Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: c+fgHh1nI9YQmTm05UZXycyWdSauE1QXiDm1UOJ6B+Y=
Subject key identifier: D3:47:7B:3C:37:CE:6D:68:E8:04:28:4E:36:CF:E2:69:89:07:58:6C
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 019D265FA9CDA582E670080C61B7455AE16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 0701
Signing time: Wed 25 Mar 2026 19:01:36 +0000
Manifest this update: Wed 25 Mar 2026 19:01:36 +0000
Manifest next update: Thu 26 Mar 2026 19:01:36 +0000
Files and hashes: 1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=)
2: UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa (hash: gXIOBSbjWI6IVjh8IXmjFidTPNW2xP/m42MptHiY2Wk=)
3: ZLPqhzCBZnWKf6Ejj9mHPZInK0A.roa (hash: fDVxJt+eTWzb1YGH406MqF2UxgyF9iK3BrieNaTLjIM=)
4: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=)
5: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: Vk7Qqq1eQIqtMdftTVxrZBSpxfYkGvk+/Z8Zw5MKeFU=)
6: sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa (hash: Wu+8arEyxXYyHRsQgH9EF3izIIcpQmHoeba8OxIgES4=)
7: yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa (hash: V6bi9bW+gyxZUdO/fUkn/b7FLfhAgD7Kio8Z4leJS74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a9:cd:a5:82:e6:70:08:0c:61:b7:45:5a:e1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Mar 25 19:01:36 2026 GMT
Not After : Mar 26 19:01:36 2026 GMT
Subject: CN=d3477b3c37ce6d68e804284e36cfe2698907586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:d3:6a:48:8b:8c:3a:6a:64:e1:91:f0:36:
cb:1a:f5:f7:88:2b:ec:2e:bd:b0:10:8e:a0:23:8f:
d4:6d:f7:c4:bb:47:2a:f3:86:bb:3f:e2:42:01:ea:
e8:79:06:80:7f:f4:3b:07:2c:e3:1b:9f:76:56:5e:
14:2b:9e:c2:08:84:ba:c4:4d:f0:63:a0:35:39:ff:
82:12:db:99:6a:b8:0f:ca:19:41:65:60:29:53:db:
38:07:c5:ca:50:72:ac:07:2f:80:ad:e8:74:20:47:
3d:09:39:23:69:b3:22:ed:69:ea:6d:c5:d2:ae:41:
35:f8:eb:3e:38:bd:19:40:37:c5:79:80:da:3a:7f:
8d:f9:b8:c4:fc:83:02:49:6d:d9:cc:c4:2f:97:a8:
f3:30:65:0f:a5:e0:9e:b0:19:8d:f0:cc:df:00:71:
86:d0:63:83:b4:5e:9b:d3:90:d0:5d:c4:e3:d6:9b:
1b:2b:2e:ef:05:c1:03:01:18:2f:60:06:0e:04:30:
1f:af:ed:6e:4e:39:2a:4a:f1:9a:5e:18:96:b9:a7:
0b:42:c1:c1:5d:b7:24:e7:25:f1:de:e8:aa:c5:a5:
af:2b:75:43:92:59:12:4e:eb:8d:44:62:df:0b:4c:
79:6c:94:8b:09:ea:34:de:9c:7e:41:4a:69:45:5c:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:47:7B:3C:37:CE:6D:68:E8:04:28:4E:36:CF:E2:69:89:07:58:6C
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:31:c6:94:ee:86:93:ee:fb:4d:a0:f9:01:7c:a7:ee:3b:
27:d6:31:90:46:95:0f:f4:0e:2d:e7:dc:10:67:68:8e:5d:db:
7f:5b:15:a2:9c:3c:e4:be:82:87:a9:1f:29:2a:e8:d5:2a:da:
e6:17:19:21:5b:18:fd:4d:75:96:0d:81:a8:97:e3:b0:77:1b:
a5:d9:86:d5:1a:60:3a:9f:ac:2f:86:fa:aa:09:d7:95:2b:25:
91:d3:1e:5c:16:d9:c6:99:4e:d6:2d:d5:da:5e:b7:fc:35:fb:
53:9f:1c:60:19:53:1f:0e:53:c5:24:f9:4b:8c:47:3b:86:25:
f9:17:a1:81:d6:b1:11:a0:75:54:07:7a:68:70:28:5e:e1:f4:
c1:22:b7:1f:93:48:df:6b:e2:6a:0f:80:cc:d9:7a:cc:f3:22:
bd:f4:de:df:73:8a:b5:f8:ca:83:9f:e6:42:91:a5:68:ed:82:
4f:bc:c0:47:e7:88:d3:12:70:3d:2c:03:0f:f0:99:34:46:1f:
33:ca:d2:22:55:1a:ce:d4:43:9c:be:88:da:48:e8:99:fc:02:
ca:7f:76:14:3d:fe:5f:9a:91:24:2e:0b:13:66:37:14:31:82:
83:32:91:39:7b:e4:b6:a2:e0:90:ea:1c:56:7e:2b:56:59:51:
f2:9b:fc:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX6nNpYLmcAgMYbdFWuFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw
NGI3YjIwHhcNMjYwMzI1MTkwMTM2WhcNMjYwMzI2MTkwMTM2WjAzMTEwLwYDVQQD
EyhkMzQ3N2IzYzM3Y2U2ZDY4ZTgwNDI4NGUzNmNmZTI2OTg5MDc1ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/TakiLjDpqZOGR8DbLGvX3iCvs
Lr2wEI6gI4/UbffEu0cq84a7P+JCAeroeQaAf/Q7ByzjG592Vl4UK57CCIS6xE3w
Y6A1Of+CEtuZargPyhlBZWApU9s4B8XKUHKsBy+Areh0IEc9CTkjabMi7WnqbcXS
rkE1+Os+OL0ZQDfFeYDaOn+N+bjE/IMCSW3ZzMQvl6jzMGUPpeCesBmN8MzfAHGG
0GODtF6b05DQXcTj1psbKy7vBcEDARgvYAYOBDAfr+1uTjkqSvGaXhiWuacLQsHB
Xbck5yXx3uiqxaWvK3VDklkSTuuNRGLfC0x5bJSLCeo03px+QUppRVwFiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNHezw3zm1o6AQoTjbP4mmJB1hsMB8GA1UdIwQY
MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt
NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw
LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAi4xxpTu
hpPu+02g+QF8p+47J9YxkEaVD/QOLefcEGdojl3bf1sVopw85L6Ch6kfKSro1Sra
5hcZIVsY/U11lg2BqJfjsHcbpdmG1RpgOp+sL4b6qgnXlSslkdMeXBbZxplO1i3V
2l63/DX7U58cYBlTHw5TxST5S4xHO4Yl+RehgdaxEaB1VAd6aHAoXuH0wSK3H5NI
32viag+AzNl6zPMivfTe33OKtfjKg5/mQpGlaO2CT7zAR+eI0xJwPSwDD/CZNEYf
M8rSIlUaztRDnL6I2kjomfwCyn92FD3+X5qRJC4LE2Y3FDGCgzKROXvktqLgkOoc
Vn4rVllR8pv8bw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:55 2026 by rpki-client