Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
File: Qj5ipcKoD99-poRT7-iin0H8IH0.mft (raw, json)
Hash identifier: nZlryMvva64i7CqnCvdUsguM5PZEzzwBxIx2LD8SRAc=
Subject key identifier: 1C:08:28:8D:5D:97:47:B3:1E:DE:62:EE:25:C6:61:25:39:6B:9C:A1
Authority key identifier: 42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
Certificate issuer: /CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Certificate serial: 01A12BB295AD697414D8ECF74DFAE48D4A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 16:01:26 +0000
Manifest this update: Sun 11 Oct 2026 16:01:26 +0000
Manifest next update: Mon 12 Oct 2026 16:01:26 +0000
Files and hashes: 1: Aj4QBwQL2uNoWKXRywa_DkLBxU8.roa (hash: AEwHfAxrbOcjeazAx/K/5vrZbUowV0UzX8EfJJIkJVk=)
2: Qj5ipcKoD99-poRT7-iin0H8IH0.crl (hash: GGhJ+agmzq1jT/0sA7kDVs98pKafL3nJB4n5V3op7ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:95:ad:69:74:14:d8:ec:f7:4d:fa:e4:8d:4a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Validity
Not Before: Oct 11 16:01:26 2026 GMT
Not After : Oct 12 16:01:26 2026 GMT
Subject: CN=1c08288d5d9747b31ede62ee25c66125396b9ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:1e:ba:b6:83:b5:2e:8e:57:e0:f2:bf:aa:
70:55:a7:d5:3a:8a:b7:b7:7c:76:be:2b:de:e1:3a:
25:ec:e6:a0:9d:98:72:ac:88:5f:cb:c6:57:6c:24:
99:a5:af:2a:18:f4:f3:24:fa:18:fb:25:0e:fb:f7:
f3:14:b4:1b:90:1c:a5:2d:5b:4a:ba:86:25:18:82:
0b:6c:a5:7b:b1:c2:40:a4:24:e0:c9:25:67:d6:d2:
d2:56:53:58:51:bf:04:4e:39:eb:2a:9b:0c:d9:91:
e0:d1:bb:26:41:63:9c:7f:ae:1f:21:08:0d:7d:e0:
48:5b:fc:f4:6f:3c:c5:22:55:53:f7:71:8c:6a:33:
d6:e4:44:db:ab:75:c8:59:70:32:7a:ab:d2:74:59:
b2:93:fe:59:b1:e2:2f:5b:9e:36:f3:d8:ad:3b:28:
a4:d8:9b:55:4c:83:1e:24:e8:27:4c:80:2d:a5:ff:
32:b0:6c:f4:04:50:28:8b:8e:c0:98:46:d3:2b:b3:
40:c3:f7:70:94:3a:7e:e5:9d:db:6f:20:03:5a:75:
3d:fa:84:98:fb:0c:22:cb:33:a3:b6:1c:39:5d:40:
49:b0:de:32:99:f9:84:2e:0b:40:bc:9d:2f:00:da:
ac:82:c7:00:ae:7b:64:e6:31:7e:78:2c:1d:72:79:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:28:8D:5D:97:47:B3:1E:DE:62:EE:25:C6:61:25:39:6B:9C:A1
X509v3 Authority Key Identifier:
keyid:42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:80:9e:8c:3d:8a:cb:c5:93:0c:e0:3c:7a:9e:64:3d:34:b4:
57:c9:cd:9a:d6:2c:5b:f1:63:aa:4d:35:15:a5:11:6f:24:8d:
ec:c9:18:f2:a2:b6:50:a8:e3:16:5f:a7:d7:c1:37:81:5a:0a:
4e:0f:de:8a:07:80:d9:ae:33:f8:b1:32:dc:40:d8:ce:b9:6d:
47:98:35:ce:e9:41:c5:36:d7:d2:99:a6:0c:27:8e:74:2b:7e:
99:79:bb:80:9b:9b:26:c5:83:87:3f:ba:8b:80:8c:96:12:1c:
91:61:38:ee:53:b8:1b:6a:b5:f6:1f:69:26:c8:a3:7a:04:75:
15:5b:52:ac:09:bc:fc:c6:5b:0a:61:a9:0f:f2:d0:d0:2a:21:
d6:4b:a7:35:f1:35:bd:27:51:83:8b:a7:9b:f6:eb:77:b5:d5:
69:ee:bb:17:27:b0:3f:c0:e7:00:23:c3:4b:e6:49:b1:eb:60:
92:f5:02:c2:e8:4b:46:54:ad:b1:7b:e5:47:ba:ff:8f:8d:03:
d3:eb:b6:8a:da:77:0c:7e:4f:2a:67:cf:6f:da:10:dc:ef:56:
a4:21:35:f5:e7:21:f9:87:1b:f5:91:c6:20:90:94:59:8f:a3:
f5:bc:ee:87:92:b8:88:b7:fa:35:c7:2e:c1:d5:6f:13:11:d0:
ad:3e:48:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErspWtaXQU2Oz3TfrkjUqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2U2MmE1YzJhODBmZGY3ZWE2ODQ1M2VmZThhMjlmNDFm
YzIwN2QwHhcNMjYxMDExMTYwMTI2WhcNMjYxMDEyMTYwMTI2WjAzMTEwLwYDVQQD
EygxYzA4Mjg4ZDVkOTc0N2IzMWVkZTYyZWUyNWM2NjEyNTM5NmI5Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP4euraDtS6OV+Dyv6pwVafVOoq3
t3x2vive4Tol7OagnZhyrIhfy8ZXbCSZpa8qGPTzJPoY+yUO+/fzFLQbkBylLVtK
uoYlGIILbKV7scJApCTgySVn1tLSVlNYUb8ETjnrKpsM2ZHg0bsmQWOcf64fIQgN
feBIW/z0bzzFIlVT93GMajPW5ETbq3XIWXAyeqvSdFmyk/5ZseIvW54289itOyik
2JtVTIMeJOgnTIAtpf8ysGz0BFAoi47AmEbTK7NAw/dwlDp+5Z3bbyADWnU9+oSY
+wwiyzOjthw5XUBJsN4ymfmELgtAvJ0vANqsgscArntk5jF+eCwdcnnp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwIKI1dl0ezHt5i7iXGYSU5a5yhMB8GA1UdIwQY
MBaAFEI+YqXCqA/ffqaEU+/oop9B/CB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWo1aXBjS29EOTktcG9SVDctaWluMEg4SUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct
Nzc5MTc1MmE5YzZlLzEvUWo1aXBjS29EOTktcG9SVDctaWluMEg4SUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl
LzEvUWo1aXBjS29EOTktcG9SVDctaWluMEg4SUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4CejD2K
y8WTDOA8ep5kPTS0V8nNmtYsW/Fjqk01FaURbySN7MkY8qK2UKjjFl+n18E3gVoK
Tg/eigeA2a4z+LEy3EDYzrltR5g1zulBxTbX0pmmDCeOdCt+mXm7gJubJsWDhz+6
i4CMlhIckWE47lO4G2q19h9pJsijegR1FVtSrAm8/MZbCmGpD/LQ0Coh1kunNfE1
vSdRg4unm/brd7XVae67FyewP8DnACPDS+ZJsetgkvUCwuhLRlStsXvlR7r/j40D
0+u2itp3DH5PKmfPb9oQ3O9WpCE19ech+Ycb9ZHGIJCUWY+j9bzuh5K4iLf6Nccu
wdVvExHQrT5IMw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:55:28 2026 by rpki-client