Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: 7eAJhLDraeJTK0I1uPDUyhVQM/r4F+DH52cB+0QYumM=
Subject key identifier: AD:8B:9C:73:A4:14:25:2C:F5:A5:7D:1B:7A:78:D2:D6:17:75:74:95
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01A102ED4CED678D0A4B600CD53C4FB62FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0E77
Signing time: Sat 03 Oct 2026 18:01:08 +0000
Manifest this update: Sat 03 Oct 2026 18:01:08 +0000
Manifest next update: Sun 04 Oct 2026 18:01:08 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: GhBQnAYZvho1yPGgV5vkYf40VEccECtUzXLvjILuzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:4c:ed:67:8d:0a:4b:60:0c:d5:3c:4f:b6:2f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Oct 3 18:01:08 2026 GMT
Not After : Oct 4 18:01:08 2026 GMT
Subject: CN=ad8b9c73a414252cf5a57d1b7a78d2d617757495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:48:f4:fd:2a:48:32:ef:f0:7e:b9:38:bb:
39:d9:40:49:6c:6b:0f:a8:36:c8:be:78:25:73:f3:
3a:6f:27:a9:b6:a7:ff:44:36:56:92:10:85:93:1f:
2a:85:2a:50:01:19:16:bc:84:2f:d4:cd:7f:e7:4e:
64:11:04:04:c9:44:bc:dc:5a:54:a6:9c:9a:98:4e:
83:9f:ec:48:30:c4:a4:c4:b3:eb:a8:87:0d:7f:bc:
94:43:48:58:22:42:6e:11:64:0c:21:ce:0a:e0:cc:
a8:3a:8a:31:7f:64:d7:48:28:b5:a2:f4:2e:50:49:
8d:cc:97:a7:3c:ee:c6:78:f1:a0:e5:78:d6:e1:a3:
e7:9b:a3:65:ff:61:3c:08:d7:fd:2a:6b:1a:53:fe:
e7:32:ad:a9:d2:8a:59:17:7c:5c:44:d0:de:0e:49:
cf:fd:13:c6:54:ef:00:b5:8f:07:ae:2e:f9:6b:dc:
89:50:91:b7:32:40:b5:17:8c:cb:ca:95:11:93:03:
5c:d2:82:36:2a:5a:f8:3b:2a:29:82:7e:91:e7:c5:
3b:fd:53:6e:a9:af:76:8c:c1:03:1c:e5:b7:35:d5:
f0:2f:35:1b:ea:96:af:a7:39:85:42:4b:3c:76:cd:
49:2e:10:f6:65:96:77:1f:5d:70:fc:3f:ee:be:87:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8B:9C:73:A4:14:25:2C:F5:A5:7D:1B:7A:78:D2:D6:17:75:74:95
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:60:91:01:24:52:85:0b:2a:00:bd:e7:43:28:3a:03:74:80:
1b:7e:0f:e2:6b:ad:77:96:a0:c7:4e:b9:06:b3:9d:92:b7:bd:
bb:81:c5:33:1e:ec:15:c7:48:7e:04:b4:02:fb:44:d5:e7:33:
b2:70:ad:c2:49:b0:7a:68:32:6c:d8:ce:76:8a:7e:56:0c:9f:
7c:78:59:23:21:b9:f4:12:4f:94:49:ce:29:5b:ca:d5:52:d7:
95:1c:ab:0e:43:2e:ff:12:b5:19:0b:23:cf:6a:d2:ee:b3:e7:
3d:a5:6a:49:d8:65:6f:5f:14:37:c6:5a:fe:28:4b:0c:1c:46:
e8:66:ad:89:45:bd:bc:8f:bf:af:22:c8:b3:d9:85:d2:06:1c:
64:de:e1:36:e6:07:ee:28:a4:a9:65:38:3f:d5:56:0b:12:6a:
a4:cc:ab:7e:60:42:a7:e2:5d:f2:84:00:25:8c:a9:e7:14:42:
c2:23:5d:c3:76:14:07:c7:17:c0:79:f9:8f:f8:a7:b7:fa:74:
3e:37:50:92:eb:eb:ad:e2:e5:ad:38:b4:fe:09:c2:09:30:35:
01:19:18:fa:c0:d6:cf:9a:22:93:10:30:39:e1:63:3d:b3:f7:
48:06:c1:32:fa:90:20:bb:fd:a0:1b:fa:2b:7a:0d:a7:eb:20:
cd:b6:a0:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEC7UztZ40KS2AM1TxPti+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDYxZjJmNDlhNmQ3YWY5ZWE2NzZiYWQwM2RmMWNlMmY1
MDI2MGQwHhcNMjYxMDAzMTgwMTA4WhcNMjYxMDA0MTgwMTA4WjAzMTEwLwYDVQQD
EyhhZDhiOWM3M2E0MTQyNTJjZjVhNTdkMWI3YTc4ZDJkNjE3NzU3NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZVI9P0qSDLv8H65OLs52UBJbGsP
qDbIvnglc/M6byeptqf/RDZWkhCFkx8qhSpQARkWvIQv1M1/505kEQQEyUS83FpU
ppyamE6Dn+xIMMSkxLPrqIcNf7yUQ0hYIkJuEWQMIc4K4MyoOooxf2TXSCi1ovQu
UEmNzJenPO7GePGg5XjW4aPnm6Nl/2E8CNf9KmsaU/7nMq2p0opZF3xcRNDeDknP
/RPGVO8AtY8Hri75a9yJUJG3MkC1F4zLypURkwNc0oI2Klr4Oyopgn6R58U7/VNu
qa92jMEDHOW3NdXwLzUb6pavpzmFQks8ds1JLhD2ZZZ3H11w/D/uvoehrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2LnHOkFCUs9aV9G3p40tYXdXSVMB8GA1UdIwQY
MBaAFKkGHy9JptevnqZ2utA98c4vUCYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEt
ZjZjMjY4NjEyZmM3LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEtZjZjMjY4NjEyZmM3
LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGCRASRS
hQsqAL3nQyg6A3SAG34P4mutd5agx065BrOdkre9u4HFMx7sFcdIfgS0AvtE1ecz
snCtwkmwemgybNjOdop+VgyffHhZIyG59BJPlEnOKVvK1VLXlRyrDkMu/xK1GQsj
z2rS7rPnPaVqSdhlb18UN8Za/ihLDBxG6GatiUW9vI+/ryLIs9mF0gYcZN7hNuYH
7iikqWU4P9VWCxJqpMyrfmBCp+Jd8oQAJYyp5xRCwiNdw3YUB8cXwHn5j/int/p0
PjdQkuvrreLlrTi0/gnCCTA1ARkY+sDWz5oikxAwOeFjPbP3SAbBMvqQILv9oBv6
K3oNp+sgzbagZw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:35:25 2026 by rpki-client