Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: JsRVle1YcbcEV9jyJOm5hqAXW9AXeTf5Z4X7RZNJ3YE=
Subject key identifier: 2C:07:18:10:17:DA:A4:DB:08:F8:CE:AC:6B:8E:83:41:14:03:88:CF
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 019D389C56556165DE4BE3FB0A71957FA555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: LYw_86zqqUU-5ZAgDmKGuBI8moU.roa (hash: yws9eccxGXYISJMC2IFo/HR97Yy0+NyB/dp085XRJR8=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: czhfj91QsdTZ68zu424qDNhmj+IIRM4vKu8QR7euBwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:56:55:61:65:de:4b:e3:fb:0a:71:95:7f:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=2c07181017daa4db08f8ceac6b8e8341140388cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c3:ab:e5:a6:d1:4d:f3:c3:42:eb:17:a8:30:
4c:7a:03:be:8c:99:15:b6:48:12:32:6b:b4:dc:e4:
e0:d7:53:40:dc:f6:b3:03:89:5b:09:2e:22:66:d8:
da:4d:e9:92:0d:49:e7:e2:20:91:f8:98:ca:3b:d6:
6e:d4:62:92:d1:87:fc:ec:26:cc:f1:06:8c:8b:39:
51:7f:e3:4e:9d:13:e0:8e:7f:18:d4:68:cb:36:0e:
62:66:e2:96:27:8b:30:64:7e:40:05:e1:fa:1f:b0:
f8:f7:c1:ed:65:08:c8:28:25:c3:7b:8a:a1:0f:d3:
ba:98:f8:97:bb:55:14:bc:a0:08:5f:21:2f:78:9e:
14:9d:1b:05:64:2f:eb:19:0b:45:2e:a1:60:cb:5c:
e5:c0:5a:2a:68:ef:f3:92:60:05:48:66:3b:d3:02:
7e:4f:8a:c4:f2:5e:57:97:13:68:fe:b1:3f:53:32:
87:04:8d:a4:db:44:04:04:06:dc:01:4b:d5:d8:3a:
25:fa:42:1d:33:89:84:51:18:56:6c:21:81:91:67:
4f:90:31:a3:40:71:a8:9d:f5:56:37:52:6e:2d:fe:
0d:eb:be:da:f3:f3:5f:9f:cb:e8:c9:7d:8c:6e:62:
5a:ac:86:ed:4a:a6:b6:10:74:94:06:22:ed:36:65:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:07:18:10:17:DA:A4:DB:08:F8:CE:AC:6B:8E:83:41:14:03:88:CF
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:e4:a7:32:0c:37:57:2b:15:ca:d5:8f:85:af:72:a6:45:
3b:b1:52:dd:1b:1e:06:0e:4d:32:5d:32:4f:54:9c:4a:74:38:
d6:4e:b4:52:f6:25:ef:e4:47:2e:9f:94:8b:35:aa:b5:c7:8a:
58:46:4a:42:f0:16:a9:04:1a:e5:3c:30:3e:94:7b:fd:ac:f8:
68:1d:bb:40:83:09:ab:b4:b4:f7:b0:d5:60:1a:81:34:ec:0f:
8c:ac:d2:2a:bb:3a:e4:49:5a:24:df:9d:8a:08:83:1e:7d:47:
0c:d1:92:3b:66:4d:54:2d:0c:8a:ef:fd:49:d5:0d:a4:77:4f:
de:dd:f8:b5:58:da:a4:f7:97:7c:77:eb:58:b0:63:48:d2:9d:
aa:e9:5f:a0:1b:51:09:bd:70:27:dd:81:42:79:13:8d:7d:3b:
d4:1e:16:ce:7d:d0:af:44:9c:4a:3f:66:ec:1d:a2:ae:5d:7f:
e4:be:8b:1d:ed:85:99:2c:78:06:cf:5c:06:69:19:2c:dc:0c:
63:14:33:7a:dc:11:35:eb:e0:06:74:0d:bf:41:fb:60:e5:17:
c4:db:e3:94:0b:48:37:d1:8a:97:30:cd:57:66:8c:06:a0:3f:
05:f5:da:e7:84:c5:9d:ca:ad:92:65:66:cb:c6:2d:87:7d:7b:
12:4b:b5:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFZVYWXeS+P7CnGVf6VVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYjA2MDE2NmQ2NGNlYWQwZTI5NTc5N2U4ZDI3YzU1ZDg4
OThiYzIwHhcNMjYwMzI5MDgwMTAyWhcNMjYwMzMwMDgwMTAyWjAzMTEwLwYDVQQD
EygyYzA3MTgxMDE3ZGFhNGRiMDhmOGNlYWM2YjhlODM0MTE0MDM4OGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+cOr5abRTfPDQusXqDBMegO+jJkV
tkgSMmu03OTg11NA3PazA4lbCS4iZtjaTemSDUnn4iCR+JjKO9Zu1GKS0Yf87CbM
8QaMizlRf+NOnRPgjn8Y1GjLNg5iZuKWJ4swZH5ABeH6H7D498HtZQjIKCXDe4qh
D9O6mPiXu1UUvKAIXyEveJ4UnRsFZC/rGQtFLqFgy1zlwFoqaO/zkmAFSGY70wJ+
T4rE8l5XlxNo/rE/UzKHBI2k20QEBAbcAUvV2Dol+kIdM4mEURhWbCGBkWdPkDGj
QHGonfVWN1JuLf4N677a8/Nfn8voyX2MbmJarIbtSqa2EHSUBiLtNmUbYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwHGBAX2qTbCPjOrGuOg0EUA4jPMB8GA1UdIwQY
MBaAFKuwYBZtZM6tDilXl+jSfFXYiYvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQt
NmIxMzY0OTRlM2RjLzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQtNmIxMzY0OTRlM2Rj
LzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8HkpzIM
N1crFcrVj4WvcqZFO7FS3RseBg5NMl0yT1ScSnQ41k60UvYl7+RHLp+UizWqtceK
WEZKQvAWqQQa5TwwPpR7/az4aB27QIMJq7S097DVYBqBNOwPjKzSKrs65ElaJN+d
igiDHn1HDNGSO2ZNVC0Miu/9SdUNpHdP3t34tVjapPeXfHfrWLBjSNKdqulfoBtR
Cb1wJ92BQnkTjX071B4Wzn3Qr0ScSj9m7B2irl1/5L6LHe2FmSx4Bs9cBmkZLNwM
YxQzetwRNevgBnQNv0H7YOUXxNvjlAtIN9GKlzDNV2aMBqA/BfXa54TFncqtkmVm
y8Yth317Eku1EA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:43 2026 by rpki-client