Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: C5uhQB3Vs7oV2E+AlnpDGRN7qgEFxlnfFdJknWKDs0Q=
Subject key identifier: DA:40:8A:F6:F8:F1:C0:11:B8:AA:E8:15:69:A8:02:D3:79:2C:95:36
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 01A0E69A324C97845193D560FBBFF14F85D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1A1B
Signing time: Mon 28 Sep 2026 06:01:00 +0000
Manifest this update: Mon 28 Sep 2026 06:01:00 +0000
Manifest next update: Tue 29 Sep 2026 06:01:00 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: rNGpAgPInHGbuZKcqzqrhDXNLCEQrGcTOnE+gzb2yN0=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:32:4c:97:84:51:93:d5:60:fb:bf:f1:4f:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Sep 28 06:01:00 2026 GMT
Not After : Sep 29 06:01:00 2026 GMT
Subject: CN=da408af6f8f1c011b8aae81569a802d3792c9536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:23:fc:07:34:c8:cd:35:53:3a:66:e5:64:
6a:38:4c:f0:71:69:a0:be:66:5d:6a:39:0f:f0:cb:
ca:03:99:80:3c:01:63:0c:dc:dc:35:4b:65:31:86:
92:16:b1:57:bb:f7:36:5c:a7:d8:fe:cb:b5:40:20:
10:d4:78:f7:db:91:ce:42:f6:ac:a5:d6:de:e2:06:
5e:f5:09:ab:bb:eb:bd:d9:8f:8a:f0:de:30:e9:9b:
4c:19:3d:80:db:5e:08:5f:86:83:41:0f:c7:29:ce:
de:8f:76:db:c4:97:0b:b8:02:e9:8e:fd:0c:06:60:
c5:71:26:54:d0:2b:28:eb:97:4b:f7:c7:ba:82:9f:
1e:9b:42:1f:f0:b9:d8:34:0f:e9:a0:5e:03:69:41:
db:d6:bc:c2:fc:97:ae:fa:83:d9:a4:75:da:90:94:
42:70:51:aa:10:4d:1b:cf:dd:f3:f2:32:55:b8:16:
2c:6f:2f:e1:99:5d:b0:21:c5:25:e0:6c:43:08:0b:
dc:c3:ea:ec:17:4a:e1:cb:d1:54:1a:05:06:0b:a1:
ad:fa:b4:69:96:50:96:72:db:12:3f:d6:4e:f2:b3:
ca:fb:21:b9:d0:b1:54:e5:c9:66:c8:a3:48:8b:e8:
f4:44:0b:48:f1:31:18:f0:0d:72:3e:c2:f8:fa:6e:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:8A:F6:F8:F1:C0:11:B8:AA:E8:15:69:A8:02:D3:79:2C:95:36
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5b:00:b7:93:fe:79:a9:c3:3a:eb:5d:45:ff:02:a7:78:e9:
bb:97:08:61:f5:dd:3e:84:04:c7:01:d5:6a:80:ae:bf:3c:97:
14:af:d3:f5:aa:fc:91:66:8b:b8:e4:fe:70:f4:91:08:f0:cc:
35:40:86:f5:0c:e5:1b:69:5e:1c:24:c3:47:12:d8:b2:37:e2:
ef:e7:ef:d0:7c:e6:c3:ca:e3:46:2e:06:7c:13:61:56:66:42:
24:82:3f:7d:6f:00:b0:7d:57:7a:f7:64:e0:48:5b:f6:39:72:
42:42:7f:d9:ba:d4:74:45:ca:55:43:0d:51:1e:2f:a5:f9:37:
40:57:89:c8:64:05:d4:e0:10:ee:c3:13:93:16:69:7e:93:d9:
f5:f7:97:6d:db:4f:08:ee:70:53:fc:71:98:b6:f1:bc:52:dc:
67:10:fe:d5:a7:a3:e1:a3:64:5a:3c:64:23:b6:8b:b4:53:e8:
66:1c:c7:38:79:f1:93:43:2f:1f:60:b7:57:66:f3:f6:42:37:
7d:f7:40:46:c8:40:c3:ee:9e:a9:dc:1e:a5:7b:50:bb:48:98:
49:b8:8b:43:f1:a4:ed:4f:88:df:54:47:1b:0f:1d:05:01:11:
54:83:ae:81:77:70:f6:f3:41:ca:45:fc:49:d8:11:d3:29:07:
ae:c7:7a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDmmjJMl4RRk9Vg+7/xT4XTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl
YjE5Y2MwHhcNMjYwOTI4MDYwMTAwWhcNMjYwOTI5MDYwMTAwWjAzMTEwLwYDVQQD
EyhkYTQwOGFmNmY4ZjFjMDExYjhhYWU4MTU2OWE4MDJkMzc5MmM5NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBQj/Ac0yM01Uzpm5WRqOEzwcWmg
vmZdajkP8MvKA5mAPAFjDNzcNUtlMYaSFrFXu/c2XKfY/su1QCAQ1Hj325HOQvas
pdbe4gZe9Qmru+u92Y+K8N4w6ZtMGT2A214IX4aDQQ/HKc7ej3bbxJcLuALpjv0M
BmDFcSZU0Cso65dL98e6gp8em0If8LnYNA/poF4DaUHb1rzC/Jeu+oPZpHXakJRC
cFGqEE0bz93z8jJVuBYsby/hmV2wIcUl4GxDCAvcw+rsF0rhy9FUGgUGC6Gt+rRp
llCWctsSP9ZO8rPK+yG50LFU5clmyKNIi+j0RAtI8TEY8A1yPsL4+m73nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpAivb48cARuKroFWmoAtN5LJU2MB8GA1UdIwQY
MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt
MGEwNjlkZWMxMDBhLzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh
LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFsAt5P+
eanDOutdRf8Cp3jpu5cIYfXdPoQExwHVaoCuvzyXFK/T9ar8kWaLuOT+cPSRCPDM
NUCG9QzlG2leHCTDRxLYsjfi7+fv0Hzmw8rjRi4GfBNhVmZCJII/fW8AsH1Xevdk
4Ehb9jlyQkJ/2brUdEXKVUMNUR4vpfk3QFeJyGQF1OAQ7sMTkxZpfpPZ9feXbdtP
CO5wU/xxmLbxvFLcZxD+1aej4aNkWjxkI7aLtFPoZhzHOHnxk0MvH2C3V2bz9kI3
ffdARshAw+6eqdwepXtQu0iYSbiLQ/Gk7U+I31RHGw8dBQERVIOugXdw9vNBykX8
SdgR0ykHrsd6xQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:05:38 2026 by rpki-client