Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: PKn20u38g2hgFyc4Bycu8VesUizATapnbtel308F1IE=
Subject key identifier: 2B:7B:48:BB:AF:D9:BA:E1:36:78:A8:22:83:9F:9A:14:17:E9:BC:B5
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019D2703BBFE533D7D056A591A8E9FC83EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1861
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: zXb7xRB+OOa8yWhmD7GeCV/7vWdnlLIY/lT5VVv5ENA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bb:fe:53:3d:7d:05:6a:59:1a:8e:9f:c8:3e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=2b7b48bbafd9bae13678a822839f9a1417e9bcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:e9:cd:5c:d3:c6:80:88:e0:ea:3a:68:ab:
42:75:54:bb:41:3e:98:f8:d6:b3:81:86:17:f8:ec:
5e:d4:1f:1c:f9:82:c0:b5:90:a5:7a:01:4e:1f:05:
d2:25:52:02:6a:f4:29:62:89:bf:f2:61:7b:6e:b4:
d6:ea:52:f1:cd:0f:f5:85:c5:08:b1:59:1f:e7:95:
62:e1:e2:29:9a:a3:b6:3f:6d:07:ba:50:ff:4b:00:
1d:a9:20:bf:8f:af:47:d4:56:aa:14:63:bb:b2:ac:
ce:ab:c9:e2:bb:64:2f:50:4e:95:d0:84:d4:e4:58:
56:3a:c5:b1:f3:d4:5e:d6:be:c5:e7:91:51:03:e9:
68:d0:99:cd:25:a9:41:a4:d4:16:99:c5:66:d8:37:
76:45:63:2e:59:34:07:f8:f6:24:c7:7b:95:de:a4:
bc:01:8a:e3:ea:6c:4a:eb:68:92:96:54:45:0f:4c:
fd:4e:9c:64:85:2c:b9:c1:e5:ee:fd:ad:0e:14:aa:
86:63:62:f4:2c:0e:3a:0e:19:60:a1:3c:bc:4e:b1:
e4:ed:b2:66:06:c7:71:0b:cd:99:68:da:51:6c:44:
04:96:02:2f:53:c9:25:f5:dd:77:d8:ab:a4:c1:2f:
b4:f2:01:c3:56:a3:93:fe:74:31:d3:60:69:7d:6b:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7B:48:BB:AF:D9:BA:E1:36:78:A8:22:83:9F:9A:14:17:E9:BC:B5
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:4c:6b:c0:e6:55:f5:61:3b:d5:56:f6:2b:5f:c8:0d:33:
d8:7a:3c:a8:d3:20:3e:3e:2e:32:89:ab:20:48:21:57:1f:a4:
c6:ce:ab:f8:bf:c4:5e:20:29:b9:70:7f:29:dd:ca:ab:91:ca:
f2:ef:47:f9:fe:f1:63:aa:08:62:a2:6d:26:06:62:96:6c:f7:
5a:39:5b:c6:67:77:20:7c:69:6b:ca:ca:fe:bf:f2:e7:1e:4a:
68:0e:7a:33:58:fc:ac:48:de:88:2e:88:64:7b:cd:6f:de:43:
b3:2b:9a:60:1a:0d:1e:b0:f8:e4:37:ea:8b:1e:5b:d1:77:38:
b2:d5:85:e6:18:3f:3b:44:f2:11:6e:ec:45:08:19:ce:63:da:
94:8a:9b:7d:29:a5:8f:90:3b:55:03:ed:48:7a:9d:56:82:18:
88:ac:0e:d6:45:88:ad:c0:d1:05:ac:f1:9d:f2:70:d9:ef:37:
cc:1a:e1:df:d5:c1:46:3f:41:4e:ab:70:7c:85:91:62:3d:3e:
8a:8a:50:3d:0b:86:8a:18:9c:04:1f:f7:8e:26:6b:fa:f5:23:
04:86:ea:61:aa:26:77:21:8e:00:f0:fb:06:67:f7:6d:0b:4c:
76:19:4e:07:76:22:5f:11:05:b7:89:41:40:cb:7b:c1:c6:04:
0c:fe:5b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7v+Uz19BWpZGo6fyD7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx
YWRmODgwHhcNMjYwMzI1MjIwMDQ5WhcNMjYwMzI2MjIwMDQ5WjAzMTEwLwYDVQQD
EygyYjdiNDhiYmFmZDliYWUxMzY3OGE4MjI4MzlmOWExNDE3ZTliY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqLpzVzTxoCI4Oo6aKtCdVS7QT6Y
+NazgYYX+Oxe1B8c+YLAtZClegFOHwXSJVICavQpYom/8mF7brTW6lLxzQ/1hcUI
sVkf55Vi4eIpmqO2P20HulD/SwAdqSC/j69H1FaqFGO7sqzOq8niu2QvUE6V0ITU
5FhWOsWx89Re1r7F55FRA+lo0JnNJalBpNQWmcVm2Dd2RWMuWTQH+PYkx3uV3qS8
AYrj6mxK62iSllRFD0z9TpxkhSy5weXu/a0OFKqGY2L0LA46DhlgoTy8TrHk7bJm
BsdxC82ZaNpRbEQElgIvU8kl9d132KukwS+08gHDVqOT/nQx02BpfWtUdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt7SLuv2brhNnioIoOfmhQX6by1MB8GA1UdIwQY
MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt
NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm
LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO9Ma8Dm
VfVhO9VW9itfyA0z2Ho8qNMgPj4uMomrIEghVx+kxs6r+L/EXiApuXB/Kd3Kq5HK
8u9H+f7xY6oIYqJtJgZilmz3Wjlbxmd3IHxpa8rK/r/y5x5KaA56M1j8rEjeiC6I
ZHvNb95DsyuaYBoNHrD45Dfqix5b0Xc4stWF5hg/O0TyEW7sRQgZzmPalIqbfSml
j5A7VQPtSHqdVoIYiKwO1kWIrcDRBazxnfJw2e83zBrh39XBRj9BTqtwfIWRYj0+
iopQPQuGihicBB/3jiZr+vUjBIbqYaomdyGOAPD7Bmf3bQtMdhlOB3YiXxEFt4lB
QMt7wcYEDP5bVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:10 2026 by rpki-client