Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: y54XI0mto9YNVmDBTlwH2caYvwbU0dBDritAaRv8QAc=
Subject key identifier: 2D:B2:22:91:CE:27:53:59:EF:F7:F3:E8:9D:EB:45:7B:34:BC:3D:AF
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019D38D2D6D2255892B2E6DD60D9621FB60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: 9uT2AtMKbfbZPPU5qrI4o6eTfYX2G17l++wNL6v/89c=)
2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d6:d2:25:58:92:b2:e6:dd:60:d9:62:1f:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=2db22291ce275359eff7f3e89deb457b34bc3daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:a6:f9:75:1e:0d:87:e6:8c:56:1f:a9:de:
6d:b7:64:9b:da:ba:86:7a:25:0d:79:ce:f6:f3:34:
68:12:ab:61:73:de:9f:96:b9:42:8d:28:f5:07:02:
eb:76:d4:f9:e4:a6:82:03:46:76:29:42:1f:ff:ab:
53:03:a9:56:fd:19:76:34:47:dc:ca:a0:73:65:65:
ec:e8:96:31:ee:d5:38:08:7e:2f:04:6d:3b:94:33:
2b:f4:83:79:2a:f5:7f:04:c0:55:af:5c:8f:d4:2d:
a5:a2:9f:e5:67:78:f6:57:0b:cf:9c:f9:8c:96:f1:
72:d8:d2:af:99:ce:18:c0:bb:60:25:a8:c6:39:8d:
6a:e9:61:cf:26:23:97:90:15:13:fe:81:ef:f1:9b:
27:e5:85:8b:a9:1e:be:10:9d:91:63:b2:aa:e4:24:
0e:39:cd:7b:f6:dc:a4:04:8e:3f:82:af:bf:8d:21:
db:39:da:cd:34:70:b3:ed:08:a3:94:d6:6f:56:b4:
c6:08:be:c6:fb:a1:29:ea:61:e3:09:e6:f0:3b:31:
2e:5d:2a:4e:3f:59:7b:8a:f8:0d:b1:e3:e9:aa:d5:
08:c2:fb:d5:be:a6:03:af:24:59:88:b7:38:12:89:
38:a6:f8:59:27:08:54:b8:47:7a:40:8b:47:0d:76:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B2:22:91:CE:27:53:59:EF:F7:F3:E8:9D:EB:45:7B:34:BC:3D:AF
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:13:f4:e6:9e:65:91:0b:df:eb:5e:16:22:30:dc:11:6b:7b:
44:3f:2e:a2:71:c5:9d:03:32:ed:d3:60:b5:3a:95:54:80:4e:
da:ad:3b:2c:ce:14:ab:fa:4e:ff:35:b9:00:b1:7f:71:42:57:
fb:b1:00:8f:12:90:19:3d:b3:69:c1:57:11:48:46:b8:2e:46:
29:c7:95:93:78:c3:30:89:81:bc:d6:61:2a:51:0d:f7:a9:c4:
25:cb:dc:56:47:db:c5:27:9a:56:8d:4c:29:42:82:7a:55:f1:
5b:10:17:64:51:22:62:7d:5d:07:9d:f2:5a:f4:18:fc:a5:06:
14:b5:2c:94:c5:d9:38:1f:88:c7:47:67:e5:92:e9:96:30:a0:
d1:c8:43:a9:2b:5a:8a:35:89:f2:0d:d8:86:20:17:06:cc:90:
ab:cd:2a:33:c6:ec:dd:f9:2d:fd:56:52:1b:44:b4:35:b2:2c:
24:f4:ee:a1:c3:55:f7:99:38:6e:37:22:5b:52:11:14:f6:d8:
ba:68:72:fc:ae:47:c0:7d:07:45:b7:64:5e:8d:49:00:4c:1d:
51:a8:46:8c:fc:6b:b3:4d:d7:47:ea:13:c0:c2:48:db:11:2d:
f2:52:4a:ba:62:a7:a7:1e:0b:e3:d4:c1:4b:6c:f7:18:2c:8d:
a6:d0:e8:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ040tbSJViSsubdYNliH7YLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTYxZTI5YzE2NmJmMDYzNWM4Y2VmZThkYTgyMTA0YTc4
M2I0NTQwHhcNMjYwMzI5MDkwMDM0WhcNMjYwMzMwMDkwMDM0WjAzMTEwLwYDVQQD
EygyZGIyMjI5MWNlMjc1MzU5ZWZmN2YzZTg5ZGViNDU3YjM0YmMzZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29em+XUeDYfmjFYfqd5tt2Sb2rqG
eiUNec728zRoEqthc96flrlCjSj1BwLrdtT55KaCA0Z2KUIf/6tTA6lW/Rl2NEfc
yqBzZWXs6JYx7tU4CH4vBG07lDMr9IN5KvV/BMBVr1yP1C2lop/lZ3j2VwvPnPmM
lvFy2NKvmc4YwLtgJajGOY1q6WHPJiOXkBUT/oHv8Zsn5YWLqR6+EJ2RY7Kq5CQO
Oc179tykBI4/gq+/jSHbOdrNNHCz7QijlNZvVrTGCL7G+6Ep6mHjCebwOzEuXSpO
P1l7ivgNsePpqtUIwvvVvqYDryRZiLc4Eok4pvhZJwhUuEd6QItHDXYIpQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC2yIpHOJ1NZ7/fz6J3rRXs0vD2vMB8GA1UdIwQY
MBaAFPqmHinBZr8GNcjO/o2oIQSng7RUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xWWVLY0ZtdndZMXlNNy1qYWdoQktlRHRGUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5
LTgyNWQzZmYxZGRlOC8xLzEtcVllS2NGbXZ3WTF5TTctamFnaEJLZUR0RlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U5LzE0NjcxZS04NmQyLTQyZmMtODBkOS04MjVkM2ZmMWRk
ZTgvMS8xLXFZZUtjRm12d1kxeU03LWphZ2hCS2VEdEZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBP0
5p5lkQvf614WIjDcEWt7RD8uonHFnQMy7dNgtTqVVIBO2q07LM4Uq/pO/zW5ALF/
cUJX+7EAjxKQGT2zacFXEUhGuC5GKceVk3jDMImBvNZhKlEN96nEJcvcVkfbxSea
Vo1MKUKCelXxWxAXZFEiYn1dB53yWvQY/KUGFLUslMXZOB+Ix0dn5ZLpljCg0chD
qStaijWJ8g3YhiAXBsyQq80qM8bs3fkt/VZSG0S0NbIsJPTuocNV95k4bjciW1IR
FPbYumhy/K5HwH0HRbdkXo1JAEwdUahGjPxrs03XR+oTwMJI2xEt8lJKumKnpx4L
49TBS2z3GCyNptDolQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:00 2026 by rpki-client