Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: KmQ2mYZ7Oy7s2KSA2iG646yVRgLSl2n5sME3BucdYU8=
Subject key identifier: A3:53:2A:93:76:54:F2:96:8C:3F:4A:80:3D:15:6F:19:92:D0:1E:89
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 019D27E05BB5921691CAC5DFB0FC0C2D1881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0F69
Signing time: Thu 26 Mar 2026 02:01:48 +0000
Manifest this update: Thu 26 Mar 2026 02:01:48 +0000
Manifest next update: Fri 27 Mar 2026 02:01:48 +0000
Files and hashes: 1: iikBT2QAMhI0pO1fQIqlbLTfu0Q.roa (hash: +EmJ11d4GwDSAWX/0XCakljAxmrpGGVNg4y/8FSEGCU=)
2: lnQ2qM12OcTN3Tl66lkxIuHBUCI.roa (hash: +iEMNwBTYNtnrtcaCkTfTG4LTW15CLlDWqlFL/QxTSM=)
3: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: O4DtoNP0tqU4Db7h+JJVM9vRAloxEyZEP3gCvc0QH9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5b:b5:92:16:91:ca:c5:df:b0:fc:0c:2d:18:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Mar 26 02:01:48 2026 GMT
Not After : Mar 27 02:01:48 2026 GMT
Subject: CN=a3532a937654f2968c3f4a803d156f1992d01e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:e5:8c:a1:87:0c:34:40:9a:73:bc:0d:67:
d0:53:90:5a:2f:be:04:28:a9:60:39:78:d0:ff:f3:
83:94:94:6d:23:0e:12:ff:7a:d3:61:5b:8a:f1:6c:
93:b8:13:ef:87:28:8e:78:cb:9d:e6:c6:cf:f3:8e:
0d:cb:fa:54:da:14:1d:f3:2b:77:8d:58:02:cd:f6:
ba:13:89:20:74:cc:49:a0:78:5a:bf:2c:01:b1:a2:
92:47:1a:27:19:75:eb:8c:4b:cc:f5:0c:fd:08:81:
fd:42:27:5d:e9:3d:de:fc:31:d7:54:cc:94:14:a2:
fe:79:75:87:af:c6:8c:ed:9d:40:46:b9:7f:1a:e0:
4a:05:63:33:0b:c2:3a:6b:2c:3b:e2:cb:0d:37:12:
e1:ab:9c:20:7f:4c:69:92:2c:fc:28:88:70:27:cf:
cf:68:91:dc:64:66:67:0d:44:8a:91:02:3f:32:a2:
87:2d:d0:d1:37:99:a5:f5:dd:49:1f:86:62:4c:af:
82:43:c4:b2:2e:19:0c:0f:50:8f:d3:06:5a:d4:97:
50:c5:7d:11:51:d9:be:61:50:ba:88:57:ca:fa:5c:
e2:47:e4:05:b0:1e:5b:fd:a7:ca:3b:4c:ae:09:a0:
42:97:f5:28:43:0c:d5:13:58:f5:d6:42:8d:d9:f4:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:2A:93:76:54:F2:96:8C:3F:4A:80:3D:15:6F:19:92:D0:1E:89
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:95:50:c4:12:6c:dd:a6:d5:03:bc:d4:5b:e4:3f:e6:06:
0c:12:71:db:ce:e8:13:92:b6:0b:4e:a9:84:06:9d:59:96:29:
5e:4b:47:8c:be:16:30:1f:85:71:83:d1:bb:57:16:e9:22:f4:
8f:c2:c4:7a:0d:82:29:82:f0:1f:36:79:4e:5f:8c:69:d4:b3:
ae:4d:66:ae:b0:7e:8d:96:33:f1:4a:72:b0:45:ef:32:c7:da:
1b:61:b8:7a:46:1b:09:c7:4e:4e:01:0a:0c:34:f4:55:76:c5:
70:fc:38:3a:e1:c4:39:8f:13:8c:3f:5f:a4:63:c6:0f:72:2f:
59:1d:a1:a9:37:4c:08:47:22:37:98:84:61:ca:b1:f0:89:6a:
8b:14:3c:a8:f1:2d:ca:19:55:46:81:79:e9:d1:23:b5:50:a4:
e9:3f:c6:d2:74:55:f1:dc:24:8c:b4:24:76:3f:8a:c2:e4:a1:
81:e4:49:66:4a:13:c6:fb:90:55:5d:de:18:98:f8:80:d8:36:
30:ea:95:d9:5c:08:97:b9:8e:ad:7d:4c:82:0c:a0:81:70:cb:
b9:ab:0a:3c:4f:fb:2f:94:2f:54:2c:6d:67:4f:c3:19:59:8d:
40:cd:03:9e:65:18:ca:46:b4:97:5e:62:f4:72:2f:b2:6d:53:
1e:16:36:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Fu1khaRysXfsPwMLRiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmFiZGE5MDM0NmQwY2FkMjVkY2E2Zjc0NTBiY2NmOGQw
OGU3NzEwHhcNMjYwMzI2MDIwMTQ4WhcNMjYwMzI3MDIwMTQ4WjAzMTEwLwYDVQQD
EyhhMzUzMmE5Mzc2NTRmMjk2OGMzZjRhODAzZDE1NmYxOTkyZDAxZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwvljKGHDDRAmnO8DWfQU5BaL74E
KKlgOXjQ//ODlJRtIw4S/3rTYVuK8WyTuBPvhyiOeMud5sbP844Ny/pU2hQd8yt3
jVgCzfa6E4kgdMxJoHhavywBsaKSRxonGXXrjEvM9Qz9CIH9Qidd6T3e/DHXVMyU
FKL+eXWHr8aM7Z1ARrl/GuBKBWMzC8I6ayw74ssNNxLhq5wgf0xpkiz8KIhwJ8/P
aJHcZGZnDUSKkQI/MqKHLdDRN5ml9d1JH4ZiTK+CQ8SyLhkMD1CP0wZa1JdQxX0R
Udm+YVC6iFfK+lziR+QFsB5b/afKO0yuCaBCl/UoQwzVE1j11kKN2fQp6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNTKpN2VPKWjD9KgD0VbxmS0B6JMB8GA1UdIwQY
MBaAFKdqvakDRtDK0l3Kb3RQvM+NCOdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAt
NGQzMDE2ODRjM2JjLzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAtNGQzMDE2ODRjM2Jj
LzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5aVUMQS
bN2m1QO81FvkP+YGDBJx287oE5K2C06phAadWZYpXktHjL4WMB+FcYPRu1cW6SL0
j8LEeg2CKYLwHzZ5Tl+MadSzrk1mrrB+jZYz8UpysEXvMsfaG2G4ekYbCcdOTgEK
DDT0VXbFcPw4OuHEOY8TjD9fpGPGD3IvWR2hqTdMCEciN5iEYcqx8IlqixQ8qPEt
yhlVRoF56dEjtVCk6T/G0nRV8dwkjLQkdj+KwuShgeRJZkoTxvuQVV3eGJj4gNg2
MOqV2VwIl7mOrX1MggyggXDLuasKPE/7L5QvVCxtZ0/DGVmNQM0DnmUYyka0l15i
9HIvsm1THhY2CA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:38 2026 by rpki-client