Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
File: qMb9tmtdmLoA1OKngcNRTGUuc1s.mft (raw, json)
Hash identifier: ciLjUFiNIjuqUpNIz8/o52MLlTUzthl3OWbhizVOgW0=
Subject key identifier: 83:4A:9D:28:65:EA:AB:9E:0C:93:DE:F8:4E:78:3E:3D:9A:78:11:5C
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 01A0D23791025D761CBB3ED2783A6D4EDCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
Manifest number: B7
Signing time: Thu 24 Sep 2026 07:00:51 +0000
Manifest this update: Thu 24 Sep 2026 07:00:51 +0000
Manifest next update: Fri 25 Sep 2026 07:00:51 +0000
Files and hashes: 1: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (hash: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=)
2: qMb9tmtdmLoA1OKngcNRTGUuc1s.crl (hash: VHGcelFKGnyGTZfjQYvyWNlQps+P4RDtnI4kQF93Mxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:91:02:5d:76:1c:bb:3e:d2:78:3a:6d:4e:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Sep 24 07:00:51 2026 GMT
Not After : Sep 25 07:00:51 2026 GMT
Subject: CN=834a9d2865eaab9e0c93def84e783e3d9a78115c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:2f:86:dc:cd:2b:34:af:5e:c4:90:18:a3:
70:47:1b:1a:be:54:7f:66:9e:25:ae:27:d4:15:38:
b1:96:e5:eb:a3:05:8f:fc:85:ec:6b:7b:26:7f:34:
8b:89:55:d2:ab:54:92:4c:42:33:95:9d:02:a1:0c:
c5:eb:9d:90:4d:b5:4b:89:55:04:dd:02:fa:a3:f0:
30:0f:f6:b0:f8:2a:fa:97:09:e7:e8:14:43:61:82:
34:ae:9e:2f:bf:d4:30:e3:17:e2:43:15:19:ea:ad:
86:eb:6f:ff:00:62:8d:a8:e0:27:c6:13:6d:ce:38:
e5:d4:33:fd:3e:76:9f:ae:cc:83:e3:cb:ee:75:91:
17:52:8e:db:3c:94:1a:91:77:60:76:cd:2a:69:6e:
7f:c2:86:a9:c7:ed:d4:17:d6:29:ab:ee:9e:b0:a1:
34:f7:50:8c:09:4d:be:7a:a3:88:b4:6d:ba:c1:c6:
cb:5c:77:74:4a:4b:cd:a5:e1:52:c0:08:63:b5:56:
30:5b:b5:57:43:97:01:19:83:79:b3:8a:cc:37:a6:
d6:2a:b0:23:4d:30:46:08:0b:f1:4f:76:00:01:49:
48:39:87:2e:59:65:1b:7c:17:0f:41:d5:c8:a0:59:
e6:9f:9f:38:1a:32:a4:3b:60:8b:59:4f:fa:a1:5b:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:9D:28:65:EA:AB:9E:0C:93:DE:F8:4E:78:3E:3D:9A:78:11:5C
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f0:10:d3:e4:1a:e3:44:de:19:90:a0:d2:67:04:b8:5a:81:
42:15:38:cc:de:47:58:56:25:bf:e4:1e:3b:9b:7c:44:e8:f9:
11:5d:d1:ef:a4:19:6d:ae:38:14:96:1b:9a:a9:9f:bb:7f:8c:
0a:4e:fe:21:83:f6:3c:54:bd:2a:f5:13:2e:8d:54:1f:ef:54:
11:32:2b:8c:ee:53:8e:38:33:67:92:6d:d9:f8:a6:38:e8:ef:
1c:67:47:a6:18:cd:d7:c8:d6:41:b7:94:f2:ee:bc:f5:72:59:
a1:36:ba:8e:7e:b3:ad:36:f3:84:b9:75:c2:f0:b5:1b:b7:28:
52:45:df:5e:14:c9:f2:fd:d2:9a:2d:aa:21:ae:eb:c5:84:c1:
ee:72:48:14:6d:b9:06:d9:4c:65:04:4f:eb:fc:2b:46:49:21:
2a:16:c6:d7:c6:55:c7:6e:a1:89:24:a7:c9:f4:a8:dd:a2:59:
d8:de:3c:f9:cf:d6:ec:95:9a:c2:0d:26:34:cd:ab:73:d9:c1:
8c:fe:1a:7b:2b:56:97:eb:6a:87:98:73:ae:bf:50:d0:bb:5f:
45:9a:07:66:61:6f:4d:b4:d5:5b:8c:0c:c5:7d:dd:a6:fd:25:
66:1d:3f:cb:10:8d:23:61:ae:48:99:e8:0a:f4:36:65:8f:be:
07:6a:10:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSN5ECXXYcuz7SeDptTtz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZmZGI2NmI1ZDk4YmEwMGQ0ZTJhNzgxYzM1MTRjNjUy
ZTczNWIwHhcNMjYwOTI0MDcwMDUxWhcNMjYwOTI1MDcwMDUxWjAzMTEwLwYDVQQD
Eyg4MzRhOWQyODY1ZWFhYjllMGM5M2RlZjg0ZTc4M2UzZDlhNzgxMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u0vhtzNKzSvXsSQGKNwRxsavlR/
Zp4lrifUFTixluXrowWP/IXsa3smfzSLiVXSq1SSTEIzlZ0CoQzF652QTbVLiVUE
3QL6o/AwD/aw+Cr6lwnn6BRDYYI0rp4vv9Qw4xfiQxUZ6q2G62//AGKNqOAnxhNt
zjjl1DP9PnafrsyD48vudZEXUo7bPJQakXdgds0qaW5/woapx+3UF9Ypq+6esKE0
91CMCU2+eqOItG26wcbLXHd0SkvNpeFSwAhjtVYwW7VXQ5cBGYN5s4rMN6bWKrAj
TTBGCAvxT3YAAUlIOYcuWWUbfBcPQdXIoFnmn584GjKkO2CLWU/6oVt/5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINKnShl6queDJPe+E54Pj2aeBFcMB8GA1UdIwQY
MBaAFKjG/bZrXZi6ANTip4HDUUxlLnNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kODY1Y2ItYzY3NS00Nzg2LTkyNGQt
NDM4Mjg0NWQ1ZDBlLzEvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kODY1Y2ItYzY3NS00Nzg2LTkyNGQtNDM4Mjg0NWQ1ZDBl
LzEvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/AQ0+Qa
40TeGZCg0mcEuFqBQhU4zN5HWFYlv+QeO5t8ROj5EV3R76QZba44FJYbmqmfu3+M
Ck7+IYP2PFS9KvUTLo1UH+9UETIrjO5TjjgzZ5Jt2fimOOjvHGdHphjN18jWQbeU
8u689XJZoTa6jn6zrTbzhLl1wvC1G7coUkXfXhTJ8v3Smi2qIa7rxYTB7nJIFG25
BtlMZQRP6/wrRkkhKhbG18ZVx26hiSSnyfSo3aJZ2N48+c/W7JWawg0mNM2rc9nB
jP4aeytWl+tqh5hzrr9Q0LtfRZoHZmFvTbTVW4wMxX3dpv0lZh0/yxCNI2GuSJno
CvQ2ZY++B2oQsg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:43:14 2026 by rpki-client