Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier: kxSU1AObaxytmrVRrMOP9a+LodPhjtR0oWcrlQ0SAsw=
Subject key identifier: 02:92:45:39:6B:74:6E:4E:A4:C6:A0:A9:96:7D:71:31:13:D9:A4:B6
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 019CADC85FBC8C539FA482F473D4205C6C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number: 1809
Signing time: Mon 02 Mar 2026 09:01:55 +0000
Manifest this update: Mon 02 Mar 2026 09:01:55 +0000
Manifest next update: Tue 03 Mar 2026 09:01:55 +0000
Files and hashes: 1: IkjRDZvjoet-DMCFuA1SVxVn9z0.roa (hash: KDG2SPZXlzy1qLYoQcv1WkPT39XYjh45It7qEUlD6Rw=)
2: Zw6KU8Yaubyr6fTeBrasGVyasWI.roa (hash: YUUSHoIMxT31bL5DTGnNTWMiRlkifirHreIPqG9BiZo=)
3: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: BQzcDouKslMnC5Sp56MaUtBS1hitWMadVNVO8RiS9ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:5f:bc:8c:53:9f:a4:82:f4:73:d4:20:5c:6c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Mar 2 09:01:55 2026 GMT
Not After : Mar 3 09:01:55 2026 GMT
Subject: CN=029245396b746e4ea4c6a0a9967d713113d9a4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:97:9f:ce:11:0d:4e:70:5c:41:0d:10:d2:
82:e3:87:fc:19:a3:75:64:bd:50:a8:e0:53:78:ae:
1a:d0:40:be:9f:03:ea:4b:e5:7b:08:c2:2f:2f:34:
a3:5e:1c:fe:81:49:4d:3f:16:7d:df:3c:50:2c:c6:
f9:a3:52:06:0b:dc:1b:3d:62:20:01:c5:11:1f:3f:
24:90:d4:bf:70:68:d2:49:b7:89:60:e6:25:d5:a8:
f2:57:d4:c7:f0:d3:9e:8e:03:97:76:ce:5f:3d:38:
68:4f:4f:bd:09:21:98:1d:ff:50:9a:dc:dc:8d:ec:
25:64:b0:09:11:1a:31:01:b5:2a:80:03:e2:e4:ea:
cb:ae:b0:22:3c:c0:8a:ec:e5:8f:ec:a9:33:5f:7b:
e4:3c:4d:ff:07:c3:8f:06:03:52:cc:c3:6f:3c:df:
af:24:9a:11:3b:a7:cb:78:d2:62:f7:b3:41:6d:bf:
ea:c7:89:c8:53:3a:f7:5d:74:48:ca:98:5f:92:2a:
fb:84:df:fa:b6:7c:ca:3c:2a:04:c8:b2:8e:16:ed:
a5:ce:aa:38:99:c0:5a:8d:5a:54:a6:ea:cd:5b:f0:
ce:74:e1:5b:ca:91:e8:ae:65:0e:27:48:ac:70:61:
1a:21:8a:35:be:09:1d:8e:c8:c9:0e:f1:42:4e:1b:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:45:39:6B:74:6E:4E:A4:C6:A0:A9:96:7D:71:31:13:D9:A4:B6
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b8:10:8a:e4:fa:e9:8c:2a:91:e2:29:e8:51:81:08:3f:f3:
20:88:e8:22:db:0a:ab:3b:1f:28:64:05:0e:3e:66:28:51:34:
ac:61:a0:94:af:fe:43:38:47:82:7a:94:a3:20:70:0e:47:ee:
7d:88:c0:e3:d4:bf:13:f2:9a:01:3b:24:7c:49:5f:1c:c8:ec:
b9:9e:75:9d:ef:11:fd:88:8b:40:f0:95:71:87:eb:d7:4c:38:
c1:7a:36:a6:f6:d1:f4:96:ff:72:21:69:46:5d:66:29:56:ca:
e5:5e:78:51:b5:4e:b6:0e:c3:f6:69:7d:6f:38:fe:37:56:12:
8f:a0:7a:fd:23:98:a6:3f:06:83:07:35:f0:96:1e:ab:38:62:
f6:56:fe:d4:58:2f:72:ae:f1:0c:4c:05:b8:79:45:ba:06:f8:
9c:07:71:9a:41:c6:e4:da:5e:dc:b2:3f:be:14:1f:ef:52:96:
ec:a5:04:e2:e2:0d:a5:d6:bd:2e:5a:37:77:f6:85:30:21:7e:
94:5f:6c:e6:0e:40:55:55:a7:13:fe:a7:25:6c:0d:0a:f5:d9:
ed:45:b9:6d:97:3e:4f:e5:0c:b3:2f:e3:ae:08:3f:ae:64:98:
16:82:f1:ce:74:1e:56:ec:12:e0:65:d2:e4:14:31:e0:c3:a3:
32:ca:49:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyF+8jFOfpIL0c9QgXGw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm
Zjg4ZDQwHhcNMjYwMzAyMDkwMTU1WhcNMjYwMzAzMDkwMTU1WjAzMTEwLwYDVQQD
EygwMjkyNDUzOTZiNzQ2ZTRlYTRjNmEwYTk5NjdkNzEzMTEzZDlhNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHmXn84RDU5wXEENENKC44f8GaN1
ZL1QqOBTeK4a0EC+nwPqS+V7CMIvLzSjXhz+gUlNPxZ93zxQLMb5o1IGC9wbPWIg
AcURHz8kkNS/cGjSSbeJYOYl1ajyV9TH8NOejgOXds5fPThoT0+9CSGYHf9Qmtzc
jewlZLAJERoxAbUqgAPi5OrLrrAiPMCK7OWP7KkzX3vkPE3/B8OPBgNSzMNvPN+v
JJoRO6fLeNJi97NBbb/qx4nIUzr3XXRIyphfkir7hN/6tnzKPCoEyLKOFu2lzqo4
mcBajVpUpurNW/DOdOFbypHormUOJ0iscGEaIYo1vgkdjsjJDvFCThulowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKSRTlrdG5OpMagqZZ9cTET2aS2MB8GA1UdIwQY
MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt
OGRiMGVmYjU2MjBhLzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh
LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrgQiuT6
6YwqkeIp6FGBCD/zIIjoItsKqzsfKGQFDj5mKFE0rGGglK/+QzhHgnqUoyBwDkfu
fYjA49S/E/KaATskfElfHMjsuZ51ne8R/YiLQPCVcYfr10w4wXo2pvbR9Jb/ciFp
Rl1mKVbK5V54UbVOtg7D9ml9bzj+N1YSj6B6/SOYpj8Ggwc18JYeqzhi9lb+1Fgv
cq7xDEwFuHlFugb4nAdxmkHG5Npe3LI/vhQf71KW7KUE4uINpda9Llo3d/aFMCF+
lF9s5g5AVVWnE/6nJWwNCvXZ7UW5bZc+T+UMsy/jrgg/rmSYFoLxznQeVuwS4GXS
5BQx4MOjMspJzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:44 2026 by rpki-client