Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: EsKKWr7h9GBhyk5WY8s7QCJDDwjwDJbiUNKmBqKbAWI=
Subject key identifier: 19:8F:1F:BB:AF:FE:98:54:33:44:49:0B:C7:BE:E5:00:53:D8:5B:93
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01A1DC4B79D41611A3450E84BB50840A0625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 09A0
Signing time: Sat 14 Nov 2026 23:01:36 +0000
Manifest this update: Sat 14 Nov 2026 23:01:36 +0000
Manifest next update: Sun 15 Nov 2026 23:01:36 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: vwik5gew24p+qDbhpWVXffLSGOvABqslj63jbMI/9NM=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:79:d4:16:11:a3:45:0e:84:bb:50:84:0a:06:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Nov 14 23:01:36 2026 GMT
Not After : Nov 15 23:01:36 2026 GMT
Subject: CN=198f1fbbaffe98543344490bc7bee50053d85b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:ef:44:b9:61:4f:4d:e1:36:13:f3:f6:72:
5e:d9:b8:d7:e1:c6:fa:e3:14:23:50:1f:f3:40:a7:
57:aa:7e:3d:bb:9a:15:43:eb:e0:56:c8:d0:7a:f4:
67:94:dc:84:6c:c2:86:8d:ca:cf:5a:03:b4:64:1f:
3a:fc:e8:96:ee:f9:62:90:4f:5e:c6:78:1a:48:92:
1d:ef:f2:f5:e0:ea:9a:f6:b7:18:d5:48:65:99:93:
15:37:31:a8:2d:2f:ad:2b:62:03:07:63:01:75:e8:
09:66:5d:07:76:90:79:a5:30:1c:59:85:57:94:a4:
4c:de:5e:a5:43:77:23:7a:6d:6b:19:4c:61:9b:d9:
78:15:a6:01:83:3b:29:1e:7f:6c:f9:1f:a3:77:ea:
0b:75:70:81:3c:a9:13:4f:86:b9:58:92:b9:8d:f9:
02:33:59:c8:80:4c:6b:07:dd:43:e7:6b:e8:e3:11:
40:1e:1f:80:0f:06:83:77:8b:f4:35:35:34:6b:f6:
a4:b9:65:63:f4:b3:4e:2a:68:99:ca:b4:ca:19:f8:
5b:92:9e:96:62:fe:94:1b:01:ed:1f:45:c2:02:29:
20:1f:00:74:fe:31:52:01:49:42:71:ff:4a:23:13:
10:4a:ee:72:c8:90:97:9d:5d:2b:46:52:09:a8:1c:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8F:1F:BB:AF:FE:98:54:33:44:49:0B:C7:BE:E5:00:53:D8:5B:93
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:93:a7:ff:bb:27:37:4d:35:57:e9:18:1a:8b:e8:9b:82:67:
03:51:40:4d:2b:b9:8d:33:c2:a3:eb:9c:98:1d:bb:6e:8f:87:
bd:79:82:ad:1d:a4:0e:2d:78:c1:d5:da:3b:ca:bb:f9:e0:60:
77:36:6c:50:46:07:ce:49:ff:61:db:70:94:99:33:10:f4:00:
a3:33:c0:22:b3:2f:95:c8:d6:fc:1b:ce:74:a5:30:c0:a9:72:
96:6a:b1:a1:35:3d:e9:94:3f:b0:00:71:51:d2:ae:d2:fc:39:
4b:22:01:72:45:a2:9b:41:8a:d6:9c:73:63:76:1e:d1:ac:9d:
e6:e5:05:92:ae:10:b8:0c:33:ef:d8:77:74:4f:cd:4f:09:b7:
90:3b:bd:fb:cc:2f:47:a7:03:c6:42:2d:96:34:83:a4:de:ba:
61:65:6f:1e:63:40:eb:8d:5d:d5:02:00:d9:59:c9:c7:6c:ab:
bc:8c:38:f9:06:9a:31:ef:2d:22:a9:f3:c4:25:d8:82:ff:36:
f0:86:19:30:ac:00:b4:1f:74:7b:be:c5:6d:42:e3:91:9e:a4:
cb:64:bf:7a:02:60:41:52:fc:24:c1:46:3b:b0:34:4c:67:61:
04:db:cd:2a:e1:be:e5:06:63:04:1b:8c:74:79:74:2d:7d:0f:
86:73:89:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcS3nUFhGjRQ6Eu1CECgYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmZlNzBmNGNlZjEwMzc2ODM2MTUyZjM4ZTRlMDg1MzJj
YzdiOWYwHhcNMjYxMTE0MjMwMTM2WhcNMjYxMTE1MjMwMTM2WjAzMTEwLwYDVQQD
EygxOThmMWZiYmFmZmU5ODU0MzM0NDQ5MGJjN2JlZTUwMDUzZDg1YjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKDvRLlhT03hNhPz9nJe2bjX4cb6
4xQjUB/zQKdXqn49u5oVQ+vgVsjQevRnlNyEbMKGjcrPWgO0ZB86/OiW7vlikE9e
xngaSJId7/L14Oqa9rcY1UhlmZMVNzGoLS+tK2IDB2MBdegJZl0HdpB5pTAcWYVX
lKRM3l6lQ3cjem1rGUxhm9l4FaYBgzspHn9s+R+jd+oLdXCBPKkTT4a5WJK5jfkC
M1nIgExrB91D52vo4xFAHh+ADwaDd4v0NTU0a/akuWVj9LNOKmiZyrTKGfhbkp6W
Yv6UGwHtH0XCAikgHwB0/jFSAUlCcf9KIxMQSu5yyJCXnV0rRlIJqByw9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmPH7uv/phUM0RJC8e+5QBT2FuTMB8GA1UdIwQY
MBaAFEMv5w9M7xA3aDYVLzjk4IUyzHufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUt
MTg5ZDAwYTMzM2VlLzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUtMTg5ZDAwYTMzM2Vl
LzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJOn/7sn
N001V+kYGovom4JnA1FATSu5jTPCo+ucmB27bo+HvXmCrR2kDi14wdXaO8q7+eBg
dzZsUEYHzkn/YdtwlJkzEPQAozPAIrMvlcjW/BvOdKUwwKlylmqxoTU96ZQ/sABx
UdKu0vw5SyIBckWim0GK1pxzY3Ye0ayd5uUFkq4QuAwz79h3dE/NTwm3kDu9+8wv
R6cDxkItljSDpN66YWVvHmNA641d1QIA2VnJx2yrvIw4+QaaMe8tIqnzxCXYgv82
8IYZMKwAtB90e77FbULjkZ6ky2S/egJgQVL8JMFGO7A0TGdhBNvNKuG+5QZjBBuM
dHl0LX0PhnOJ1g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:32:47 2026 by rpki-client