcQrxx+cf+
vmj9hgSME+PloM/YWSC0F0FLMHlpev3QNgHx+KFRwiqtOclF7frun3ijlr6csopA
KmOiayVf3DD3BQucu30Ydt/ybsXoFvfdCazO5cWnUW3oe+P520HAsa+aLFh7B7du
b15Htv2g3YEiOtQsWt2qoqrTSNc1eU8rFDsBii30vfu84PgNgFVHix3HUm6VZWW5
ZSf+MXO/2Nrd/sGQwLdZ+uygzr9ywZqD13Ed23rJfc8A2DD+UJ41SO/RowMihhKD
BaoU39r0tGto5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:12 2026 by rpki-client