Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: Hwn6W3o0zgAfvlJJuT8iryqIyg2QCfaXferiRhIzBcY=
Subject key identifier: AB:F3:B7:73:FE:5F:AD:80:B4:70:70:71:39:18:77:D2:79:E6:04:5A
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019CAC0FD7EF00A89223B1798B00B3FE02EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0D1B
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: e6s/2pLYv1oBdfXs1UJHSoNy4m076+6TXN/0J2wjMFw=)
2: PnfxL11O3EjH9h0EH3Rg7luqnAM.roa (hash: i4lQXSpeif5iY7JiCTfcDMb/7WzWvaV3TLIqruxq13Q=)
3: x6wY1hh1UMR03dRTbKZ1rvUylzo.roa (hash: jSu5cUSFLGmQIwJTQdJ25XCFgFKf8LZSMzXzmSmg5w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d7:ef:00:a8:92:23:b1:79:8b:00:b3:fe:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=abf3b773fe5fad80b4707071391877d279e6045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:89:9a:6c:b2:f9:be:31:d8:6e:7e:0f:85:
96:d3:a4:3d:d9:ff:0a:64:eb:3a:d5:75:5d:aa:a0:
e6:a3:19:4b:86:81:cd:dd:38:33:15:91:ef:7d:68:
49:ed:46:7b:9a:ae:e5:1f:ce:55:b8:2b:77:c5:af:
1f:c5:aa:41:5a:87:d3:54:c8:54:20:c1:05:2b:f0:
11:8e:06:10:91:61:f8:f1:2a:ee:67:67:98:37:92:
c9:4b:9d:7d:39:4b:74:e5:70:19:53:73:7c:69:91:
80:2c:cf:81:bd:e6:03:79:51:a7:ea:57:7a:4d:99:
61:e2:63:c3:13:c9:92:ac:d4:33:ce:29:6e:e4:a0:
76:29:df:b3:f6:ba:db:20:1e:b1:94:86:59:72:3d:
fc:9e:08:51:8a:34:d1:64:46:d9:10:2c:62:1b:98:
dd:0e:53:bd:be:00:7c:f5:4e:ab:25:d8:86:1a:5a:
ab:dc:1b:78:6f:49:5c:14:a5:c1:5d:f3:dc:47:40:
71:da:e4:34:3c:05:69:ef:68:02:86:ce:9f:6a:94:
68:26:ca:4a:c7:d3:73:03:39:5d:3d:8e:4e:6f:c6:
28:3e:dd:47:33:4f:b0:54:aa:5a:a0:40:e8:79:73:
63:bb:72:fc:07:d6:f1:11:dd:32:e1:7a:92:cb:9e:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F3:B7:73:FE:5F:AD:80:B4:70:70:71:39:18:77:D2:79:E6:04:5A
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7c:fe:70:42:fa:f6:6a:16:79:74:86:db:68:6e:0b:16:1e:
99:fe:18:fa:e8:6e:e1:e2:fb:fa:7a:8b:f9:ee:d0:70:ae:d1:
a3:7a:ec:3b:72:59:0a:12:40:30:51:52:b1:f0:d2:7e:47:64:
f5:1e:53:07:3c:11:98:64:f7:ff:79:44:b4:53:24:4e:be:2b:
f5:4d:22:32:71:25:03:36:d8:7c:27:d8:61:37:34:c6:37:97:
5a:94:a1:56:ec:4b:57:a2:4e:96:d3:1b:23:bd:38:b5:67:3c:
d4:07:e4:cf:4c:44:99:cc:69:70:53:09:c2:01:63:8d:8f:29:
b3:61:93:6a:21:af:50:22:b3:cf:61:dc:83:8f:c5:04:1d:96:
80:ac:5d:d8:38:34:d5:98:00:9b:3b:7d:37:c0:0f:f8:fa:5a:
9b:cf:8c:6d:c1:ca:43:7d:b7:49:fc:c1:2a:ed:d6:3e:7f:fc:
8e:73:8f:20:93:97:d1:7d:a7:90:37:c3:8a:3f:22:a6:92:7d:
e7:34:67:3a:f9:b7:b9:16:93:02:67:00:89:7e:ea:13:9a:98:
df:f5:8f:f3:fc:4a:9e:1f:24:8d:43:21:74:a6:9c:f9:76:18:
c5:ee:fb:a6:81:dd:76:a2:ca:aa:7a:3b:da:57:dd:84:91:4f:
a6:9e:14:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9fvAKiSI7F5iwCz/gLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4
NTNjY2YwHhcNMjYwMzAyMDEwMDQ1WhcNMjYwMzAzMDEwMDQ1WjAzMTEwLwYDVQQD
EyhhYmYzYjc3M2ZlNWZhZDgwYjQ3MDcwNzEzOTE4NzdkMjc5ZTYwNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx++Jmmyy+b4x2G5+D4WW06Q92f8K
ZOs61XVdqqDmoxlLhoHN3TgzFZHvfWhJ7UZ7mq7lH85VuCt3xa8fxapBWofTVMhU
IMEFK/ARjgYQkWH48SruZ2eYN5LJS519OUt05XAZU3N8aZGALM+BveYDeVGn6ld6
TZlh4mPDE8mSrNQzzilu5KB2Kd+z9rrbIB6xlIZZcj38nghRijTRZEbZECxiG5jd
DlO9vgB89U6rJdiGGlqr3Bt4b0lcFKXBXfPcR0Bx2uQ0PAVp72gChs6fapRoJspK
x9NzAzldPY5Ob8YoPt1HM0+wVKpaoEDoeXNju3L8B9bxEd0y4XqSy56w/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvzt3P+X62AtHBwcTkYd9J55gRaMB8GA1UdIwQY
MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt
NmQ3MWZlMTNkNjFkLzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk
LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3z+cEL6
9moWeXSG22huCxYemf4Y+uhu4eL7+nqL+e7QcK7Ro3rsO3JZChJAMFFSsfDSfkdk
9R5TBzwRmGT3/3lEtFMkTr4r9U0iMnElAzbYfCfYYTc0xjeXWpShVuxLV6JOltMb
I704tWc81Afkz0xEmcxpcFMJwgFjjY8ps2GTaiGvUCKzz2Hcg4/FBB2WgKxd2Dg0
1ZgAmzt9N8AP+Ppam8+MbcHKQ323SfzBKu3WPn/8jnOPIJOX0X2nkDfDij8ippJ9
5zRnOvm3uRaTAmcAiX7qE5qY3/WP8/xKnh8kjUMhdKac+XYYxe77poHddqLKqno7
2lfdhJFPpp4ULQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:23 2026 by rpki-client