Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: eGdyvy+vyWvBEq40O12aQbBJ/7SgodZiKuhfP3I+aQU=
Subject key identifier: D1:3C:AF:12:4E:86:DF:0E:FC:02:06:C0:0B:64:DF:6C:6D:92:EE:1D
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019D3752EBFAC0F8A8F7785BAED1CC29ADC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: Q9bW7DT8b-bilbM4okf2-4RumJ8.roa (hash: VGpo3RNyhjlbXzLjR04xOlVdZxQhemrEMPSoF4PPXPI=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: D6lnxm7VzWJ3n2krVEvYyeOHEmU2qLbBhEppJ5RmB7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:eb:fa:c0:f8:a8:f7:78:5b:ae:d1:cc:29:ad:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=d13caf124e86df0efc0206c00b64df6c6d92ee1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:cc:cd:0a:89:8b:3b:c0:b5:12:2e:7a:eb:
cf:34:c1:76:aa:81:f3:dd:94:f4:74:71:99:76:20:
cd:20:4d:85:6d:a2:9c:ae:6a:8d:8e:c8:0d:c2:d4:
82:00:47:9c:5e:98:99:87:1f:97:c1:5f:e2:0f:db:
96:30:34:76:3d:bb:72:17:6e:c6:45:5a:0c:2f:fd:
3e:09:8b:df:51:1d:80:df:a3:41:34:de:e8:0f:27:
56:94:da:19:a9:2c:47:84:2e:2d:8f:d3:73:0c:8e:
d6:33:68:fa:5b:1c:15:92:23:c7:0e:1e:84:c8:f7:
18:dc:70:9d:06:bb:51:ae:13:ef:00:7e:eb:fa:f0:
e5:8f:e6:60:61:9b:dd:b4:d7:02:cb:41:2d:07:52:
96:8e:75:ae:1f:f8:62:e8:ad:44:24:4a:9d:aa:7d:
b4:8e:ef:b5:c7:f7:5f:32:47:a2:ec:43:3e:6e:ad:
02:0a:2b:f1:12:81:80:f1:2a:f1:d3:e0:4c:7d:40:
47:12:97:f1:fd:f4:30:b4:d9:48:46:e7:64:3e:dc:
ed:79:83:8d:15:4b:21:ed:0e:87:8e:8e:47:0a:62:
d5:5d:41:16:89:58:fe:a8:83:5c:9e:90:e3:dd:81:
6d:f6:ca:c2:9c:80:f2:a7:3c:80:1a:d6:3f:28:23:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:AF:12:4E:86:DF:0E:FC:02:06:C0:0B:64:DF:6C:6D:92:EE:1D
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:68:35:76:18:66:2e:90:73:1d:45:1e:7d:f2:14:c2:df:b5:
84:ac:74:ac:94:b3:4c:05:f8:07:2e:6f:ea:3a:26:9f:27:ce:
65:d0:7a:f2:75:39:96:c3:6f:e1:aa:d8:60:b8:a2:89:17:e1:
80:9a:7e:d0:2c:df:e8:be:e4:da:65:48:0f:75:9b:c3:ea:69:
8b:a0:bd:5c:86:a7:12:54:ee:0e:df:25:93:42:00:5b:6a:52:
5f:42:7b:ee:84:00:f6:75:28:4d:5c:1a:e3:d8:f4:6e:ee:fb:
32:2b:7a:f8:27:85:00:66:02:b6:27:5f:f7:b2:8c:e8:53:1b:
a1:36:9f:56:9b:4b:16:95:4c:07:b8:56:d0:bc:e4:23:b1:79:
45:92:4d:f7:4a:99:c0:50:a8:7d:63:bc:78:34:4e:eb:8f:7a:
51:82:2b:21:34:2c:f0:3b:0e:c4:0c:2f:cd:b5:09:e5:c1:6b:
84:aa:19:73:a2:54:ca:5b:5f:d2:83:3d:e6:6e:a0:9f:7b:df:
cb:62:da:0e:ee:bd:84:6c:a3:5e:df:4f:fb:2a:e8:0c:95:15:
88:da:22:e8:ef:10:5e:4f:b7:af:68:e0:c7:88:0c:1e:b3:7d:
56:77:1d:65:16:d1:28:9c:c4:9d:c5:ca:c2:90:9f:10:93:b8:
c9:ea:f0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uuv6wPio93hbrtHMKa3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmE5MGU3MTY1MzBmMTVmNzM5OWI3YWMzZTBkMjkzOWEy
MWEyMTAwHhcNMjYwMzI5MDIwMTE0WhcNMjYwMzMwMDIwMTE0WjAzMTEwLwYDVQQD
EyhkMTNjYWYxMjRlODZkZjBlZmMwMjA2YzAwYjY0ZGY2YzZkOTJlZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhnMzQqJizvAtRIueuvPNMF2qoHz
3ZT0dHGZdiDNIE2FbaKcrmqNjsgNwtSCAEecXpiZhx+XwV/iD9uWMDR2PbtyF27G
RVoML/0+CYvfUR2A36NBNN7oDydWlNoZqSxHhC4tj9NzDI7WM2j6WxwVkiPHDh6E
yPcY3HCdBrtRrhPvAH7r+vDlj+ZgYZvdtNcCy0EtB1KWjnWuH/hi6K1EJEqdqn20
ju+1x/dfMkei7EM+bq0CCivxEoGA8Srx0+BMfUBHEpfx/fQwtNlIRudkPtzteYON
FUsh7Q6Hjo5HCmLVXUEWiVj+qINcnpDj3YFt9srCnIDypzyAGtY/KCPpVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE8rxJOht8O/AIGwAtk32xtku4dMB8GA1UdIwQY
MBaAFKdqkOcWUw8V9zmbesPg0pOaIaIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEt
ODViNjViYWNkNGZiLzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEtODViNjViYWNkNGZi
LzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2g1dhhm
LpBzHUUeffIUwt+1hKx0rJSzTAX4By5v6jomnyfOZdB68nU5lsNv4arYYLiiiRfh
gJp+0Czf6L7k2mVID3Wbw+ppi6C9XIanElTuDt8lk0IAW2pSX0J77oQA9nUoTVwa
49j0bu77Mit6+CeFAGYCtidf97KM6FMboTafVptLFpVMB7hW0LzkI7F5RZJN90qZ
wFCofWO8eDRO6496UYIrITQs8DsOxAwvzbUJ5cFrhKoZc6JUyltf0oM95m6gn3vf
y2LaDu69hGyjXt9P+yroDJUViNoi6O8QXk+3r2jgx4gMHrN9VncdZRbRKJzEncXK
wpCfEJO4yerw9A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:40 2026 by rpki-client