Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: 6htFvJm4E5Pz28doCR98tmQybbiz37m35bC7ZQ2BP5g=
Subject key identifier: 01:69:71:43:DD:D8:72:CF:32:29:24:17:92:EB:01:0F:CF:F8:08:B6
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019CBF5FBC8B183DF2346DFF01A988CA57D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 02C9
Signing time: Thu 05 Mar 2026 19:00:48 +0000
Manifest this update: Thu 05 Mar 2026 19:00:48 +0000
Manifest next update: Fri 06 Mar 2026 19:00:48 +0000
Files and hashes: 1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: hLFin+jOTjkUH8d6dshglwCft4ypQxdtGrr+C+lmoKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:5f:bc:8b:18:3d:f2:34:6d:ff:01:a9:88:ca:57:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Mar 5 19:00:48 2026 GMT
Not After : Mar 6 19:00:48 2026 GMT
Subject: CN=01697143ddd872cf3229241792eb010fcff808b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:df:0d:76:72:6b:5c:0b:3e:21:e0:f6:ef:
58:2b:d5:04:8c:3c:83:4d:8a:87:c9:2c:42:3b:0f:
fd:62:cd:d1:35:bc:d4:2b:67:a6:cc:f2:84:7b:60:
10:8e:5a:76:33:33:11:fe:2e:46:a6:4a:75:6c:ee:
6f:4e:52:e4:27:65:94:4d:8d:41:a7:1b:da:c8:73:
e8:7d:c5:f4:39:38:79:5a:5a:b6:a3:cb:40:59:80:
00:85:1f:05:fd:44:90:2a:86:ac:b4:d7:77:36:09:
5c:5b:56:0e:71:bc:5d:ca:fb:ab:b0:28:5b:65:0b:
f9:3d:bd:c0:69:db:7c:5f:b5:f4:d5:67:59:7a:dc:
a3:b4:82:f6:a6:92:7a:b3:b4:13:22:42:0b:4d:ce:
97:6c:2b:82:f5:ee:b4:08:a8:4c:a5:1b:45:98:17:
e8:17:d5:b3:8f:d5:55:c9:c4:ca:3b:9f:b6:66:be:
3b:cf:3e:62:d3:04:d2:b6:b3:d7:6f:0b:db:95:3d:
6a:aa:39:21:c7:d4:87:78:d9:d1:4a:e6:f5:13:24:
fe:f6:21:8c:8d:47:b4:18:28:0f:ba:10:0e:5d:da:
df:0a:ed:f9:86:fa:80:18:20:f9:60:19:94:ff:96:
0b:b1:cd:2a:e8:f7:b7:be:7d:12:3e:db:26:3d:37:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:71:43:DD:D8:72:CF:32:29:24:17:92:EB:01:0F:CF:F8:08:B6
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bc:6e:19:ed:d0:0a:6e:78:c3:d0:73:e9:5f:bf:cb:0b:12:
f4:1c:cb:95:76:66:9e:ad:e5:a3:2c:c7:0d:8b:c8:12:19:9e:
03:9c:17:91:2c:e8:e6:39:22:94:9c:a6:2e:d8:8c:a1:01:7b:
51:97:3a:38:a2:b1:e5:17:4b:20:94:4f:db:96:cd:63:50:89:
68:63:30:6a:5b:bc:7c:14:4c:10:36:f5:c9:5f:0c:ec:c0:c2:
2e:42:13:6a:a5:b7:1a:59:f8:bc:15:8e:e6:0a:74:af:96:d9:
4f:87:4e:88:dd:0e:04:75:e5:9c:a5:84:1b:c1:5c:cc:fa:ff:
54:8c:be:a8:0e:77:77:98:8e:c4:25:6f:ab:07:37:01:36:e5:
bc:75:de:61:f3:5f:52:ad:ba:a6:80:b2:8f:b7:70:de:29:da:
54:e6:c8:ad:be:a0:87:f0:55:0a:13:36:60:95:15:93:40:0a:
4a:11:81:8e:1d:3b:4c:b0:34:69:67:4b:12:e7:3d:47:5f:33:
de:88:8e:00:1f:a5:56:fd:89:c9:c8:bd:58:e2:67:56:3b:d4:
70:11:22:db:95:7f:c3:df:82:25:92:ba:2d:c5:2a:ba:6c:a1:
c3:80:71:11:18:b7:32:9c:f7:ec:8a:da:dc:67:cc:50:a2:f7:
94:fd:ba:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/X7yLGD3yNG3/AamIylfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1
NWY2NGIwHhcNMjYwMzA1MTkwMDQ4WhcNMjYwMzA2MTkwMDQ4WjAzMTEwLwYDVQQD
EygwMTY5NzE0M2RkZDg3MmNmMzIyOTI0MTc5MmViMDEwZmNmZjgwOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniDfDXZya1wLPiHg9u9YK9UEjDyD
TYqHySxCOw/9Ys3RNbzUK2emzPKEe2AQjlp2MzMR/i5Gpkp1bO5vTlLkJ2WUTY1B
pxvayHPofcX0OTh5Wlq2o8tAWYAAhR8F/USQKoastNd3NglcW1YOcbxdyvursChb
ZQv5Pb3Aadt8X7X01WdZetyjtIL2ppJ6s7QTIkILTc6XbCuC9e60CKhMpRtFmBfo
F9Wzj9VVycTKO5+2Zr47zz5i0wTStrPXbwvblT1qqjkhx9SHeNnRSub1EyT+9iGM
jUe0GCgPuhAOXdrfCu35hvqAGCD5YBmU/5YLsc0q6Pe3vn0SPtsmPTcYiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFpcUPd2HLPMikkF5LrAQ/P+Ai2MB8GA1UdIwQY
MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt
M2E2YTA2ZTE4OGMzLzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz
LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7xuGe3Q
Cm54w9Bz6V+/ywsS9BzLlXZmnq3loyzHDYvIEhmeA5wXkSzo5jkilJymLtiMoQF7
UZc6OKKx5RdLIJRP25bNY1CJaGMwalu8fBRMEDb1yV8M7MDCLkITaqW3Gln4vBWO
5gp0r5bZT4dOiN0OBHXlnKWEG8FczPr/VIy+qA53d5iOxCVvqwc3ATblvHXeYfNf
Uq26poCyj7dw3inaVObIrb6gh/BVChM2YJUVk0AKShGBjh07TLA0aWdLEuc9R18z
3oiOAB+lVv2Jyci9WOJnVjvUcBEi25V/w9+CJZK6LcUqumyhw4BxERi3Mpz37Ira
3GfMUKL3lP26gw==
-----END CERTIFICATE-----
Generated at Fri Mar 6 04:22:47 2026 by rpki-client