Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: IGNYyxBQrXmvM+bN6HKnjdqQODQL4JCpmbi6NndpZ4U=
Subject key identifier: 9A:9C:CF:3B:92:31:D2:83:18:33:F5:C2:E2:18:C0:C0:CE:7E:BB:24
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 01A10C94712CAACF150F8711E645F92B2E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1A8A
Signing time: Mon 05 Oct 2026 15:00:17 +0000
Manifest this update: Mon 05 Oct 2026 15:00:17 +0000
Manifest next update: Tue 06 Oct 2026 15:00:17 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: nYJ6PRM3+YAD4ZtWrs3SPsdogpXJpTho+5FjWEn/nkw=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:94:71:2c:aa:cf:15:0f:87:11:e6:45:f9:2b:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Oct 5 15:00:17 2026 GMT
Not After : Oct 6 15:00:17 2026 GMT
Subject: CN=9a9ccf3b9231d2831833f5c2e218c0c0ce7ebb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:2c:03:1a:df:f3:eb:db:87:66:ef:47:81:
24:5a:70:a6:ee:7d:75:18:8f:10:21:1b:fe:f0:9f:
20:6d:43:54:bd:27:37:8f:26:f4:a5:dd:1d:21:9f:
19:2a:37:b1:b7:f8:69:aa:9b:d6:de:02:9b:7b:b3:
34:d8:60:c3:b0:73:48:bb:3d:99:16:9d:04:7f:8a:
c4:2a:93:89:66:bd:2f:f1:34:84:08:5d:41:58:72:
b6:9c:9a:65:e3:55:61:88:60:e2:d7:53:2c:7c:0c:
b9:7d:af:a2:56:45:eb:a3:92:ac:03:04:80:44:61:
21:27:80:1d:d4:04:63:b5:29:26:9b:02:fb:43:1e:
da:e1:db:1c:82:ee:6a:60:e3:ec:9f:1b:6f:68:26:
b3:4c:ee:56:6c:89:ad:7e:d6:d3:5c:16:90:0f:02:
63:67:ba:df:79:6f:01:60:91:42:eb:6b:7c:f0:62:
7f:d4:9a:3d:ea:14:1e:ac:e1:bc:6c:2f:04:d1:18:
f2:5f:f8:fa:66:17:ff:a4:ff:bf:1b:3a:10:ac:15:
57:7c:01:f3:8b:9e:0a:7d:16:bd:7f:13:bd:8d:3c:
90:1a:f4:fc:d7:73:5c:6b:77:03:1a:e6:ad:61:b5:
f1:71:74:2e:f0:6e:06:3d:1a:59:da:63:64:a6:9e:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:CF:3B:92:31:D2:83:18:33:F5:C2:E2:18:C0:C0:CE:7E:BB:24
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:83:21:67:c8:0d:fe:47:13:97:6a:3e:4e:9f:92:02:a6:67:
5a:c9:59:d1:2e:39:34:ec:2a:1f:fb:e2:d7:5d:a6:13:06:ea:
13:f7:e5:8e:fc:2f:a8:9a:56:6d:bf:c4:db:91:7a:49:5d:b7:
9c:55:cd:35:00:08:d3:3a:11:87:e3:09:bd:ca:d7:15:0a:8c:
10:25:1c:fc:b4:9a:b8:2d:fa:d6:5c:be:71:05:d3:86:92:61:
fc:7b:10:ba:20:20:20:94:81:c6:56:57:4b:83:53:25:33:05:
e9:79:0a:27:7e:2b:ea:d5:c9:a3:35:22:3f:a4:e8:0e:7b:3e:
71:e4:5d:82:a1:03:ba:bb:ca:4e:f9:1e:98:36:05:2e:04:da:
f2:ba:3a:c8:30:4c:17:ea:0a:c9:70:ba:6c:ff:41:9c:f0:1b:
24:f7:f1:03:b5:a9:b8:24:f4:58:5a:9e:52:be:bd:45:4a:37:
a1:1c:63:d1:e8:34:a2:b5:09:6d:92:2f:b2:d0:14:eb:04:b5:
b0:df:a3:c7:d8:17:b2:ce:af:d1:d9:17:66:4c:20:2d:c3:17:
7d:3b:43:08:19:4b:7d:24:b4:95:9a:3e:1a:68:e7:4e:9a:ff:
76:81:10:37:00:3d:44:a0:91:28:5c:5e:a8:2e:af:06:02:f9:
77:74:c7:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMlHEsqs8VD4cR5kX5Ky4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw
ZTk0MTgwHhcNMjYxMDA1MTUwMDE3WhcNMjYxMDA2MTUwMDE3WjAzMTEwLwYDVQQD
Eyg5YTljY2YzYjkyMzFkMjgzMTgzM2Y1YzJlMjE4YzBjMGNlN2ViYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXQsAxrf8+vbh2bvR4EkWnCm7n11
GI8QIRv+8J8gbUNUvSc3jyb0pd0dIZ8ZKjext/hpqpvW3gKbe7M02GDDsHNIuz2Z
Fp0Ef4rEKpOJZr0v8TSECF1BWHK2nJpl41VhiGDi11MsfAy5fa+iVkXro5KsAwSA
RGEhJ4Ad1ARjtSkmmwL7Qx7a4dscgu5qYOPsnxtvaCazTO5WbImtftbTXBaQDwJj
Z7rfeW8BYJFC62t88GJ/1Jo96hQerOG8bC8E0RjyX/j6Zhf/pP+/GzoQrBVXfAHz
i54KfRa9fxO9jTyQGvT813Nca3cDGuatYbXxcXQu8G4GPRpZ2mNkpp7OzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqczzuSMdKDGDP1wuIYwMDOfrskMB8GA1UdIwQY
MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt
NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx
LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4MhZ8gN
/kcTl2o+Tp+SAqZnWslZ0S45NOwqH/vi112mEwbqE/fljvwvqJpWbb/E25F6SV23
nFXNNQAI0zoRh+MJvcrXFQqMECUc/LSauC361ly+cQXThpJh/HsQuiAgIJSBxlZX
S4NTJTMF6XkKJ34r6tXJozUiP6ToDns+ceRdgqEDurvKTvkemDYFLgTa8ro6yDBM
F+oKyXC6bP9BnPAbJPfxA7WpuCT0WFqeUr69RUo3oRxj0eg0orUJbZIvstAU6wS1
sN+jx9gXss6v0dkXZkwgLcMXfTtDCBlLfSS0lZo+GmjnTpr/doEQNwA9RKCRKFxe
qC6vBgL5d3THVw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:48:03 2026 by rpki-client