Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
File: qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft (raw, json)
Hash identifier: UHoRcklm3WsJJXfvW8G6HApVfC4O38w2vhZLf84KyHA=
Subject key identifier: 3E:E2:E7:62:3C:55:15:04:71:C5:F4:F5:C9:6F:14:87:DF:68:3C:27
Authority key identifier: A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
Certificate issuer: /CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Certificate serial: 01A1DE706AAF5D855CC87E28168424A1B551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:11 +0000
Manifest this update: Sun 15 Nov 2026 09:01:11 +0000
Manifest next update: Mon 16 Nov 2026 09:01:11 +0000
Files and hashes: 1: 1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa (hash: ZnV7OIgyRpJomB9RH+WRj4jIbkVriTkEGmB17bdQUdY=)
2: UiuaMadIa34ZVH4JPpb_7TjTz3A.roa (hash: 81//4wt6oj+yRk5h9sBjg6Uv03FMVzZyifdZ80jFUsU=)
3: qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl (hash: XWWRW+g3avJksS39MzmEISoJ0sO3OdKi0wzdZxh5DGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:6a:af:5d:85:5c:c8:7e:28:16:84:24:a1:b5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Validity
Not Before: Nov 15 09:01:11 2026 GMT
Not After : Nov 16 09:01:11 2026 GMT
Subject: CN=3ee2e7623c55150471c5f4f5c96f1487df683c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:69:84:25:fa:61:ce:d6:ca:85:39:c2:cf:
2d:6e:df:78:5d:88:20:0f:33:6b:e0:97:8c:14:2b:
1c:aa:39:e8:87:b5:69:22:14:54:c5:27:34:97:06:
cc:bb:8b:7b:01:ff:71:f3:83:67:c0:2a:8d:fc:4a:
ae:b7:12:fa:4a:68:ad:5b:fb:5c:fe:27:a2:92:4a:
2d:7f:35:53:42:6d:89:fc:94:1b:f4:13:db:45:51:
d0:ef:d7:7a:42:9f:bf:90:5b:29:64:f4:52:66:20:
2a:13:70:0d:e2:0c:7a:ed:65:d1:c1:67:a6:b0:0f:
0f:d6:22:3f:3e:f0:ff:2b:a9:9b:7e:3e:91:66:d2:
6c:fa:05:44:33:1e:40:af:3e:4c:6c:e7:3e:11:0a:
82:19:16:f8:3e:03:b6:0f:c8:15:85:1f:f0:97:96:
d0:fe:8a:bc:13:70:f9:ef:3b:3a:81:26:37:11:9e:
3f:b1:51:1b:3d:f6:9b:c3:b2:48:23:d8:45:66:18:
81:2f:d2:a2:07:74:15:88:5e:f8:7a:60:89:e9:60:
50:4c:b1:6d:c1:f3:35:db:8c:03:5e:7b:fc:0e:9e:
0c:63:2b:8d:e9:94:23:94:11:01:91:b6:52:64:a7:
19:cf:ef:76:61:a3:5e:2b:87:27:1f:34:92:1c:9e:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:E7:62:3C:55:15:04:71:C5:F4:F5:C9:6F:14:87:DF:68:3C:27
X509v3 Authority Key Identifier:
keyid:A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4e:d2:34:9b:78:23:95:0c:09:39:72:a1:ca:1b:79:72:83:
75:3e:95:9c:c4:dc:f0:2a:29:dd:11:e3:f0:1a:03:7f:6d:8b:
0b:c4:e7:2b:ae:18:d9:fc:71:0f:e3:be:b3:35:ba:2d:2b:d2:
1b:b7:80:18:d6:f4:0e:2c:49:d0:fb:97:4d:23:d9:cd:a9:bb:
e9:e9:d1:fd:9b:5c:90:b6:33:b0:2d:ae:90:85:5a:7f:3d:43:
1d:b9:c1:00:4a:5c:0a:b3:56:05:e4:dd:0e:93:89:98:cd:ae:
7e:40:1e:51:b3:14:4e:45:b1:33:e2:6b:0e:c9:d7:d7:f1:ac:
b6:db:c0:af:1d:f9:8b:de:e3:87:dd:75:d9:7f:85:77:1b:38:
e0:cb:07:8f:4f:34:3a:92:c1:d7:62:b7:62:0b:4a:45:55:63:
97:37:de:4e:cb:68:cd:b8:07:5f:0d:3f:8c:e9:4c:d6:cb:7c:
95:f9:f5:39:98:37:2f:9f:ee:2f:8b:10:17:97:85:c6:5e:19:
3f:dd:fd:6e:74:02:5f:f7:90:74:f6:d5:e9:c6:a7:b8:c1:f3:
ba:d4:ab:85:c9:fc:b9:da:97:cb:99:f1:6c:a0:bd:28:8e:8b:
9e:dd:00:62:7c:65:1e:88:50:39:32:04:67:76:5b:68:24:51:
58:10:b4:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecGqvXYVcyH4oFoQkobVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MWE0YjBlOGYyY2FiYmE2YTI1NjM5NDcyNTIwN2RkZjNl
OTM0MzQwHhcNMjYxMTE1MDkwMTExWhcNMjYxMTE2MDkwMTExWjAzMTEwLwYDVQQD
EygzZWUyZTc2MjNjNTUxNTA0NzFjNWY0ZjVjOTZmMTQ4N2RmNjgzYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruFphCX6Yc7WyoU5ws8tbt94XYgg
DzNr4JeMFCscqjnoh7VpIhRUxSc0lwbMu4t7Af9x84NnwCqN/EqutxL6SmitW/tc
/ieikkotfzVTQm2J/JQb9BPbRVHQ79d6Qp+/kFspZPRSZiAqE3AN4gx67WXRwWem
sA8P1iI/PvD/K6mbfj6RZtJs+gVEMx5Arz5MbOc+EQqCGRb4PgO2D8gVhR/wl5bQ
/oq8E3D57zs6gSY3EZ4/sVEbPfabw7JII9hFZhiBL9KiB3QViF74emCJ6WBQTLFt
wfM124wDXnv8Dp4MYyuN6ZQjlBEBkbZSZKcZz+92YaNeK4cnHzSSHJ6A0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7i52I8VRUEccX09clvFIffaDwnMB8GA1UdIwQY
MBaAFKkaSw6PLKu6aiVjlHJSB93z6TQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJwTERvOHNxN3BxSldPVWNsSUgzZlBwTkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt
OTM3ZGNmZjUxZTJkLzEvcVJwTERvOHNxN3BxSldPVWNsSUgzZlBwTkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk
LzEvcVJwTERvOHNxN3BxSldPVWNsSUgzZlBwTkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPE7SNJt4
I5UMCTlyocobeXKDdT6VnMTc8Cop3RHj8BoDf22LC8TnK64Y2fxxD+O+szW6LSvS
G7eAGNb0DixJ0PuXTSPZzam76enR/ZtckLYzsC2ukIVafz1DHbnBAEpcCrNWBeTd
DpOJmM2ufkAeUbMUTkWxM+JrDsnX1/GsttvArx35i97jh9112X+Fdxs44MsHj080
OpLB12K3YgtKRVVjlzfeTstozbgHXw0/jOlM1st8lfn1OZg3L5/uL4sQF5eFxl4Z
P939bnQCX/eQdPbV6canuMHzutSrhcn8udqXy5nxbKC9KI6Lnt0AYnxlHohQOTIE
Z3ZbaCRRWBC0jQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:08 2026 by rpki-client