Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: qBYJcv+mxF9xxmqiE2EtK7eurqs2v2UJV1/8+Dgfikk=
Subject key identifier: 6A:D9:7F:EC:A5:30:9C:4B:62:5F:03:E8:B8:68:2F:04:07:DE:94:B6
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 01A0D8045570591228113DCCF3EF3EC1C601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0B7A
Signing time: Fri 25 Sep 2026 10:02:37 +0000
Manifest this update: Fri 25 Sep 2026 10:02:37 +0000
Manifest next update: Sat 26 Sep 2026 10:02:37 +0000
Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: gQZBHgCMI2DkSXfb3H9X2jdcl7RvFdArjTGlvuhd5BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:55:70:59:12:28:11:3d:cc:f3:ef:3e:c1:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Sep 25 10:02:37 2026 GMT
Not After : Sep 26 10:02:37 2026 GMT
Subject: CN=6ad97feca5309c4b625f03e8b8682f0407de94b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:28:34:f9:7a:4e:59:16:53:49:d4:98:4f:
54:ba:25:d2:e1:92:ba:34:e1:02:a2:27:6e:d9:4c:
3e:c6:fe:44:c0:fc:17:4d:4f:61:bc:5b:0a:c2:92:
5a:20:28:5a:1a:39:fe:64:8b:71:d3:93:b5:9d:2a:
1b:b9:2e:1e:e2:79:5f:ab:0c:5b:bb:c5:69:45:d3:
6d:75:3a:61:ff:99:e5:e0:94:ba:06:f3:e6:d7:b0:
72:67:80:b0:06:c3:61:84:b7:8a:35:fd:29:e2:35:
5b:1b:ef:0b:5f:ef:30:92:1b:10:5a:dd:88:03:6e:
73:ad:a0:17:8f:1e:16:0d:06:c5:dd:8e:16:01:02:
f6:03:b2:11:35:70:74:11:00:ea:c9:bc:3e:b2:fb:
3a:81:d5:d9:3e:5d:3d:fd:dc:5e:09:44:e7:df:35:
c7:ec:38:00:f5:7d:27:b8:a6:e1:ec:36:ef:9e:7b:
dc:de:cd:cc:99:d5:d5:ef:50:a2:ae:7c:83:7e:f3:
de:3a:e9:ef:54:56:73:eb:35:51:a3:9b:36:64:14:
74:da:46:77:b5:54:37:f2:30:d6:5c:7f:73:5e:af:
6d:68:84:46:6a:0a:49:25:ff:f1:c6:d7:b7:01:64:
19:f5:e2:b8:4e:d7:80:09:1e:6a:e7:fd:f8:3a:ed:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:7F:EC:A5:30:9C:4B:62:5F:03:E8:B8:68:2F:04:07:DE:94:B6
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:07:78:f3:bf:02:f9:f8:a9:37:c8:e3:7f:48:f3:83:f9:0c:
51:18:5d:49:c7:24:ef:7e:76:50:26:02:4d:c4:5e:ac:cb:28:
24:2a:cd:04:4a:46:ce:cc:74:fd:88:f7:9f:4c:08:b2:40:1c:
d2:d3:32:de:11:21:d4:8d:06:5f:42:23:45:60:3f:1c:f1:46:
bf:14:7f:ee:5d:74:56:2b:fb:31:44:42:dc:a4:cc:de:53:33:
81:34:27:c8:b1:e9:c6:e7:27:7a:11:e4:25:f1:5f:0a:c7:9c:
75:f9:cb:d0:c5:6f:77:62:8f:bd:2e:b8:c4:2b:ca:8d:d1:65:
6f:65:0d:f3:8a:1b:6d:e6:c8:ef:a2:a2:3f:aa:62:57:b6:85:
7b:d1:0a:80:3d:89:4c:5c:a2:26:f8:b3:01:0f:db:a8:2e:5b:
01:33:1e:35:cd:29:25:e2:0f:84:43:10:30:d0:be:aa:e5:f6:
24:82:e4:ea:f1:52:b8:52:18:ce:67:bd:74:c3:31:c5:8f:76:
62:28:03:ad:46:b3:a3:0f:61:51:ec:24:99:b0:d5:d3:55:cb:
c5:4d:aa:64:5d:2c:f0:3a:3b:6c:49:22:67:8d:14:eb:d8:bd:
b3:51:bf:83:db:a4:f5:a7:c7:78:41:70:d7:fb:7a:0a:bb:41:
ef:3c:f2:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBFVwWRIoET3M8+8+wcYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDZiMTcxMjMzZjIwYjM3ZTYxYTNhMWZmNTllYTU1M2Jj
ZjIxZDMwHhcNMjYwOTI1MTAwMjM3WhcNMjYwOTI2MTAwMjM3WjAzMTEwLwYDVQQD
Eyg2YWQ5N2ZlY2E1MzA5YzRiNjI1ZjAzZThiODY4MmYwNDA3ZGU5NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP8oNPl6TlkWU0nUmE9UuiXS4ZK6
NOECoidu2Uw+xv5EwPwXTU9hvFsKwpJaIChaGjn+ZItx05O1nSobuS4e4nlfqwxb
u8VpRdNtdTph/5nl4JS6BvPm17ByZ4CwBsNhhLeKNf0p4jVbG+8LX+8wkhsQWt2I
A25zraAXjx4WDQbF3Y4WAQL2A7IRNXB0EQDqybw+svs6gdXZPl09/dxeCUTn3zXH
7DgA9X0nuKbh7Dbvnnvc3s3MmdXV71CirnyDfvPeOunvVFZz6zVRo5s2ZBR02kZ3
tVQ38jDWXH9zXq9taIRGagpJJf/xxte3AWQZ9eK4TteACR5q5/34Ou1Q/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrZf+ylMJxLYl8D6LhoLwQH3pS2MB8GA1UdIwQY
MBaAFKnWsXEjPyCzfmGjof9Z6lU7zyHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQt
MDk1ZGNlMGUwMTllLzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQtMDk1ZGNlMGUwMTll
LzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAd4878C
+fipN8jjf0jzg/kMURhdScck7352UCYCTcRerMsoJCrNBEpGzsx0/Yj3n0wIskAc
0tMy3hEh1I0GX0IjRWA/HPFGvxR/7l10Viv7MURC3KTM3lMzgTQnyLHpxucnehHk
JfFfCsecdfnL0MVvd2KPvS64xCvKjdFlb2UN84obbebI76KiP6piV7aFe9EKgD2J
TFyiJvizAQ/bqC5bATMeNc0pJeIPhEMQMNC+quX2JILk6vFSuFIYzme9dMMxxY92
YigDrUazow9hUewkmbDV01XLxU2qZF0s8Do7bEkiZ40U69i9s1G/g9uk9afHeEFw
1/t6CrtB7zzyWA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:44:11 2026 by rpki-client