Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: Hwe144piGYxDDgV48w5yvynl571NptDODD2G/zzuWmU=
Subject key identifier: DC:3F:9A:69:AB:0B:24:03:B7:1D:B2:F5:18:DB:C7:C4:CB:C1:C6:A0
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 019D27724EF5BBE46B05FE36F957EDAAC130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: _BnlDW0yMenZgGVAmuqxZ3GnNuo.roa (hash: 7rAqk38Xj2YUz4ZyKSekZT3B86MBmL3C6PiQyPZP8+g=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: GoIc5oOdl095S0T/6X2y/vse0kqkNLthz5SSm4U0VQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4e:f5:bb:e4:6b:05:fe:36:f9:57:ed:aa:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=dc3f9a69ab0b2403b71db2f518dbc7c4cbc1c6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:7c:0c:e8:ba:5d:2a:48:b7:8e:ec:4b:70:
e7:0a:53:13:34:d3:dd:fb:d2:cf:ae:07:91:b1:a1:
ff:d3:5d:c8:70:b3:c4:93:67:d0:59:69:15:87:68:
cb:69:bb:8c:a0:74:08:66:c4:c2:67:75:68:3f:1f:
66:62:d5:b2:ba:46:77:6a:53:91:8f:3a:d0:ac:c5:
7e:96:ce:e5:e1:ae:96:56:e9:2a:65:7e:9b:34:a9:
50:81:99:f4:4a:0f:44:64:1b:17:4a:43:38:b5:dc:
18:58:8f:8a:b1:17:28:18:3e:90:94:ba:15:c8:ef:
d5:c6:5f:66:83:ff:e6:fa:1c:5c:b4:c5:3e:c9:de:
3a:66:57:f6:69:06:83:d3:7d:e3:16:fa:e3:73:e7:
19:be:97:bd:00:9d:99:60:55:7f:4f:fa:37:50:88:
14:42:e3:99:26:57:78:85:7c:63:19:10:5e:ed:b7:
d9:3b:cd:b4:d8:4a:fc:a5:84:db:cc:21:62:0e:ff:
2d:41:4e:b2:23:ee:66:83:44:f4:51:c1:6c:67:bc:
1a:a9:98:ac:e0:3e:29:c4:9c:b1:a8:50:a2:96:b9:
c4:aa:5c:66:d8:68:95:ae:cb:f0:b1:eb:09:7b:ff:
8d:c9:d1:01:25:66:14:41:e6:8c:1f:41:f0:33:e2:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3F:9A:69:AB:0B:24:03:B7:1D:B2:F5:18:DB:C7:C4:CB:C1:C6:A0
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:77:2d:84:cc:d5:1d:2c:e3:d8:22:ce:c3:52:3b:22:a1:7a:
e6:a2:df:62:36:54:66:00:11:59:79:da:17:78:d5:5a:cc:8b:
eb:d8:08:e8:5f:2d:e7:ca:9a:da:d6:bb:90:51:ae:dc:40:e5:
8c:fe:47:2b:e6:5a:76:9c:ae:78:b0:9d:43:4f:c8:b8:80:fc:
f9:8c:32:00:ac:3c:67:d5:04:fc:06:12:05:80:1b:bc:f2:1a:
50:fe:8d:e2:fb:e3:a0:04:90:53:57:af:0f:f6:66:98:86:78:
e5:d1:4f:14:9c:47:65:66:8b:29:50:60:36:88:4c:01:78:3e:
ed:29:b8:d2:a9:f2:af:c0:89:d8:b8:25:fb:7e:fd:10:3b:7b:
38:3c:6c:d9:3b:a0:cb:1c:08:9c:c6:78:ed:05:2e:92:85:c0:
f0:2b:21:1c:a7:a7:5e:19:d7:99:9c:85:6c:f9:68:a4:8a:60:
16:ee:02:1f:97:e9:ac:b2:e5:16:48:1b:35:55:32:99:a9:0d:
4f:74:11:22:42:c8:01:b7:c9:d1:ca:ef:73:6f:9e:e5:41:b7:
16:4b:15:69:dd:c6:ad:07:94:2f:bd:5b:ef:0d:2d:ce:31:20:
c4:dc:24:29:8f:9e:af:a1:89:47:75:52:6a:ca:c2:30:62:96:
a0:f2:04:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nck71u+RrBf42+VftqsEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzJkZTgyMGUwMmYzYzNmODZlNWI4YzljNDlkZGM0OTMy
NTEyM2YwHhcNMjYwMzI2MDAwMTM1WhcNMjYwMzI3MDAwMTM1WjAzMTEwLwYDVQQD
EyhkYzNmOWE2OWFiMGIyNDAzYjcxZGIyZjUxOGRiYzdjNGNiYzFjNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4J8DOi6XSpIt47sS3DnClMTNNPd
+9LPrgeRsaH/013IcLPEk2fQWWkVh2jLabuMoHQIZsTCZ3VoPx9mYtWyukZ3alOR
jzrQrMV+ls7l4a6WVukqZX6bNKlQgZn0Sg9EZBsXSkM4tdwYWI+KsRcoGD6QlLoV
yO/Vxl9mg//m+hxctMU+yd46Zlf2aQaD033jFvrjc+cZvpe9AJ2ZYFV/T/o3UIgU
QuOZJld4hXxjGRBe7bfZO8202Er8pYTbzCFiDv8tQU6yI+5mg0T0UcFsZ7waqZis
4D4pxJyxqFCilrnEqlxm2GiVrsvwsesJe/+NydEBJWYUQeaMH0HwM+KcowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw/mmmrCyQDtx2y9Rjbx8TLwcagMB8GA1UdIwQY
MBaAFKvC3oIOAvPD+G5bjJxJ3cSTJRI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYt
ODk3ODMzMTdlYTI5LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYtODk3ODMzMTdlYTI5
LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZncthMzV
HSzj2CLOw1I7IqF65qLfYjZUZgARWXnaF3jVWsyL69gI6F8t58qa2ta7kFGu3EDl
jP5HK+ZadpyueLCdQ0/IuID8+YwyAKw8Z9UE/AYSBYAbvPIaUP6N4vvjoASQU1ev
D/ZmmIZ45dFPFJxHZWaLKVBgNohMAXg+7Sm40qnyr8CJ2Lgl+379EDt7ODxs2Tug
yxwInMZ47QUukoXA8CshHKenXhnXmZyFbPlopIpgFu4CH5fprLLlFkgbNVUymakN
T3QRIkLIAbfJ0crvc2+e5UG3FksVad3GrQeUL71b7w0tzjEgxNwkKY+er6GJR3VS
asrCMGKWoPIEbQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:07 2026 by rpki-client