Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: 64Wk0iINCMMeqVGnEkufKxnmZC5ZzQjmYGpI5N01U/0=
Subject key identifier: 6D:EA:83:97:BC:A4:65:2C:8B:E9:93:F7:C0:61:7A:AE:F2:67:C7:29
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019CAE35B714B97AD6344727FE2C88793FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:21 +0000
Manifest this update: Mon 02 Mar 2026 11:01:21 +0000
Manifest next update: Tue 03 Mar 2026 11:01:21 +0000
Files and hashes: 1: Q9bW7DT8b-bilbM4okf2-4RumJ8.roa (hash: VGpo3RNyhjlbXzLjR04xOlVdZxQhemrEMPSoF4PPXPI=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: 8tFAH/M5jGIkejYpgs1iry3gsutkOsrXrmoEvWkUFi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:b7:14:b9:7a:d6:34:47:27:fe:2c:88:79:3f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Mar 2 11:01:21 2026 GMT
Not After : Mar 3 11:01:21 2026 GMT
Subject: CN=6dea8397bca4652c8be993f7c0617aaef267c729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:37:fe:a4:2d:3b:f6:92:25:29:06:31:d4:
5c:02:78:ca:d6:2d:b7:9f:73:44:a4:f3:26:ac:99:
61:8c:81:d4:84:97:65:b0:cd:05:8d:f4:36:8f:b3:
8d:d2:df:4d:a0:2a:1d:0b:a5:44:79:3a:a6:cc:93:
b6:ad:ed:98:7c:f6:28:9e:84:e2:10:67:d2:af:41:
ad:37:f4:97:84:1b:e4:73:17:43:4e:74:d2:ec:b9:
16:0e:09:1c:3f:fe:e0:36:aa:d0:c5:4a:ca:db:70:
ab:72:20:71:87:b3:74:f9:86:62:f7:27:3a:3c:1a:
c9:f2:e7:7f:8f:b5:a5:14:16:b7:88:5a:dc:ae:56:
21:8d:0c:a1:ff:b8:06:d4:2b:26:80:3d:67:52:b0:
78:01:54:76:77:ac:0c:df:a9:a7:92:29:86:7f:a6:
44:01:f2:df:a3:54:5b:22:96:dd:b7:44:e9:7f:4c:
cf:48:d6:4f:30:20:53:ce:0f:10:cd:47:d9:56:4c:
3d:ef:d3:52:56:ed:ce:cb:1c:66:56:cf:29:0e:c7:
cf:73:70:fd:73:e2:94:40:85:19:e4:51:a2:10:52:
7a:e9:e1:33:eb:fe:d4:97:48:2b:b3:df:60:f4:ec:
cc:28:95:a5:e6:03:16:8e:7f:fc:a4:47:f8:55:11:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:83:97:BC:A4:65:2C:8B:E9:93:F7:C0:61:7A:AE:F2:67:C7:29
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e5:88:34:bb:ff:61:91:7b:4a:b0:a2:cc:1f:95:37:c1:e8:
21:92:54:fc:26:3f:a0:07:ff:9c:dd:5e:a1:ca:f8:0e:76:c4:
cd:f1:fc:e4:f2:da:16:8d:26:cd:c4:0b:5f:ae:ba:2d:b4:13:
e5:09:35:b8:99:37:9a:74:16:c5:df:97:75:29:b3:28:5f:11:
f6:0e:0e:19:84:f1:62:53:58:a5:ba:fe:a8:c3:44:66:e2:bc:
b9:ac:b3:f1:bb:5a:46:4e:1a:8f:64:26:df:21:54:2d:5b:7f:
c0:dc:97:59:07:38:e9:1e:dc:af:8a:e6:b3:33:e0:ce:db:f9:
67:85:07:fc:78:a0:13:8f:5b:48:3f:fd:80:1b:38:0e:4e:b0:
9b:d3:72:81:0f:1c:76:f7:b6:90:96:a9:dc:91:04:cd:78:2b:
94:0c:af:d1:b8:4e:ce:f6:7f:50:e4:4f:55:ec:c4:aa:a7:1d:
97:b5:36:ed:a7:38:c9:b4:65:cf:41:32:59:50:c9:2b:dc:9f:
44:c6:dd:a1:d0:49:3e:c8:8c:49:b8:3d:00:e5:da:4c:ed:29:
6b:6b:75:f7:d4:d7:ad:90:a1:9a:16:94:e0:48:2b:81:3e:ce:
cc:33:3b:a8:59:fb:83:6b:84:b7:a1:f4:a4:78:54:05:9c:10:
6a:7c:a2:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNbcUuXrWNEcn/iyIeT+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmE5MGU3MTY1MzBmMTVmNzM5OWI3YWMzZTBkMjkzOWEy
MWEyMTAwHhcNMjYwMzAyMTEwMTIxWhcNMjYwMzAzMTEwMTIxWjAzMTEwLwYDVQQD
Eyg2ZGVhODM5N2JjYTQ2NTJjOGJlOTkzZjdjMDYxN2FhZWYyNjdjNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aM3/qQtO/aSJSkGMdRcAnjK1i23
n3NEpPMmrJlhjIHUhJdlsM0FjfQ2j7ON0t9NoCodC6VEeTqmzJO2re2YfPYonoTi
EGfSr0GtN/SXhBvkcxdDTnTS7LkWDgkcP/7gNqrQxUrK23CrciBxh7N0+YZi9yc6
PBrJ8ud/j7WlFBa3iFrcrlYhjQyh/7gG1CsmgD1nUrB4AVR2d6wM36mnkimGf6ZE
AfLfo1RbIpbdt0Tpf0zPSNZPMCBTzg8QzUfZVkw979NSVu3OyxxmVs8pDsfPc3D9
c+KUQIUZ5FGiEFJ66eEz6/7Ul0grs99g9OzMKJWl5gMWjn/8pEf4VREjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3qg5e8pGUsi+mT98Bheq7yZ8cpMB8GA1UdIwQY
MBaAFKdqkOcWUw8V9zmbesPg0pOaIaIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEt
ODViNjViYWNkNGZiLzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEtODViNjViYWNkNGZi
LzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuWINLv/
YZF7SrCizB+VN8HoIZJU/CY/oAf/nN1eocr4DnbEzfH85PLaFo0mzcQLX666LbQT
5Qk1uJk3mnQWxd+XdSmzKF8R9g4OGYTxYlNYpbr+qMNEZuK8uayz8btaRk4aj2Qm
3yFULVt/wNyXWQc46R7cr4rmszPgztv5Z4UH/HigE49bSD/9gBs4Dk6wm9NygQ8c
dve2kJap3JEEzXgrlAyv0bhOzvZ/UORPVezEqqcdl7U27ac4ybRlz0EyWVDJK9yf
RMbdodBJPsiMSbg9AOXaTO0pa2t199TXrZChmhaU4EgrgT7OzDM7qFn7g2uEt6H0
pHhUBZwQanyi1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:26 2026 by rpki-client