Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: p1fXroeNMnGMIAU3x0Ce91BE4FNRgB+ixkOXjgNWgEk=
Subject key identifier: 59:2B:21:50:A6:31:A4:12:F7:63:35:D3:E1:6E:87:B7:4D:01:E1:49
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019CE2FE6A76E68B69865E1D936390E0A946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0AAB
Signing time: Thu 12 Mar 2026 17:00:50 +0000
Manifest this update: Thu 12 Mar 2026 17:00:50 +0000
Manifest next update: Fri 13 Mar 2026 17:00:50 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: FiCXEcUQ/QIVxLhU8nbIOkud9slVm3LEju+4fXDWebk=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: iM_ZBvtG32QBlHfVIn2ttPitF3A.roa (hash: n0U6ZQ9IjEu52Acx8IHWzTTmN0Tm9iyKYJwGHBgAhus=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:6a:76:e6:8b:69:86:5e:1d:93:63:90:e0:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Mar 12 17:00:50 2026 GMT
Not After : Mar 13 17:00:50 2026 GMT
Subject: CN=592b2150a631a412f76335d3e16e87b74d01e149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:d3:cb:b9:69:47:87:6b:53:d8:d9:97:a4:
3a:ce:1f:e8:45:71:0e:08:15:55:ae:1e:05:cd:64:
ec:ab:ad:ee:0e:f1:c7:30:54:cd:a1:79:a2:46:df:
5a:a0:3c:e3:44:5c:82:74:9c:19:06:11:23:51:a7:
4e:af:fb:ab:f5:cc:f6:bd:e2:78:75:f6:cb:c4:39:
d5:e9:e4:ae:71:14:cd:a6:79:b5:f3:66:84:77:60:
05:01:ef:1c:22:36:60:18:19:35:c4:8d:9a:04:14:
7b:ef:0e:ef:56:99:91:98:cc:0d:5e:81:3b:8b:49:
42:6b:50:95:f4:70:48:58:e1:25:2b:5c:f3:42:cd:
de:c7:ab:9c:09:01:38:42:c8:58:eb:bb:94:bc:81:
a8:8a:f8:c8:43:a3:b3:71:6f:55:df:f1:27:3c:87:
c8:d6:ff:e4:74:ee:38:eb:d0:c0:c9:7e:13:97:f9:
87:5c:c2:9b:b3:57:ff:08:26:f8:3f:4c:d1:eb:a6:
b8:87:d9:76:14:f2:5e:c2:96:63:eb:d7:83:bd:5c:
42:3c:6f:e1:ec:c3:cd:6f:21:61:b1:9c:b8:72:1b:
07:95:8a:c5:a8:42:12:32:c7:e9:76:45:31:d9:1e:
6c:fd:1b:30:e4:5e:e7:70:66:82:ed:e6:0a:6b:10:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:21:50:A6:31:A4:12:F7:63:35:D3:E1:6E:87:B7:4D:01:E1:49
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6e:b8:60:8e:aa:47:78:ba:35:2f:33:0b:19:31:1a:21:71:
80:47:52:1c:f1:b8:1c:6e:96:20:18:58:90:ec:22:1c:e9:56:
86:54:55:ca:bb:1e:5d:9d:8e:8c:4f:6b:0a:74:3b:c8:08:26:
cc:f9:20:8e:84:21:c6:a9:6a:22:bf:f7:c3:69:51:18:0d:70:
94:a7:b2:87:d7:24:7a:fa:bb:b5:ad:95:43:0a:d7:98:2f:54:
07:54:a0:33:a0:f8:b8:85:29:f7:f7:77:13:d5:40:70:b2:4f:
ab:a2:2e:ab:ad:20:85:2a:3d:83:47:56:f9:9b:1f:cb:9f:00:
fe:b4:ee:d5:c4:38:ea:91:1e:df:94:40:b3:bc:d4:a3:b5:4e:
aa:e1:19:48:72:0b:c9:46:c2:d0:5b:75:3f:8f:7c:3b:98:f5:
4e:36:9f:f4:93:e6:c4:57:3b:0c:15:c0:0b:4f:b4:77:74:d8:
86:5c:24:53:20:15:96:7c:50:13:48:93:74:34:ca:c5:a2:bd:
98:00:5c:16:97:c7:8d:86:97:46:e2:9a:6a:fa:6c:a7:5d:e0:
4f:79:57:f7:d2:c8:73:e4:a3:67:77:7a:0b:d8:23:cd:79:dd:
0f:cf:98:16:3a:35:57:54:a0:e4:d3:94:9b:64:31:a0:26:47:
1f:44:2e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzi/mp25otphl4dk2OQ4KlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDY5Nzk0MzY3NjM5OWFjNWNhYzZhM2U0NzY1NDVhZjBk
ZjQ5ZGQwHhcNMjYwMzEyMTcwMDUwWhcNMjYwMzEzMTcwMDUwWjAzMTEwLwYDVQQD
Eyg1OTJiMjE1MGE2MzFhNDEyZjc2MzM1ZDNlMTZlODdiNzRkMDFlMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmjTy7lpR4drU9jZl6Q6zh/oRXEO
CBVVrh4FzWTsq63uDvHHMFTNoXmiRt9aoDzjRFyCdJwZBhEjUadOr/ur9cz2veJ4
dfbLxDnV6eSucRTNpnm182aEd2AFAe8cIjZgGBk1xI2aBBR77w7vVpmRmMwNXoE7
i0lCa1CV9HBIWOElK1zzQs3ex6ucCQE4QshY67uUvIGoivjIQ6OzcW9V3/EnPIfI
1v/kdO4469DAyX4Tl/mHXMKbs1f/CCb4P0zR66a4h9l2FPJewpZj69eDvVxCPG/h
7MPNbyFhsZy4chsHlYrFqEISMsfpdkUx2R5s/Rsw5F7ncGaC7eYKaxBN3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkrIVCmMaQS92M10+Fuh7dNAeFJMB8GA1UdIwQY
MBaAFNUGl5Q2djmaxcrGo+R2VFrw30ndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2Yt
OGQyM2FjNWNiNTAyLzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2YtOGQyM2FjNWNiNTAy
LzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfm64YI6q
R3i6NS8zCxkxGiFxgEdSHPG4HG6WIBhYkOwiHOlWhlRVyrseXZ2OjE9rCnQ7yAgm
zPkgjoQhxqlqIr/3w2lRGA1wlKeyh9ckevq7ta2VQwrXmC9UB1SgM6D4uIUp9/d3
E9VAcLJPq6Iuq60ghSo9g0dW+Zsfy58A/rTu1cQ46pEe35RAs7zUo7VOquEZSHIL
yUbC0Ft1P498O5j1Tjaf9JPmxFc7DBXAC0+0d3TYhlwkUyAVlnxQE0iTdDTKxaK9
mABcFpfHjYaXRuKaavpsp13gT3lX99LIc+SjZ3d6C9gjzXndD8+YFjo1V1Sg5NOU
m2QxoCZHH0Qupg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:35 2026 by rpki-client