Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: 2YlSfM4Y/bVVGG9f3LYyX4uIiVBqUcIxYPmwW3jrg54=
Subject key identifier: 7D:F7:31:4B:D2:6B:F7:86:71:65:1C:6A:AC:1E:BD:75:7F:73:22:DB
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019D2B4EF1D22E5C154D3BF0407E5EF71F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 18:01:27 +0000
Manifest this update: Thu 26 Mar 2026 18:01:27 +0000
Manifest next update: Fri 27 Mar 2026 18:01:27 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: wRgJnQQjyNCQ1+iCUPK9KHGZWH+HPAR4ON9+1AdEZc8=)
2: DeMSqglNgnRimF4pLlzh1FBEhnA.roa (hash: 4oE04OONKgwG5O+fZ1H47RApbnAL6oA0WTInP838z0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:f1:d2:2e:5c:15:4d:3b:f0:40:7e:5e:f7:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Mar 26 18:01:27 2026 GMT
Not After : Mar 27 18:01:27 2026 GMT
Subject: CN=7df7314bd26bf78671651c6aac1ebd757f7322db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:8d:64:ca:95:17:a5:10:c6:b4:89:cd:a1:
5a:e7:8d:d5:c1:4d:9a:ad:72:0e:ae:1c:e6:53:4f:
47:5b:16:55:da:f4:65:de:07:37:3a:4a:b8:c7:78:
7c:c9:a3:60:2d:b5:a9:9e:f6:f9:36:d4:34:1b:b3:
50:92:a9:35:f3:36:a6:68:a3:0a:59:e1:81:ec:49:
c7:3a:94:4c:f1:ca:de:6f:77:09:3b:c8:9f:f0:47:
a1:a3:d3:36:0c:bf:e4:81:47:91:5f:ec:90:38:f9:
e6:9c:6f:a2:c5:bb:30:38:a2:aa:2a:f0:63:44:1a:
dc:8a:e8:bb:3e:d3:9e:12:58:02:51:09:b5:ec:c1:
c4:53:89:53:61:15:23:8a:c3:32:71:a1:d4:5f:1f:
77:93:af:dc:73:90:bd:51:c9:2a:d0:43:29:f5:c0:
4b:bf:8e:c8:7c:58:ec:41:8f:eb:75:eb:fd:39:c9:
cb:00:b5:b8:77:32:bc:8c:9a:23:3e:7c:06:c5:a4:
f6:ab:b1:37:fd:05:b9:ad:90:db:ed:a7:eb:b9:a2:
23:ce:8c:f6:c4:b2:e6:d5:2f:ad:cd:fd:a5:07:e2:
b8:66:af:7a:4a:f6:17:d2:a9:25:85:74:84:65:a4:
43:bb:77:ab:64:f5:87:6d:09:f3:23:3d:24:5f:c0:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F7:31:4B:D2:6B:F7:86:71:65:1C:6A:AC:1E:BD:75:7F:73:22:DB
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:69:05:a2:99:0c:75:3d:cd:3a:14:7a:bc:f0:fd:31:3c:c0:
e8:e9:f4:2c:17:70:77:d1:2a:96:a3:e7:a5:7a:55:62:a6:4c:
d7:07:64:83:cf:65:eb:93:84:8f:cf:9b:61:c2:4c:63:a1:0e:
4c:55:cb:cd:3b:43:14:9c:de:ef:aa:e7:db:d8:22:22:9d:4a:
2e:07:15:ee:87:f1:a5:34:0c:9f:c6:60:85:6a:c6:19:50:7c:
02:01:17:b6:0a:0b:d6:cc:68:5b:e2:df:ae:a8:3f:d1:90:f0:
82:78:ee:9f:af:4d:44:10:7a:93:fb:92:ac:9a:e4:cb:cd:18:
f0:2e:99:76:d0:c9:b8:c3:57:29:60:f0:58:e5:9a:1c:c2:7f:
06:b3:3c:99:3b:46:44:b3:d6:c9:7b:30:f1:2f:67:cf:b0:25:
ba:81:f5:fd:65:a0:fa:25:3c:82:7c:bd:0b:32:b5:0f:de:7a:
64:08:c0:42:94:1c:1b:a2:9c:d9:0e:67:7e:3f:21:e4:fa:e0:
e3:19:aa:a8:de:c7:ce:59:8c:a0:d4:a8:c4:8a:dd:b7:06:1a:
0c:03:ee:f4:ff:e0:e6:a6:de:4b:d2:19:6b:00:3d:c0:91:21:
51:8f:61:c5:5c:bc:84:50:ac:fb:ad:7c:1a:7c:6d:bd:c3:84:
36:49:b5:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0rTvHSLlwVTTvwQH5e9x9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1
ZTg3MTAwHhcNMjYwMzI2MTgwMTI3WhcNMjYwMzI3MTgwMTI3WjAzMTEwLwYDVQQD
Eyg3ZGY3MzE0YmQyNmJmNzg2NzE2NTFjNmFhYzFlYmQ3NTdmNzMyMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJmNZMqVF6UQxrSJzaFa543VwU2a
rXIOrhzmU09HWxZV2vRl3gc3Okq4x3h8yaNgLbWpnvb5NtQ0G7NQkqk18zamaKMK
WeGB7EnHOpRM8creb3cJO8if8Eeho9M2DL/kgUeRX+yQOPnmnG+ixbswOKKqKvBj
RBrciui7PtOeElgCUQm17MHEU4lTYRUjisMycaHUXx93k6/cc5C9Uckq0EMp9cBL
v47IfFjsQY/rdev9OcnLALW4dzK8jJojPnwGxaT2q7E3/QW5rZDb7afruaIjzoz2
xLLm1S+tzf2lB+K4Zq96SvYX0qklhXSEZaRDu3erZPWHbQnzIz0kX8DtnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH33MUvSa/eGcWUcaqwevXV/cyLbMB8GA1UdIwQY
MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1
LTk2ZTk5Zjc5NDI3OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2MyYzI4OC02ZjU2LTRjNGQtOWRiNS05NmU5OWY3OTQy
NzgvMS8xLXFUdXFHLWZQbTU0Z2JTNDJobWgwbkplaHhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2kF
opkMdT3NOhR6vPD9MTzA6On0LBdwd9EqlqPnpXpVYqZM1wdkg89l65OEj8+bYcJM
Y6EOTFXLzTtDFJze76rn29giIp1KLgcV7ofxpTQMn8ZghWrGGVB8AgEXtgoL1sxo
W+Lfrqg/0ZDwgnjun69NRBB6k/uSrJrky80Y8C6ZdtDJuMNXKWDwWOWaHMJ/BrM8
mTtGRLPWyXsw8S9nz7AluoH1/WWg+iU8gny9CzK1D956ZAjAQpQcG6Kc2Q5nfj8h
5Prg4xmqqN7HzlmMoNSoxIrdtwYaDAPu9P/g5qbeS9IZawA9wJEhUY9hxVy8hFCs
+618GnxtvcOENkm1ew==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:13 2026 by rpki-client