Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: eHgQ6h9tUL//MR6W1WwvRuMFYatbqY0QGfWyp7D1CUI=
Subject key identifier: C3:31:31:4C:68:80:BA:ED:0B:0C:D5:1D:46:B9:7D:FF:1B:D9:76:4B
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 01A10090D31FA23ADFB232A96B6A402D8644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 07:00:53 +0000
Manifest this update: Sat 03 Oct 2026 07:00:53 +0000
Manifest next update: Sun 04 Oct 2026 07:00:53 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: N9LbcnoNrgq34Bz6Ordv9EyYRymSAEpuRnHqAFt6GeY=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:90:d3:1f:a2:3a:df:b2:32:a9:6b:6a:40:2d:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Oct 3 07:00:53 2026 GMT
Not After : Oct 4 07:00:53 2026 GMT
Subject: CN=c331314c6880baed0b0cd51d46b97dff1bd9764b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:92:d2:80:13:64:36:cf:15:53:58:72:0d:
e3:80:a1:ec:50:a6:a9:e7:d0:fb:9e:62:a4:58:6e:
f3:e9:0f:e9:27:bb:b1:76:9e:53:0b:d8:7e:c3:08:
71:c1:7b:bd:42:71:83:dc:b2:0d:5e:97:c8:f5:6b:
3e:e7:58:f2:b3:67:48:6f:13:51:2e:e4:2d:43:92:
fb:bb:73:53:ce:9d:cc:4f:c9:b1:68:94:4c:13:33:
a0:30:25:de:24:94:d3:4d:a6:2c:20:81:7c:24:27:
78:f8:df:51:b5:2e:1b:2d:50:63:41:3a:05:c2:04:
df:2d:e4:54:d7:d8:ec:3f:56:20:ae:55:da:31:05:
81:5c:c3:2a:07:fc:77:a3:1d:90:9e:6e:fb:a1:b5:
d9:a1:06:e7:b0:84:88:0f:6e:f5:d6:06:f0:96:d3:
73:ac:44:0a:9b:1e:31:e7:d3:1c:75:2d:91:51:45:
30:ab:5f:3a:b5:38:2c:9c:cf:de:89:ae:8a:3b:7a:
ae:ff:32:fe:82:f8:f7:30:ea:95:e3:e9:e3:5b:6f:
3a:72:6b:5a:a9:b3:ba:85:26:2c:f7:b4:a5:9f:16:
ed:63:9d:1a:cb:07:57:86:79:ef:79:9c:29:3e:4b:
21:4d:43:77:f3:b8:9c:aa:c9:04:6c:20:9a:3e:21:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:31:4C:68:80:BA:ED:0B:0C:D5:1D:46:B9:7D:FF:1B:D9:76:4B
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:19:c6:9d:14:aa:a7:de:29:ed:e0:c9:74:1c:89:f5:3e:e3:
fd:3a:1d:81:be:07:7e:e9:91:72:a2:b9:e5:fd:ad:da:8e:74:
d3:1a:96:6b:87:3a:d6:d4:27:fc:fc:67:b8:66:8b:56:32:0b:
c9:32:3a:e8:22:01:03:05:67:75:0b:ab:b3:fa:38:f1:2b:78:
b9:7c:ef:58:9d:f0:91:51:c9:54:f9:62:6e:3b:89:fe:20:43:
71:2a:d9:0a:da:4c:ed:c7:cc:5c:e7:95:9c:94:b9:fe:f8:ec:
e8:51:91:7c:52:a5:ed:49:5d:17:8b:98:bb:c1:d7:f3:8d:96:
55:12:3f:dc:f5:90:68:07:c6:86:52:18:f8:92:47:25:a7:d4:
66:3d:94:7e:3e:82:cc:10:09:3d:47:d6:ed:c3:09:2e:f8:18:
a8:47:5f:fa:06:68:fb:43:74:b5:9f:6a:9c:52:2a:bc:0c:f2:
39:7a:51:83:76:7b:b2:e7:cd:40:88:dd:85:8c:91:c4:e0:dc:
88:db:55:67:25:66:70:c0:aa:79:47:e2:e6:51:1a:08:d3:12:
13:dc:f9:92:b1:ab:29:70:37:cd:8a:9b:48:bb:1e:eb:5c:1f:
32:06:f2:ad:22:1b:88:e8:01:ab:86:28:d2:10:88:f0:f5:5b:
b3:a7:d3:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAkNMfojrfsjKpa2pALYZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjYxMDAzMDcwMDUzWhcNMjYxMDA0MDcwMDUzWjAzMTEwLwYDVQQD
EyhjMzMxMzE0YzY4ODBiYWVkMGIwY2Q1MWQ0NmI5N2RmZjFiZDk3NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd2S0oATZDbPFVNYcg3jgKHsUKap
59D7nmKkWG7z6Q/pJ7uxdp5TC9h+wwhxwXu9QnGD3LINXpfI9Ws+51jys2dIbxNR
LuQtQ5L7u3NTzp3MT8mxaJRMEzOgMCXeJJTTTaYsIIF8JCd4+N9RtS4bLVBjQToF
wgTfLeRU19jsP1YgrlXaMQWBXMMqB/x3ox2Qnm77obXZoQbnsISID2711gbwltNz
rEQKmx4x59McdS2RUUUwq186tTgsnM/eia6KO3qu/zL+gvj3MOqV4+njW286cmta
qbO6hSYs97SlnxbtY50aywdXhnnveZwpPkshTUN387icqskEbCCaPiGsQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMxMUxogLrtCwzVHUa5ff8b2XZLMB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRnGnRSq
p94p7eDJdByJ9T7j/Todgb4HfumRcqK55f2t2o500xqWa4c61tQn/PxnuGaLVjIL
yTI66CIBAwVndQurs/o48St4uXzvWJ3wkVHJVPlibjuJ/iBDcSrZCtpM7cfMXOeV
nJS5/vjs6FGRfFKl7UldF4uYu8HX842WVRI/3PWQaAfGhlIY+JJHJafUZj2Ufj6C
zBAJPUfW7cMJLvgYqEdf+gZo+0N0tZ9qnFIqvAzyOXpRg3Z7sufNQIjdhYyRxODc
iNtVZyVmcMCqeUfi5lEaCNMSE9z5krGrKXA3zYqbSLse61wfMgbyrSIbiOgBq4Yo
0hCI8PVbs6fTug==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:21:40 2026 by rpki-client