Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: XGDYRywklV4qc9Hr3KYrTjiUzEsl4Y4hBGudE0M+JSU=
Subject key identifier: 3F:B5:2E:5B:BB:D2:08:9A:74:FC:75:73:B5:AC:94:ED:1A:B0:0F:F3
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 019CAA8FA6BF6FAE42786DE7FD8297E43523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:06 +0000
Manifest this update: Sun 01 Mar 2026 18:01:06 +0000
Manifest next update: Mon 02 Mar 2026 18:01:06 +0000
Files and hashes: 1: 8bGDeqOLEpqluLGnhA5OPPZlF4U.roa (hash: nyQFlbismgT+/vk7cKh4RxgsOCP+jQOON5dqP3fMM7g=)
2: E7RKatZ2-c0USqUVA50ejfPO_LA.roa (hash: Kbpm5sWk9Jg4XBpXaBujpM1V2VgMgPUNQUsGM4QI/6E=)
3: MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa (hash: UqToIY/uIMk+vJNVcNlL0gMCWXoA/1adspZCvbwaa/A=)
4: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: YbdOjUrZLFsVJZdGNvepMuAXTzfOwN24P4c6VtYAL+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a6:bf:6f:ae:42:78:6d:e7:fd:82:97:e4:35:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Mar 1 18:01:06 2026 GMT
Not After : Mar 2 18:01:06 2026 GMT
Subject: CN=3fb52e5bbbd2089a74fc7573b5ac94ed1ab00ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:8f:49:90:1f:42:5a:e1:6e:6d:79:a8:19:
1c:9f:06:f2:9f:6c:a4:5f:53:35:3c:d2:f9:a0:bf:
2c:73:09:d5:f7:fa:a8:8e:37:0d:d4:84:91:31:39:
d8:36:ae:5a:47:d3:eb:b9:ff:78:80:6c:3e:77:5c:
9f:e6:dc:14:a3:5a:28:40:47:38:22:bf:0c:d6:d2:
c1:4e:a0:58:1f:63:aa:cb:dc:32:8d:3d:04:e3:ac:
82:88:5e:6c:7b:c8:54:24:02:09:a0:63:1c:7b:55:
92:3f:7e:8b:7f:41:67:00:45:33:9a:5e:8d:7b:26:
8a:3c:44:cb:47:56:99:4d:e0:65:69:70:db:a2:ad:
35:d3:04:30:3a:cf:4b:5c:60:be:44:93:0b:10:14:
f9:76:0f:d7:71:e9:22:52:b3:5e:22:c9:ad:7b:b2:
8c:e4:d8:bf:21:12:60:23:66:f6:97:aa:8c:0a:f1:
19:c9:84:f8:f0:52:82:04:cb:73:e1:da:bb:fa:57:
39:75:52:e6:70:65:da:39:80:c2:1d:68:9c:0f:68:
16:e0:6b:9d:3f:25:f8:94:35:e7:92:a1:88:79:e8:
2b:09:88:9b:be:de:ba:18:4b:b9:9d:fd:79:5b:a6:
5c:68:2e:19:d8:15:a6:b1:9a:7b:31:e6:75:a3:cb:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:2E:5B:BB:D2:08:9A:74:FC:75:73:B5:AC:94:ED:1A:B0:0F:F3
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1d:ae:19:83:ef:06:91:4a:a5:75:ea:ab:b1:b4:92:63:e3:
2e:1c:18:e1:68:f9:e6:51:e0:f7:ae:36:cf:95:77:34:9c:22:
c7:93:bc:e9:bd:f7:db:3c:93:24:cb:b7:4c:b4:27:39:1e:40:
22:0d:f0:c4:b4:d3:1b:c4:85:f4:82:22:0e:9d:0c:a4:3b:b5:
cf:34:03:99:a7:ea:48:86:c8:9c:8b:c0:20:72:e4:db:24:01:
23:e6:70:c6:77:c7:9f:2c:74:f8:fd:69:43:6d:da:5e:84:89:
d4:8f:14:d5:51:84:47:cc:9a:10:21:87:52:fd:20:9f:51:6e:
d1:5c:f8:82:7a:be:2d:19:02:bb:41:32:52:41:41:d8:18:d5:
9d:8a:5d:31:68:68:00:73:00:ad:72:7e:b1:f2:0b:07:da:13:
f0:bd:60:3e:35:91:a1:e9:db:a7:45:56:28:c2:51:a5:b1:9e:
73:79:ec:23:9d:3c:d2:da:94:09:85:df:03:b1:b2:1f:41:88:
77:07:30:3a:9c:62:d0:01:ae:50:90:5b:6c:a9:ae:7c:57:13:
9a:43:ad:2b:88:79:2a:c2:be:8b:eb:da:54:a0:32:f2:74:38:
71:2d:61:72:7d:6a:fa:9c:eb:22:fe:ff:25:19:ce:2f:43:a0:
7f:e3:42:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj6a/b65CeG3n/YKX5DUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDZjOGYyMjQ3ZDIyMDQxYzgyZTU1NTY2Nzg4MWU1MGY5
MTU0YWIwHhcNMjYwMzAxMTgwMTA2WhcNMjYwMzAyMTgwMTA2WjAzMTEwLwYDVQQD
EygzZmI1MmU1YmJiZDIwODlhNzRmYzc1NzNiNWFjOTRlZDFhYjAwZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunaPSZAfQlrhbm15qBkcnwbyn2yk
X1M1PNL5oL8scwnV9/qojjcN1ISRMTnYNq5aR9Pruf94gGw+d1yf5twUo1ooQEc4
Ir8M1tLBTqBYH2Oqy9wyjT0E46yCiF5se8hUJAIJoGMce1WSP36Lf0FnAEUzml6N
eyaKPETLR1aZTeBlaXDboq010wQwOs9LXGC+RJMLEBT5dg/XcekiUrNeIsmte7KM
5Ni/IRJgI2b2l6qMCvEZyYT48FKCBMtz4dq7+lc5dVLmcGXaOYDCHWicD2gW4Gud
PyX4lDXnkqGIeegrCYibvt66GEu5nf15W6ZcaC4Z2BWmsZp7MeZ1o8safQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+1Llu70giadPx1c7WslO0asA/zMB8GA1UdIwQY
MBaAFKsGyPIkfSIEHILlVWZ4geUPkVSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdiSThpUjlJZ1FjZ3VWVlpuaUI1US1SVktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hOTRkZWEtMmZmYy00MDhkLWFhOWQt
MWFlMzZhNDQ2OWZkLzEvcXdiSThpUjlJZ1FjZ3VWVlpuaUI1US1SVktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hOTRkZWEtMmZmYy00MDhkLWFhOWQtMWFlMzZhNDQ2OWZk
LzEvcXdiSThpUjlJZ1FjZ3VWVlpuaUI1US1SVktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR2uGYPv
BpFKpXXqq7G0kmPjLhwY4Wj55lHg9642z5V3NJwix5O86b332zyTJMu3TLQnOR5A
Ig3wxLTTG8SF9IIiDp0MpDu1zzQDmafqSIbInIvAIHLk2yQBI+ZwxnfHnyx0+P1p
Q23aXoSJ1I8U1VGER8yaECGHUv0gn1Fu0Vz4gnq+LRkCu0EyUkFB2BjVnYpdMWho
AHMArXJ+sfILB9oT8L1gPjWRoenbp0VWKMJRpbGec3nsI5080tqUCYXfA7GyH0GI
dwcwOpxi0AGuUJBbbKmufFcTmkOtK4h5KsK+i+vaVKAy8nQ4cS1hcn1q+pzrIv7/
JRnOL0Ogf+NCHw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:23:15 2026 by rpki-client