Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json)
Hash identifier: +zPjUR34VTZbRPT7IdXw4Jh0u8fZYPd8xmqERLAiAj8=
Subject key identifier: CC:B5:A7:FC:1B:C8:6C:C4:FD:52:13:6A:EA:AF:AF:69:5D:5B:E3:F4
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial: 019D2A04DEE0CA6BA6E83130721A0AFABE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
Manifest number: 0AEC
Signing time: Thu 26 Mar 2026 12:00:55 +0000
Manifest this update: Thu 26 Mar 2026 12:00:55 +0000
Manifest next update: Fri 27 Mar 2026 12:00:55 +0000
Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: 2HDF98RGTq1wiPH7tZ/tygOafe41csKDBa9wyGR1q0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:de:e0:ca:6b:a6:e8:31:30:72:1a:0a:fa:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Validity
Not Before: Mar 26 12:00:55 2026 GMT
Not After : Mar 27 12:00:55 2026 GMT
Subject: CN=ccb5a7fc1bc86cc4fd52136aeaafaf695d5be3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:ca:fe:82:ea:7e:16:0c:fb:e4:69:5d:ec:
9a:11:2f:7a:1e:2c:21:0f:c9:d0:6d:59:8c:5c:eb:
39:ca:88:ac:b7:45:5d:2d:0b:5c:d9:e5:46:69:30:
4c:05:fe:9a:6e:04:42:2c:23:bd:60:96:60:ce:2c:
95:d5:46:a7:8a:eb:ba:0f:6a:51:1d:7c:7c:d6:11:
17:e2:27:6e:45:d8:b5:1d:1e:33:ed:e7:05:1a:16:
9b:b4:75:12:09:a9:04:09:b2:76:92:7d:fd:5f:b2:
15:c3:47:bc:78:48:c1:7e:5b:6d:e2:c2:ec:29:45:
6b:a4:1c:72:2b:c9:22:72:97:fa:80:04:a3:19:4a:
1b:24:6d:fc:36:66:de:30:96:57:66:d5:be:80:aa:
72:2f:79:3f:51:f3:52:35:b6:bd:cd:49:2f:bb:01:
52:4e:52:7c:48:2a:e4:1f:3c:8a:0b:ec:8e:1c:5c:
4d:0a:38:13:5a:b4:50:e0:4d:94:23:69:d4:f5:ed:
df:8c:0b:1b:48:f3:c4:53:11:95:7c:bf:f4:e3:2c:
19:8b:c9:89:49:6e:00:e1:bb:6e:96:c8:af:7b:78:
0c:72:37:a8:3e:e0:e2:35:a1:5c:5b:c6:26:77:e0:
27:5e:c7:40:ec:8d:f8:8c:bb:0a:1a:38:7b:06:7e:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:A7:FC:1B:C8:6C:C4:FD:52:13:6A:EA:AF:AF:69:5D:5B:E3:F4
X509v3 Authority Key Identifier:
keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:de:93:d6:80:1e:6c:f6:94:16:ce:eb:f9:02:3d:78:4b:e1:
fd:04:0d:6b:f6:a2:68:cd:05:c1:b9:ba:96:85:c2:98:f2:13:
df:6a:da:17:ad:73:74:36:35:1f:a7:88:7c:ce:bb:43:20:f7:
68:9d:b0:72:cb:91:dd:06:cc:91:f8:fd:78:47:0f:7f:53:f9:
18:6a:a5:8d:2d:09:6b:26:e4:d8:53:d9:d1:91:5e:8b:ef:21:
d1:b4:c7:b7:73:7b:53:1c:8a:72:8d:bb:38:97:a3:41:55:99:
5c:40:47:3b:de:91:1b:f1:26:06:a4:c7:2b:eb:9f:fa:43:8e:
f5:c7:24:e7:cb:ff:7e:19:4c:2d:67:39:62:9f:12:df:91:e4:
7f:9e:8a:8d:58:f8:09:34:83:cc:b6:40:38:56:de:d4:72:3c:
5a:e2:1d:55:27:8b:72:3c:bb:53:1e:1b:94:9e:ae:7c:a7:f4:
29:9e:6c:b4:bb:2b:16:08:46:19:48:f0:56:c5:d7:49:aa:43:
69:27:29:6e:82:3a:07:21:5a:5e:e8:73:7b:51:60:43:21:eb:
3e:6c:33:71:94:80:79:36:13:63:7c:9a:25:f1:09:59:9b:a5:
eb:b4:58:f9:f3:87:dd:d1:b4:61:36:d3:e2:ab:20:42:44:0c:
57:8f:ab:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBN7gymum6DEwchoK+r5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmM4MDA4MDYzN2ZhY2IxNmY1MTljNWQ5N2VjMjdiM2Q4
NTA5N2QwHhcNMjYwMzI2MTIwMDU1WhcNMjYwMzI3MTIwMDU1WjAzMTEwLwYDVQQD
EyhjY2I1YTdmYzFiYzg2Y2M0ZmQ1MjEzNmFlYWFmYWY2OTVkNWJlM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSzK/oLqfhYM++RpXeyaES96Hiwh
D8nQbVmMXOs5yoist0VdLQtc2eVGaTBMBf6abgRCLCO9YJZgziyV1Uaniuu6D2pR
HXx81hEX4iduRdi1HR4z7ecFGhabtHUSCakECbJ2kn39X7IVw0e8eEjBfltt4sLs
KUVrpBxyK8kicpf6gASjGUobJG38NmbeMJZXZtW+gKpyL3k/UfNSNba9zUkvuwFS
TlJ8SCrkHzyKC+yOHFxNCjgTWrRQ4E2UI2nU9e3fjAsbSPPEUxGVfL/04ywZi8mJ
SW4A4btulsive3gMcjeoPuDiNaFcW8Ymd+AnXsdA7I34jLsKGjh7Bn4P7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy1p/wbyGzE/VITauqvr2ldW+P0MB8GA1UdIwQY
MBaAFKtsgAgGN/rLFvUZxdl+wns9hQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTkt
ZTllMWQ5MWE5ODE2LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTktZTllMWQ5MWE5ODE2
LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf96T1oAe
bPaUFs7r+QI9eEvh/QQNa/aiaM0Fwbm6loXCmPIT32raF61zdDY1H6eIfM67QyD3
aJ2wcsuR3QbMkfj9eEcPf1P5GGqljS0Jaybk2FPZ0ZFei+8h0bTHt3N7UxyKco27
OJejQVWZXEBHO96RG/EmBqTHK+uf+kOO9cck58v/fhlMLWc5Yp8S35Hkf56KjVj4
CTSDzLZAOFbe1HI8WuIdVSeLcjy7Ux4blJ6ufKf0KZ5stLsrFghGGUjwVsXXSapD
aScpboI6ByFaXuhze1FgQyHrPmwzcZSAeTYTY3yaJfEJWZul67RY+fOH3dG0YTbT
4qsgQkQMV4+r/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:53:20 2026 by rpki-client