Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: ghgRQp2AECj5kizVjYC6H84Cua1VlD/x/f2I5MBCCrI=
Subject key identifier: 8C:DD:3C:12:EC:C5:B7:8A:3C:76:7D:8A:6F:23:38:94:B8:50:C7:57
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019D29CE0839C5521FA29B51B63140F01898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0C97
Signing time: Thu 26 Mar 2026 11:01:01 +0000
Manifest this update: Thu 26 Mar 2026 11:01:01 +0000
Manifest next update: Fri 27 Mar 2026 11:01:01 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: 0SJ0oq/aM1ScSmaGhQywoUktSil+D1sR7uKYVvA4ZCo=)
2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:08:39:c5:52:1f:a2:9b:51:b6:31:40:f0:18:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Mar 26 11:01:01 2026 GMT
Not After : Mar 27 11:01:01 2026 GMT
Subject: CN=8cdd3c12ecc5b78a3c767d8a6f233894b850c757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:20:13:d8:d5:b1:dd:47:00:a4:0f:5b:a7:
e1:3c:21:2e:52:6c:f4:82:e8:2a:bd:17:65:58:c9:
b5:cd:ba:93:78:a6:10:20:16:ba:14:f3:0c:ff:d7:
ac:02:85:ae:a5:55:29:e8:07:a4:56:a8:d0:60:5f:
57:70:3c:81:07:de:0f:f2:c5:18:4e:75:62:69:a6:
00:9c:cf:2f:ab:e9:d5:2f:71:ec:b5:a3:7e:19:3a:
e2:ec:5e:16:ba:d4:dc:20:80:10:73:58:03:4c:c2:
f4:44:31:90:09:f2:7c:44:a3:63:c9:7a:2d:e8:fe:
b9:85:de:eb:46:2f:72:0a:09:03:68:70:2c:64:b0:
9a:15:b6:48:70:4a:2d:36:8c:dc:74:d6:74:4b:24:
51:65:bc:a2:30:09:c0:32:c2:6c:f8:c0:6a:e6:71:
35:85:01:0d:79:2f:2d:4a:13:2a:7a:96:a5:eb:e1:
af:a4:44:8e:36:a6:66:dd:67:94:b7:1d:59:ee:f4:
56:81:bf:18:9c:6a:0a:b7:61:f1:4e:a2:02:80:e9:
60:32:82:0d:ea:d3:3e:16:7f:0b:e5:ce:38:7f:c1:
3a:4a:98:9f:d9:f3:9d:6c:99:cd:f8:52:d9:39:72:
08:2e:f8:04:13:dc:15:c8:92:f7:b5:de:a9:bd:8a:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:3C:12:EC:C5:B7:8A:3C:76:7D:8A:6F:23:38:94:B8:50:C7:57
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a5:6e:b7:3a:c3:fd:fb:99:8e:74:53:07:95:a3:4d:99:ef:
28:ca:0c:4c:d8:15:f0:6c:9b:91:88:f0:97:36:bf:a4:e7:89:
0d:dd:67:c9:3b:93:69:99:f9:07:22:08:8e:e5:29:7c:63:c3:
9e:05:35:0f:6e:e2:47:a5:a1:68:71:e7:96:f2:78:37:59:09:
01:f5:3f:c8:56:5b:d1:88:10:ac:b1:35:c4:7d:c1:05:f9:d2:
d9:01:3f:32:57:d0:18:30:68:3b:fd:6c:be:a0:96:37:d8:1e:
02:a2:38:a0:61:7a:84:bc:a2:b6:fa:4e:7a:e4:45:ec:0f:7b:
7f:d1:7f:a9:d8:c0:16:4d:ec:e4:0d:8b:9c:40:ed:be:75:3f:
4b:e1:9e:dd:38:b1:2c:5b:68:12:37:e5:7b:a3:53:6a:01:f6:
0d:69:30:5f:09:ca:9e:4f:16:8b:ad:48:43:f7:37:3b:8f:8a:
fa:57:ee:40:48:1a:25:48:e6:03:04:3d:fb:17:7b:78:67:37:
6f:8c:bf:1a:fa:6e:0c:b9:bd:76:41:b1:fe:42:56:e6:01:b2:
80:80:81:43:30:57:17:ec:b4:e3:95:be:2f:14:36:b9:ff:ac:
6e:b9:3a:69:f1:c6:15:21:35:11:df:e2:d1:8f:91:a0:94:58:
76:c8:57:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0pzgg5xVIfoptRtjFA8BiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0
NWMxNDMwHhcNMjYwMzI2MTEwMTAxWhcNMjYwMzI3MTEwMTAxWjAzMTEwLwYDVQQD
Eyg4Y2RkM2MxMmVjYzViNzhhM2M3NjdkOGE2ZjIzMzg5NGI4NTBjNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVcgE9jVsd1HAKQPW6fhPCEuUmz0
gugqvRdlWMm1zbqTeKYQIBa6FPMM/9esAoWupVUp6AekVqjQYF9XcDyBB94P8sUY
TnViaaYAnM8vq+nVL3HstaN+GTri7F4WutTcIIAQc1gDTML0RDGQCfJ8RKNjyXot
6P65hd7rRi9yCgkDaHAsZLCaFbZIcEotNozcdNZ0SyRRZbyiMAnAMsJs+MBq5nE1
hQENeS8tShMqepal6+GvpESONqZm3WeUtx1Z7vRWgb8YnGoKt2HxTqICgOlgMoIN
6tM+Fn8L5c44f8E6Spif2fOdbJnN+FLZOXIILvgEE9wVyJL3td6pvYqTSQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIzdPBLsxbeKPHZ9im8jOJS4UMdXMB8GA1UdIwQY
MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy
LTk5MTFlNTEwYThhOS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhL2RlZTY4ZC1hYWNkLTQ2NzMtYmE0Mi05OTExZTUxMGE4
YTkvMS8xLTBxLUU1UXF2a0lQSU53VW45eFgzMEJGd1VNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3KVu
tzrD/fuZjnRTB5WjTZnvKMoMTNgV8GybkYjwlza/pOeJDd1nyTuTaZn5ByIIjuUp
fGPDngU1D27iR6WhaHHnlvJ4N1kJAfU/yFZb0YgQrLE1xH3BBfnS2QE/MlfQGDBo
O/1svqCWN9geAqI4oGF6hLyitvpOeuRF7A97f9F/qdjAFk3s5A2LnEDtvnU/S+Ge
3TixLFtoEjfle6NTagH2DWkwXwnKnk8Wi61IQ/c3O4+K+lfuQEgaJUjmAwQ9+xd7
eGc3b4y/GvpuDLm9dkGx/kJW5gGygICBQzBXF+y045W+LxQ2uf+sbrk6afHGFSE1
Ed/i0Y+RoJRYdshXqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:35 2026 by rpki-client