Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json)
Hash identifier: IC7K7SlfFwnZIE79d26GO0naeOux929QqTW2RtV5lwc=
Subject key identifier: F9:2D:66:7E:16:AD:CD:A4:FF:97:2C:3B:E8:15:57:EF:9A:CD:64:54
Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Certificate serial: 019CAE35A50027EA780113C5DFD80CED332D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
Manifest number: 044C
Signing time: Mon 02 Mar 2026 11:01:17 +0000
Manifest this update: Mon 02 Mar 2026 11:01:17 +0000
Manifest next update: Tue 03 Mar 2026 11:01:17 +0000
Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: /FBttJrxYaEIPDvu6VtKks6C2Cc/J6f5r2bRslhMpaY=)
2: btKwMs2T5TC2QpwmVJMMxVyV0rg.roa (hash: Ghbd1qi+LJjN0PIuRpUBKfXBNN+SmFWgi5pRWldZxGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:a5:00:27:ea:78:01:13:c5:df:d8:0c:ed:33:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Validity
Not Before: Mar 2 11:01:17 2026 GMT
Not After : Mar 3 11:01:17 2026 GMT
Subject: CN=f92d667e16adcda4ff972c3be81557ef9acd6454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:e2:a3:bf:ce:62:b8:65:dd:63:79:c8:a1:
f6:bb:a9:66:92:ec:b6:ce:4c:24:27:68:28:2c:83:
d5:d1:82:07:e9:48:9f:2c:43:f4:02:2c:0f:21:50:
8b:7a:08:45:ba:17:4d:04:25:46:3a:43:1d:4d:1c:
0c:75:3b:76:3b:7f:95:bd:43:f0:02:15:c3:9a:30:
7d:e1:fc:37:75:b2:c4:68:44:21:9e:e5:c6:bc:22:
9e:27:7b:e4:bc:7f:0d:45:ed:c1:72:1a:49:87:a2:
c4:f0:e9:44:76:60:12:7d:44:5e:8d:a0:51:95:7a:
1b:ea:e6:d3:92:0a:e2:b4:17:08:57:44:5d:a4:3a:
3d:05:db:b9:45:fb:a6:ca:91:1b:60:96:fe:4a:7b:
44:2c:88:c4:03:17:53:1c:74:13:c7:75:b0:ff:24:
51:40:96:f1:66:1a:ef:d6:a0:dd:11:92:1a:3e:4d:
61:04:ed:c9:9f:4a:1a:17:4b:5a:8e:e0:9b:63:bb:
2d:52:50:0c:71:3e:5d:22:6c:0f:ef:79:87:9c:68:
d5:9d:0f:6c:90:5d:f7:17:c2:5a:ca:6b:b2:fb:79:
1b:18:41:68:69:9f:8f:38:94:d2:9d:8b:79:7f:53:
c6:78:36:1a:e1:0c:13:df:4b:cd:19:b9:5f:4e:49:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:66:7E:16:AD:CD:A4:FF:97:2C:3B:E8:15:57:EF:9A:CD:64:54
X509v3 Authority Key Identifier:
keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ba:26:0d:56:f2:d0:44:ad:27:a9:fb:ef:22:2d:82:b7:ec:
5c:af:88:f3:77:b4:66:4a:ae:af:e5:64:67:60:b5:98:e4:9f:
26:1d:58:70:9d:0c:ad:3f:27:2b:46:94:a1:66:54:e7:fa:da:
7a:bd:97:83:e1:52:b2:80:82:c0:e3:c3:74:85:75:ca:37:6e:
eb:4a:73:64:a5:c3:b4:aa:39:3b:95:52:01:63:d6:c0:2b:e9:
32:75:56:d5:ca:74:d5:67:e0:e8:d5:bd:77:ac:49:32:36:d3:
d3:35:b3:be:5f:1c:f9:aa:06:69:ac:3b:72:01:49:58:36:c7:
a8:16:5c:f7:d5:6c:de:4a:3e:18:04:91:44:0b:4f:8c:0b:64:
a7:b2:56:15:4d:cb:53:ff:9b:2a:e7:cc:b0:83:cf:bc:d6:f4:
ee:69:09:c1:a2:0a:cb:02:a1:ab:6a:36:6b:35:bc:05:a0:9b:
d9:15:f7:45:25:33:b4:a1:01:d6:90:3c:d0:17:84:ab:a1:db:
84:37:2a:7a:e1:dd:cd:47:96:54:e6:78:1f:57:21:9f:47:c4:
ed:67:33:23:5f:9b:59:aa:66:27:3f:95:95:f5:7c:a0:0d:dc:
b2:58:c3:3d:78:ba:7e:e1:d2:66:b6:a4:5f:38:d1:8a:15:6a:
a5:36:d4:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyuNaUAJ+p4ARPF39gM7TMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjQ2YTYzMjNiM2Q2ZmMzNGFlNDlkOGJlODg4NGY3Mjky
YmRiZjQwHhcNMjYwMzAyMTEwMTE3WhcNMjYwMzAzMTEwMTE3WjAzMTEwLwYDVQQD
EyhmOTJkNjY3ZTE2YWRjZGE0ZmY5NzJjM2JlODE1NTdlZjlhY2Q2NDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBnio7/OYrhl3WN5yKH2u6lmkuy2
zkwkJ2goLIPV0YIH6UifLEP0AiwPIVCLeghFuhdNBCVGOkMdTRwMdTt2O3+VvUPw
AhXDmjB94fw3dbLEaEQhnuXGvCKeJ3vkvH8NRe3BchpJh6LE8OlEdmASfURejaBR
lXob6ubTkgritBcIV0RdpDo9Bdu5RfumypEbYJb+SntELIjEAxdTHHQTx3Ww/yRR
QJbxZhrv1qDdEZIaPk1hBO3Jn0oaF0tajuCbY7stUlAMcT5dImwP73mHnGjVnQ9s
kF33F8Jaymuy+3kbGEFoaZ+POJTSnYt5f1PGeDYa4QwT30vNGblfTkmDUwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPktZn4Wrc2k/5csO+gVV++azWRUMB8GA1UdIwQY
MBaAFPpkamMjs9b8NK5J2L6IhPcpK9v0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tUnFZeU96MXZ3MHJrbll2b2lFOXlrcjJfUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmJmNTRjLWQ4MDYtNDYzYS1hZjM3
LTU5ZTE5MzI2MmNlNC8xLzEtbVJxWXlPejF2dzBya25Zdm9pRTl5a3IyX1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YyLzZiZjU0Yy1kODA2LTQ2M2EtYWYzNy01OWUxOTMyNjJj
ZTQvMS8xLW1ScVl5T3oxdncwcmtuWXZvaUU5eWtyMl9RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbom
DVby0EStJ6n77yItgrfsXK+I83e0Zkqur+VkZ2C1mOSfJh1YcJ0MrT8nK0aUoWZU
5/raer2Xg+FSsoCCwOPDdIV1yjdu60pzZKXDtKo5O5VSAWPWwCvpMnVW1cp01Wfg
6NW9d6xJMjbT0zWzvl8c+aoGaaw7cgFJWDbHqBZc99Vs3ko+GASRRAtPjAtkp7JW
FU3LU/+bKufMsIPPvNb07mkJwaIKywKhq2o2azW8BaCb2RX3RSUztKEB1pA80BeE
q6HbhDcqeuHdzUeWVOZ4H1chn0fE7WczI1+bWapmJz+VlfV8oA3csljDPXi6fuHS
ZrakXzjRihVqpTbUew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:04 2026 by rpki-client