Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: J6M3aEPIITtyWV7pMOPjfS2YBYXWhpiYEO1T66+fRaQ=
Subject key identifier: 1C:F7:D4:73:B7:FB:46:06:1B:80:60:4F:FC:AE:1E:80:30:36:B1:3B
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019D382E25FFC6213CB8D7E866D888B6F0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 176E
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 05QJdDPCq2Q_jznqerhgP5BoCxg.roa (hash: gU+YSQWmwa9r8UbcwqPCuU94QjYr5yYj3Kh8Xri7um4=)
2: 1nEI4ofN7-_O7YLfMqtxBcLAnwA.roa (hash: 3NhBeQVEE89mf7lTmcAscd7f117hY++nWIP6cov6PBQ=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: 5ChG38hB80zhXCjEby8v+o6dP2e7ULTdNnZRc297Kks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:25:ff:c6:21:3c:b8:d7:e8:66:d8:88:b6:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=1cf7d473b7fb46061b80604ffcae1e803036b13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:4d:27:42:cc:82:59:d4:4f:24:bf:90:86:
ee:74:68:80:88:bd:1e:6b:05:5d:90:64:04:a1:79:
e4:1c:1a:83:21:c0:16:09:b2:6a:33:62:68:2c:e3:
e9:ba:04:88:65:17:8c:77:01:fc:f2:10:83:14:78:
78:bd:47:45:02:3c:81:8e:a1:eb:7c:58:4c:12:c1:
85:0a:c2:3b:7a:01:bb:7c:12:ce:50:b3:65:99:bf:
91:7d:a1:c7:c0:3c:2f:78:56:6a:a9:b8:92:2e:5c:
b7:00:fd:6e:8b:28:3b:3f:35:3a:87:12:00:db:14:
11:15:3c:fe:5b:63:4d:c9:fe:a1:b5:10:72:ed:d8:
bf:00:e9:55:d0:33:bb:f9:ce:29:e9:d7:d7:1c:5f:
35:93:2f:68:8b:a9:80:23:e3:15:a5:87:65:e5:c4:
2e:37:df:df:db:a4:a5:58:d2:79:70:67:fb:1c:08:
b5:8d:e2:4a:20:65:bb:5c:ee:9c:1c:fa:97:96:1e:
bd:96:e4:1b:55:8a:28:2b:f1:67:bd:e2:4a:d0:17:
7a:fb:c0:36:a7:03:24:ad:52:b4:4e:b8:6d:16:3e:
84:4b:75:b3:26:da:90:01:2c:e1:d9:29:a4:1a:2a:
ce:60:14:7d:4f:48:b6:21:32:92:77:6f:ca:ac:af:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:D4:73:B7:FB:46:06:1B:80:60:4F:FC:AE:1E:80:30:36:B1:3B
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:70:29:de:c5:12:80:79:c4:ca:96:b3:8b:e1:0f:6d:5b:aa:
bf:ce:d7:cc:0e:78:34:5a:bf:86:da:a0:fd:8c:3b:ab:db:b8:
0e:9f:cb:5f:69:ff:7a:5b:f3:e1:d1:8a:e0:21:b4:20:85:a4:
bf:76:e4:71:3b:d2:cd:bc:db:eb:d9:25:9e:6e:69:1b:44:c3:
4d:99:7b:54:98:e6:c9:c8:41:19:ac:bb:c1:e2:04:f6:39:cc:
63:5c:b7:83:ba:55:69:06:04:5a:8b:77:5d:1d:ad:ae:34:7a:
4f:91:37:7f:2c:a9:f3:59:cf:07:61:19:50:17:f2:7b:ba:53:
18:38:56:55:e3:75:16:84:af:8f:2c:5a:25:1f:a5:bc:79:db:
c5:76:f4:32:ec:f7:c5:5a:57:12:a1:65:ce:8a:8e:88:30:93:
ef:a8:14:39:19:9c:f0:31:d5:5c:f2:24:74:68:25:f9:ec:aa:
ce:31:2f:e6:95:b4:79:a3:d7:39:d7:b1:7e:ed:6e:1c:81:f7:
a3:32:0c:38:95:99:c9:b3:ac:cf:b2:ab:02:08:86:af:ef:ef:
50:71:d2:76:d1:3c:fd:74:15:8f:c1:f2:1a:92:c7:87:8a:2c:
62:f8:5f:aa:15:16:b5:e1:a7:f1:5a:34:e9:0b:0d:65:d5:b4:
27:34:af:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LiX/xiE8uNfoZtiItvDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk
YmI4YzIwHhcNMjYwMzI5MDYwMDQxWhcNMjYwMzMwMDYwMDQxWjAzMTEwLwYDVQQD
EygxY2Y3ZDQ3M2I3ZmI0NjA2MWI4MDYwNGZmY2FlMWU4MDMwMzZiMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SBNJ0LMglnUTyS/kIbudGiAiL0e
awVdkGQEoXnkHBqDIcAWCbJqM2JoLOPpugSIZReMdwH88hCDFHh4vUdFAjyBjqHr
fFhMEsGFCsI7egG7fBLOULNlmb+RfaHHwDwveFZqqbiSLly3AP1uiyg7PzU6hxIA
2xQRFTz+W2NNyf6htRBy7di/AOlV0DO7+c4p6dfXHF81ky9oi6mAI+MVpYdl5cQu
N9/f26SlWNJ5cGf7HAi1jeJKIGW7XO6cHPqXlh69luQbVYooK/FnveJK0Bd6+8A2
pwMkrVK0TrhtFj6ES3WzJtqQASzh2SmkGirOYBR9T0i2ITKSd2/KrK9OEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz31HO3+0YGG4BgT/yuHoAwNrE7MB8GA1UdIwQY
MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt
ODEwMzlmM2NmM2ZkLzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk
LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnAp3sUS
gHnEypazi+EPbVuqv87XzA54NFq/htqg/Yw7q9u4Dp/LX2n/elvz4dGK4CG0IIWk
v3bkcTvSzbzb69klnm5pG0TDTZl7VJjmychBGay7weIE9jnMY1y3g7pVaQYEWot3
XR2trjR6T5E3fyyp81nPB2EZUBfye7pTGDhWVeN1FoSvjyxaJR+lvHnbxXb0Muz3
xVpXEqFlzoqOiDCT76gUORmc8DHVXPIkdGgl+eyqzjEv5pW0eaPXOdexfu1uHIH3
ozIMOJWZybOsz7KrAgiGr+/vUHHSdtE8/XQVj8HyGpLHh4osYvhfqhUWteGn8Vo0
6QsNZdW0JzSvBg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:32 2026 by rpki-client