Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
File: sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json)
Hash identifier: NVzyq7D/L72XHc6Z2aWDt8ypDPwpBV7OJWAKluPGsg0=
Subject key identifier: DC:7C:F3:6E:74:D1:20:5C:91:C8:CB:D1:11:79:DA:8A:42:56:CA:46
Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
Certificate issuer: /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Certificate serial: 019CABD9544C44400A094A2357523F2C6DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
Manifest number: 06D4
Signing time: Mon 02 Mar 2026 00:01:12 +0000
Manifest this update: Mon 02 Mar 2026 00:01:12 +0000
Manifest next update: Tue 03 Mar 2026 00:01:12 +0000
Files and hashes: 1: ZoA4ZVqC0ZLffn6V-FB9F10l7pU.roa (hash: aHUNwJ+YvxKRTJDaD0sMuoyAC4QGr+TPQfR1XTwxQGw=)
2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: 4QwaQlVdguQV8gKaTbZagp9Ji/z4qdPbHE6GMJoE7Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:54:4c:44:40:0a:09:4a:23:57:52:3f:2c:6d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Validity
Not Before: Mar 2 00:01:12 2026 GMT
Not After : Mar 3 00:01:12 2026 GMT
Subject: CN=dc7cf36e74d1205c91c8cbd11179da8a4256ca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:20:87:de:ca:fd:84:4e:04:63:35:1d:10:
6e:2b:3f:1b:13:b9:14:34:22:ab:0f:30:c0:df:e0:
09:94:fe:5a:9e:80:a9:fd:02:4a:78:f8:37:cc:a4:
41:46:63:d4:5c:8b:ea:ce:64:e8:ad:b0:27:b7:15:
a5:37:8e:85:f4:8d:bd:4e:b1:52:35:61:ad:fc:02:
70:d4:0e:c8:a0:cc:ee:fe:12:32:78:ec:5b:ef:ee:
36:7c:f1:33:55:06:76:23:23:d2:5f:31:09:1e:e5:
49:a5:ba:89:8b:94:c7:29:4d:d7:76:9d:56:5b:5b:
66:b5:ba:b3:26:0b:15:c9:1a:bf:c4:ca:e5:01:51:
3d:4f:c3:2a:3f:ad:f7:e7:55:9c:6c:10:34:e8:e3:
02:19:a8:e8:e2:dc:52:12:34:9f:fd:9a:57:21:69:
f6:fb:b9:1c:4d:d0:f6:d6:91:10:9e:c4:ef:34:da:
fb:28:12:41:80:b2:6b:cd:b0:15:3f:06:ff:00:2a:
55:df:0b:b8:56:45:0f:3d:06:8d:b7:79:10:06:e0:
25:6c:ea:23:21:d8:8d:36:a0:0d:50:06:9d:30:e5:
d0:e0:ac:f9:d1:75:a9:b1:86:70:2d:2a:e8:40:6b:
73:a5:24:15:70:dd:95:53:e4:f7:9c:43:90:6f:8c:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:F3:6E:74:D1:20:5C:91:C8:CB:D1:11:79:DA:8A:42:56:CA:46
X509v3 Authority Key Identifier:
keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:84:b9:f5:ba:06:b7:b5:25:91:42:89:8f:fa:aa:de:b7:a8:
8c:4c:5d:f8:a6:e2:37:16:a1:e6:ac:15:c1:4e:48:8e:9d:99:
1a:06:0e:bc:c4:e4:a4:73:17:43:df:14:ec:e4:ad:45:7c:98:
66:f9:f6:94:82:a6:25:19:e7:da:f8:b8:a6:f1:5e:6e:8a:a6:
91:e0:90:47:86:5b:f5:c5:4d:d5:a8:df:64:9e:b4:21:a3:aa:
70:7b:5d:af:54:ea:71:7a:76:db:56:36:df:23:0d:15:9d:cd:
6a:08:ac:d7:b8:fd:a8:18:e9:55:c3:b9:d7:5b:11:aa:b4:26:
87:8a:c9:92:d1:0e:24:ac:03:07:05:57:b2:10:d5:8f:9b:9e:
6e:bf:a9:37:67:7b:8d:f9:30:8f:db:27:cd:4a:d7:37:99:18:
74:72:dc:32:d5:2f:26:69:77:8e:42:3d:d2:c5:d0:1f:7f:b7:
1d:d0:aa:8b:c1:70:36:1a:bf:49:15:c1:cf:d6:ea:10:45:b8:
ed:c7:3e:90:06:ee:a9:17:77:4f:a5:9b:15:1b:45:ed:b0:e3:
b5:77:4b:ca:16:2f:bb:4c:37:8e:c3:a5:27:3b:af:6e:1c:88:
38:80:70:8b:39:8c:ec:5c:6e:b1:81:63:30:ca:cf:a5:e3:2b:
c1:98:b8:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2VRMREAKCUojV1I/LG3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWYzZDY1OGI0OTRjYjE3MTUyMDZjNWNkNzZlNzkyZTcy
NDdlZjcwHhcNMjYwMzAyMDAwMTEyWhcNMjYwMzAzMDAwMTEyWjAzMTEwLwYDVQQD
EyhkYzdjZjM2ZTc0ZDEyMDVjOTFjOGNiZDExMTc5ZGE4YTQyNTZjYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHogh97K/YROBGM1HRBuKz8bE7kU
NCKrDzDA3+AJlP5anoCp/QJKePg3zKRBRmPUXIvqzmTorbAntxWlN46F9I29TrFS
NWGt/AJw1A7IoMzu/hIyeOxb7+42fPEzVQZ2IyPSXzEJHuVJpbqJi5THKU3Xdp1W
W1tmtbqzJgsVyRq/xMrlAVE9T8MqP63351WcbBA06OMCGajo4txSEjSf/ZpXIWn2
+7kcTdD21pEQnsTvNNr7KBJBgLJrzbAVPwb/ACpV3wu4VkUPPQaNt3kQBuAlbOoj
IdiNNqANUAadMOXQ4Kz50XWpsYZwLSroQGtzpSQVcN2VU+T3nEOQb4zPEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx882500SBckcjL0RF52opCVspGMB8GA1UdIwQY
MBaAFLKvPWWLSUyxcVIGxc1255LnJH73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQt
YTJlZWJiMTY2ZmM4LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQtYTJlZWJiMTY2ZmM4
LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYS59boG
t7UlkUKJj/qq3reojExd+KbiNxah5qwVwU5Ijp2ZGgYOvMTkpHMXQ98U7OStRXyY
Zvn2lIKmJRnn2vi4pvFeboqmkeCQR4Zb9cVN1ajfZJ60IaOqcHtdr1TqcXp221Y2
3yMNFZ3Nagis17j9qBjpVcO511sRqrQmh4rJktEOJKwDBwVXshDVj5uebr+pN2d7
jfkwj9snzUrXN5kYdHLcMtUvJml3jkI90sXQH3+3HdCqi8FwNhq/SRXBz9bqEEW4
7cc+kAbuqRd3T6WbFRtF7bDjtXdLyhYvu0w3jsOlJzuvbhyIOIBwizmM7FxusYFj
MMrPpeMrwZi4tg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:03 2026 by rpki-client