Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: XgqyGlVxGcquQh/BOvcgDMyr39ak/bYmsgnRlar5fZA=
Subject key identifier: 4C:A3:E9:C8:01:CC:1B:DA:E4:B2:E1:92:3E:1B:5A:99:40:FC:AE:2B
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019D2928F600F601F2894097073E796B0365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 08:00:43 +0000
Manifest this update: Thu 26 Mar 2026 08:00:43 +0000
Manifest next update: Fri 27 Mar 2026 08:00:43 +0000
Files and hashes: 1: 1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (hash: JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=)
2: BaNWyPJkYMdl4AcgG8334MdnOcE.roa (hash: T74jpYeo37fOzj45FGRDC/CZ0GAhyN9geA/QxTHQiHk=)
3: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: H6bABCuIZ4JUJ7E0S8vfR0Uu1G3XTTlPkbFuK+3jgxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f6:00:f6:01:f2:89:40:97:07:3e:79:6b:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Mar 26 08:00:43 2026 GMT
Not After : Mar 27 08:00:43 2026 GMT
Subject: CN=4ca3e9c801cc1bdae4b2e1923e1b5a9940fcae2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:03:74:d5:3a:32:88:98:df:1d:ca:c6:cc:
3e:8c:a5:d6:d1:3c:81:74:6f:db:e6:73:dc:c5:cf:
3c:b9:60:d1:85:4f:8b:59:d7:cd:00:8f:56:8b:7e:
9c:02:68:e4:7e:a3:09:21:32:64:ab:95:da:9b:6a:
b8:6b:3e:4c:ce:fb:f0:91:f3:91:e2:5a:2e:0e:6f:
0f:09:97:ed:1d:8a:72:17:d6:2e:91:1b:ba:25:9f:
3c:0f:00:ec:0e:b5:0e:52:6e:ae:c3:d4:cc:39:df:
3f:f8:96:a4:a3:2b:bb:bc:90:e9:08:30:b3:6f:45:
bd:17:cd:6c:d5:cc:1b:d2:c8:f1:c6:8a:de:06:30:
8e:61:fe:0c:91:ce:47:67:a8:d7:5d:20:20:79:01:
12:61:1e:c9:82:ba:56:59:92:62:9b:a8:f6:6a:c3:
3d:6f:8c:f3:c1:ce:f8:81:40:38:82:d9:33:c3:65:
45:88:b9:38:96:a4:bb:9a:d6:f7:e9:ab:6b:4f:3d:
e9:01:42:ce:0e:95:5d:12:52:e7:dd:fa:eb:89:47:
0f:1f:50:93:c3:66:78:fc:88:35:47:ca:75:42:69:
8a:33:5b:f7:30:a1:3a:35:84:d7:30:bd:31:d4:2e:
92:8a:7b:7b:4f:8a:2f:65:2b:25:42:66:8f:32:b9:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:E9:C8:01:CC:1B:DA:E4:B2:E1:92:3E:1B:5A:99:40:FC:AE:2B
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4d:af:f4:8b:40:9a:5e:57:94:8d:96:f6:cd:6b:f7:03:d9:
05:be:a2:1b:03:80:ab:85:50:3e:a7:5c:e8:4b:78:3f:e1:94:
63:34:03:cf:e9:64:ef:67:bd:99:c5:bc:47:c4:03:ea:bd:c0:
7f:39:f0:50:96:21:de:f0:2c:16:8b:62:e8:df:5a:40:10:04:
c1:2c:c8:f2:35:1c:3b:d3:c6:94:60:ae:3d:34:0e:96:02:d6:
88:4c:c4:9e:d6:1f:aa:b0:1e:67:79:f9:c2:5a:d0:aa:60:de:
8a:f2:46:8a:9d:a7:33:0c:ca:7c:23:53:bb:f8:e4:b8:a6:8d:
9d:93:c3:5d:e0:ca:25:a9:8d:ae:16:5a:f1:1d:a9:71:1b:33:
e1:54:1e:b9:36:81:fd:ee:8c:8c:58:90:43:57:a6:fb:a9:c5:
33:ca:90:59:30:cf:c1:6f:5f:ae:bb:44:8b:cb:0d:37:34:04:
44:f0:a6:c5:dd:5d:c5:bb:f1:08:60:7e:d6:a0:1d:57:2c:b2:
e5:bd:af:84:3c:cb:d6:98:41:ae:d3:e0:17:af:5a:59:72:4f:
d4:12:97:01:9b:83:3b:73:13:1b:fe:2a:76:ab:b8:10:d0:8d:
81:48:0d:65:af:9e:48:7f:3a:db:c9:2b:8d:a8:e1:15:7c:bf:
6f:71:f3:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKPYA9gHyiUCXBz55awNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy
ZmUzYTYwHhcNMjYwMzI2MDgwMDQzWhcNMjYwMzI3MDgwMDQzWjAzMTEwLwYDVQQD
Eyg0Y2EzZTljODAxY2MxYmRhZTRiMmUxOTIzZTFiNWE5OTQwZmNhZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ugDdNU6MoiY3x3Kxsw+jKXW0TyB
dG/b5nPcxc88uWDRhU+LWdfNAI9Wi36cAmjkfqMJITJkq5Xam2q4az5MzvvwkfOR
4louDm8PCZftHYpyF9YukRu6JZ88DwDsDrUOUm6uw9TMOd8/+Jakoyu7vJDpCDCz
b0W9F81s1cwb0sjxxoreBjCOYf4Mkc5HZ6jXXSAgeQESYR7JgrpWWZJim6j2asM9
b4zzwc74gUA4gtkzw2VFiLk4lqS7mtb36atrTz3pAULODpVdElLn3frriUcPH1CT
w2Z4/Ig1R8p1QmmKM1v3MKE6NYTXML0x1C6Sint7T4ovZSslQmaPMrkAywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyj6cgBzBva5LLhkj4bWplA/K4rMB8GA1UdIwQY
MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt
M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy
LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHE2v9ItA
ml5XlI2W9s1r9wPZBb6iGwOAq4VQPqdc6Et4P+GUYzQDz+lk72e9mcW8R8QD6r3A
fznwUJYh3vAsFoti6N9aQBAEwSzI8jUcO9PGlGCuPTQOlgLWiEzEntYfqrAeZ3n5
wlrQqmDeivJGip2nMwzKfCNTu/jkuKaNnZPDXeDKJamNrhZa8R2pcRsz4VQeuTaB
/e6MjFiQQ1em+6nFM8qQWTDPwW9frrtEi8sNNzQERPCmxd1dxbvxCGB+1qAdVyyy
5b2vhDzL1phBrtPgF69aWXJP1BKXAZuDO3MTG/4qdqu4ENCNgUgNZa+eSH8628kr
jajhFXy/b3HzMg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:40 2026 by rpki-client