Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: xflMhUNrEqhUMsUoFOxGXz2ZobmKhliqXOjbnVS+8Ps=
Subject key identifier: 32:F7:C2:A2:F0:63:A5:C0:C6:26:C7:19:33:8E:55:A7:11:2D:16:59
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 019D37C0DB3EC030B4266CDF3AC993305F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 088A
Signing time: Sun 29 Mar 2026 04:01:18 +0000
Manifest this update: Sun 29 Mar 2026 04:01:18 +0000
Manifest next update: Mon 30 Mar 2026 04:01:18 +0000
Files and hashes: 1: EWYJbFjQX31oYWlD58OJv_l9B30.roa (hash: 2Mav6QQLVSCd9edMOwHxUMX2MqYRij3v85DASHfIvYU=)
2: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=)
3: ow6igTPRlqbGU9GWr5GsAICpDvc.roa (hash: M2OOGjwOx0AiSEzEWO1U/xWbG8Khv5JvliFIW9WxDrw=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: /WE1CReubsnEU9bAlSae8k+hPo0TL78rZSIkZRLw12s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:db:3e:c0:30:b4:26:6c:df:3a:c9:93:30:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Mar 29 04:01:18 2026 GMT
Not After : Mar 30 04:01:18 2026 GMT
Subject: CN=32f7c2a2f063a5c0c626c719338e55a7112d1659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:e2:64:6b:44:a4:cc:6a:67:ac:10:00:63:
67:49:46:ec:1e:a3:d8:b3:cd:dd:2d:c2:87:2d:a5:
b9:cc:27:71:4e:30:b5:c0:ae:33:47:30:58:a6:06:
8f:11:da:99:68:58:13:3c:e9:bd:34:a4:a0:48:70:
53:df:a7:c7:ba:24:7b:57:90:3d:f6:59:13:f2:27:
dc:22:7a:30:c4:11:9b:57:a0:5f:de:ac:e3:f3:63:
81:15:c2:01:35:3d:09:c7:f9:18:33:c7:f8:3f:8c:
64:ee:ea:55:1a:6e:fd:cf:96:50:1e:c4:6b:97:13:
d2:e5:6d:26:30:97:9f:6c:45:ce:4a:7e:60:44:2e:
03:fc:cd:29:44:7f:0f:db:9a:31:ba:8b:15:d8:8f:
43:1b:00:67:2a:ec:7c:a8:f6:53:c8:25:c5:bb:84:
14:90:e0:ce:0e:2c:28:9f:3c:b7:f0:6f:51:03:63:
70:70:f2:0d:8a:04:ef:33:4c:2c:79:e5:5e:57:3c:
88:73:d4:9e:fa:9f:af:90:6e:5d:22:81:27:4e:8f:
ae:25:a4:11:27:19:b2:78:43:1e:b3:63:59:5b:7a:
97:42:5e:dc:e2:18:a4:b7:2b:98:11:3a:9c:7d:d9:
a5:00:cc:17:8d:f4:8a:d7:2b:dc:2d:2e:91:e5:d1:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:C2:A2:F0:63:A5:C0:C6:26:C7:19:33:8E:55:A7:11:2D:16:59
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3e:7d:5b:25:c0:c8:3d:be:81:5c:de:4e:c2:79:27:79:51:
c7:f6:77:cc:9c:ff:38:bc:a6:e9:51:9a:3b:58:a7:5c:c4:d5:
3f:b8:2c:22:43:89:ed:6f:12:10:86:18:bf:63:b1:2e:f6:0c:
4f:53:98:1a:f2:f4:4e:63:60:7f:5a:df:ee:5b:a8:74:4f:60:
42:99:76:b0:69:97:41:24:ec:c0:d3:5a:0e:63:28:b1:e4:56:
5c:f7:5f:1d:14:2b:57:52:fa:2d:29:99:6b:9d:71:96:a8:59:
d2:b7:a0:36:6e:ac:cd:52:0d:fa:2e:cc:f8:b9:8e:47:06:65:
bd:10:1c:4e:de:bc:d2:a4:6e:77:fb:74:94:27:c9:09:67:9a:
26:87:44:98:af:32:1c:46:94:bc:ed:f0:bf:05:00:21:87:9f:
fe:41:1e:1f:17:2e:57:f5:06:86:33:5b:6f:bc:3d:c1:99:85:
5b:fd:6d:b5:ab:eb:fb:4c:34:c4:86:c8:11:fb:e0:b3:d7:29:
12:1c:0a:86:f0:dd:4f:7b:96:d3:4a:8d:0e:78:6b:d9:55:23:
46:5e:a2:45:9b:15:6c:4d:e3:ca:e0:4b:86:e8:2a:63:3f:26:
06:c5:d0:27:5e:31:ca:46:d4:5d:cd:a5:1c:45:97:8c:72:66:
11:31:9e:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wNs+wDC0JmzfOsmTMF8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0
ZWE1OWIwHhcNMjYwMzI5MDQwMTE4WhcNMjYwMzMwMDQwMTE4WjAzMTEwLwYDVQQD
EygzMmY3YzJhMmYwNjNhNWMwYzYyNmM3MTkzMzhlNTVhNzExMmQxNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEfiZGtEpMxqZ6wQAGNnSUbsHqPY
s83dLcKHLaW5zCdxTjC1wK4zRzBYpgaPEdqZaFgTPOm9NKSgSHBT36fHuiR7V5A9
9lkT8ifcInowxBGbV6Bf3qzj82OBFcIBNT0Jx/kYM8f4P4xk7upVGm79z5ZQHsRr
lxPS5W0mMJefbEXOSn5gRC4D/M0pRH8P25oxuosV2I9DGwBnKux8qPZTyCXFu4QU
kODODiwonzy38G9RA2NwcPINigTvM0wseeVeVzyIc9Se+p+vkG5dIoEnTo+uJaQR
JxmyeEMes2NZW3qXQl7c4hiktyuYETqcfdmlAMwXjfSK1yvcLS6R5dHinwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDL3wqLwY6XAxibHGTOOVacRLRZZMB8GA1UdIwQY
MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt
OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5
LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD59WyXA
yD2+gVzeTsJ5J3lRx/Z3zJz/OLym6VGaO1inXMTVP7gsIkOJ7W8SEIYYv2OxLvYM
T1OYGvL0TmNgf1rf7luodE9gQpl2sGmXQSTswNNaDmMoseRWXPdfHRQrV1L6LSmZ
a51xlqhZ0regNm6szVIN+i7M+LmORwZlvRAcTt680qRud/t0lCfJCWeaJodEmK8y
HEaUvO3wvwUAIYef/kEeHxcuV/UGhjNbb7w9wZmFW/1ttavr+0w0xIbIEfvgs9cp
EhwKhvDdT3uW00qNDnhr2VUjRl6iRZsVbE3jyuBLhugqYz8mBsXQJ14xykbUXc2l
HEWXjHJmETGe6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:52 2026 by rpki-client