Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: QFfFzVnbRJXjMCv0JaI+x736TnpqezsSAQrfKc1QrXU=
Subject key identifier: 87:AE:11:34:66:2B:13:65:BE:71:1C:BD:ED:77:F9:EB:B8:30:39:93
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01A10C9500AD1D03367DF5039E35CEA4C32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0E7C
Signing time: Mon 05 Oct 2026 15:00:53 +0000
Manifest this update: Mon 05 Oct 2026 15:00:53 +0000
Manifest next update: Tue 06 Oct 2026 15:00:53 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: uVQss89qZN74rn9uqVMHYt5oo5P4C5cVhrpwbWrpJCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:95:00:ad:1d:03:36:7d:f5:03:9e:35:ce:a4:c3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Oct 5 15:00:53 2026 GMT
Not After : Oct 6 15:00:53 2026 GMT
Subject: CN=87ae1134662b1365be711cbded77f9ebb8303993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:73:a4:75:de:6f:6b:ff:73:d6:aa:b7:fd:
80:1f:96:6f:ef:30:62:52:fc:a6:a2:5f:b4:d9:a7:
91:1c:bc:9a:fe:8e:0d:1d:29:b8:f9:36:e6:87:6c:
e2:43:5d:89:18:04:d6:34:80:d8:b9:31:d7:74:28:
6b:f7:8a:c2:62:be:7f:d2:33:c0:13:5c:d1:99:d5:
33:f4:c8:d0:22:63:17:ab:a0:da:61:65:61:f2:a5:
25:f9:50:25:ba:3e:cd:79:77:3b:c3:ce:72:0b:9f:
0b:b2:5d:93:16:95:43:73:7e:be:0f:72:b9:94:ff:
27:b7:44:a0:d2:a9:b0:32:65:05:cc:b0:31:6e:6b:
6f:30:e1:89:78:74:40:bd:a2:7f:04:9c:de:9a:4b:
eb:b2:ab:36:b3:82:21:52:fe:28:e5:68:a1:9e:34:
56:e9:e8:db:08:02:9a:fb:16:70:bd:ae:10:87:41:
0d:38:9e:4c:b2:ac:9c:d2:fb:00:55:21:92:04:00:
64:02:be:ff:a2:27:db:28:05:4d:c9:40:d9:83:86:
ac:af:01:d3:f4:7c:25:60:49:47:4f:c3:a9:d6:af:
a6:47:d3:e7:4a:b5:db:b6:0e:3d:ef:d1:67:a5:f1:
4e:0d:7f:65:19:1d:37:34:d0:76:d2:d4:76:5b:50:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:11:34:66:2B:13:65:BE:71:1C:BD:ED:77:F9:EB:B8:30:39:93
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8e:ec:ba:b7:c0:b7:b3:58:b0:78:24:da:4f:4c:25:8d:a4:
86:75:91:bb:ce:3d:bd:e4:9e:6d:aa:6c:6b:d9:4d:9c:41:e9:
d8:06:86:d0:b5:4d:8c:cd:43:dd:d4:c1:96:bf:9e:e9:34:06:
c3:40:f6:b2:81:04:f9:5b:0c:6a:d6:f2:db:25:fa:44:72:ac:
6a:e4:dc:3a:78:50:08:dd:1a:41:4e:96:0f:e5:39:50:a5:ab:
8b:cb:86:26:95:4e:80:49:93:b8:6b:86:89:4f:fd:80:ff:b3:
5e:a3:3a:6f:67:b6:c9:09:b5:d1:d2:1a:35:c0:bd:c7:c9:e4:
3b:6a:ea:f7:18:c3:4a:ca:0f:01:5a:a9:4a:b7:93:3f:2c:ff:
c6:2e:47:fe:f7:dc:55:79:b1:3d:2c:34:2b:0a:98:f7:94:b1:
3e:5f:68:2c:60:c8:7a:1b:ab:8b:13:8a:9c:67:05:a1:79:85:
88:cb:09:40:0f:e5:c2:b9:f0:f4:ba:9d:6d:b1:8d:fa:d4:e9:
bd:9d:9d:a6:4b:f4:65:53:7f:f0:05:c2:47:5f:4c:48:05:c6:
e0:70:c3:d0:b5:c7:b5:43:1e:ff:f0:5b:7c:46:56:ab:52:a0:
c7:90:cf:97:a0:3d:66:74:df:53:d0:3b:c7:16:81:df:73:1d:
ff:8c:25:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMlQCtHQM2ffUDnjXOpMMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDYxZjJmNDlhNmQ3YWY5ZWE2NzZiYWQwM2RmMWNlMmY1
MDI2MGQwHhcNMjYxMDA1MTUwMDUzWhcNMjYxMDA2MTUwMDUzWjAzMTEwLwYDVQQD
Eyg4N2FlMTEzNDY2MmIxMzY1YmU3MTFjYmRlZDc3ZjllYmI4MzAzOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta1zpHXeb2v/c9aqt/2AH5Zv7zBi
Uvymol+02aeRHLya/o4NHSm4+Tbmh2ziQ12JGATWNIDYuTHXdChr94rCYr5/0jPA
E1zRmdUz9MjQImMXq6DaYWVh8qUl+VAluj7NeXc7w85yC58Lsl2TFpVDc36+D3K5
lP8nt0Sg0qmwMmUFzLAxbmtvMOGJeHRAvaJ/BJzemkvrsqs2s4IhUv4o5WihnjRW
6ejbCAKa+xZwva4Qh0ENOJ5Msqyc0vsAVSGSBABkAr7/oifbKAVNyUDZg4asrwHT
9HwlYElHT8Op1q+mR9PnSrXbtg4979FnpfFODX9lGR03NNB20tR2W1DxJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeuETRmKxNlvnEcve13+eu4MDmTMB8GA1UdIwQY
MBaAFKkGHy9JptevnqZ2utA98c4vUCYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEt
ZjZjMjY4NjEyZmM3LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEtZjZjMjY4NjEyZmM3
LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjI7surfA
t7NYsHgk2k9MJY2khnWRu849veSebapsa9lNnEHp2AaG0LVNjM1D3dTBlr+e6TQG
w0D2soEE+VsMatby2yX6RHKsauTcOnhQCN0aQU6WD+U5UKWri8uGJpVOgEmTuGuG
iU/9gP+zXqM6b2e2yQm10dIaNcC9x8nkO2rq9xjDSsoPAVqpSreTPyz/xi5H/vfc
VXmxPSw0KwqY95SxPl9oLGDIehurixOKnGcFoXmFiMsJQA/lwrnw9LqdbbGN+tTp
vZ2dpkv0ZVN/8AXCR19MSAXG4HDD0LXHtUMe//BbfEZWq1Kgx5DPl6A9ZnTfU9A7
xxaB33Md/4wlNQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:51:30 2026 by rpki-client