Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
File: qMb9tmtdmLoA1OKngcNRTGUuc1s.mft (raw, json)
Hash identifier: 6cwpz429t2ELC9PZxwQLsFl+vhAVxSiqiTfP+yjAkAs=
Subject key identifier: A7:89:6B:E0:5C:B6:35:98:94:C6:E3:1E:A3:25:F7:EC:3F:6D:E1:6E
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 01A1DEA74004272E1D7D47A1E9DE28E2AA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
Manifest number: 0142
Signing time: Sun 15 Nov 2026 10:01:05 +0000
Manifest this update: Sun 15 Nov 2026 10:01:05 +0000
Manifest next update: Mon 16 Nov 2026 10:01:05 +0000
Files and hashes: 1: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (hash: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=)
2: qMb9tmtdmLoA1OKngcNRTGUuc1s.crl (hash: D24OXm8I4l2BFgJNTn6EqxUiMWH+pm4dHppPToQ6tNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:40:04:27:2e:1d:7d:47:a1:e9:de:28:e2:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Nov 15 10:01:05 2026 GMT
Not After : Nov 16 10:01:05 2026 GMT
Subject: CN=a7896be05cb6359894c6e31ea325f7ec3f6de16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:af:04:78:c9:62:a1:05:88:13:47:06:3a:
ad:5f:e1:4f:48:4e:af:71:e4:b2:6c:d1:a8:56:93:
a7:06:93:2f:3d:09:82:ae:27:b6:ce:b6:5f:b3:f3:
32:96:e5:da:54:15:42:cc:42:76:b2:45:b3:94:eb:
0b:4b:f7:7f:bb:9e:11:13:c5:c2:f4:4f:4f:d6:d5:
6e:71:cd:5d:72:b1:0e:fd:40:ed:6c:43:e1:5f:d3:
75:d0:ae:a7:e3:dc:56:1c:be:04:ad:c9:ed:fb:31:
b0:f7:2e:03:14:21:69:6c:e0:89:fc:85:37:79:f5:
55:45:d4:41:cc:a1:f6:93:22:9c:35:c7:10:17:4e:
d9:35:6a:65:8f:8d:ec:cc:73:e2:09:c1:93:40:e1:
c4:d6:e2:29:48:d8:fc:d2:43:d1:df:43:1a:d4:f7:
87:a1:db:84:94:d8:a6:c1:2d:f6:ff:57:1c:24:9a:
74:2d:f2:81:d2:e2:2b:a6:c7:90:d5:38:60:f9:0c:
3c:84:4a:3a:87:30:55:c5:01:5d:5b:9a:07:03:d3:
4f:7e:57:9a:db:fb:8d:93:4e:7e:0e:e6:ec:a7:85:
d2:16:ee:2b:0b:dc:c6:aa:a3:45:4b:94:84:01:1a:
ec:39:74:67:3b:c0:b3:28:19:8e:5c:59:d0:cd:05:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:6B:E0:5C:B6:35:98:94:C6:E3:1E:A3:25:F7:EC:3F:6D:E1:6E
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:09:cb:0a:1b:78:0d:55:02:68:c7:c4:62:c9:f2:e3:9d:fb:
55:28:fe:27:7a:aa:ef:f0:84:b2:fc:59:a7:0e:33:2c:de:b3:
ee:dc:6e:8a:37:d0:d5:ed:09:6c:03:47:a7:c8:7b:15:16:05:
c1:d6:ee:f5:11:a0:6b:c1:d5:df:ca:77:0e:aa:f9:af:39:8d:
23:df:bf:a2:fb:7a:44:79:ac:6e:85:55:c6:0d:a0:e8:44:27:
a8:50:db:c3:48:e8:b2:d3:aa:a6:99:b0:de:3b:1b:e3:26:a5:
21:dd:b3:5a:87:02:40:5a:b7:b7:27:53:5b:72:dc:8b:52:30:
2b:fe:d5:ed:43:32:63:95:08:cf:ce:10:0a:ea:31:f5:7e:6e:
d1:7a:ae:6e:2d:3d:74:d1:53:96:75:71:7e:4f:17:c2:f7:c9:
fe:6d:3d:89:c1:4c:67:ff:40:6d:d0:3e:60:55:07:55:02:e9:
c9:1f:44:b7:20:33:8d:25:71:e4:ec:d3:18:a2:ea:4a:e5:62:
be:ef:24:c3:a8:9e:d9:b7:8c:51:20:78:30:b5:77:54:c1:41:
77:b7:65:8c:4e:21:13:27:35:21:d4:db:62:fa:8c:ce:fe:d5:
f2:40:30:27:f6:d1:8e:00:90:1f:74:a8:1b:60:be:3d:d2:82:
20:d0:70:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep0AEJy4dfUeh6d4o4qoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZmZGI2NmI1ZDk4YmEwMGQ0ZTJhNzgxYzM1MTRjNjUy
ZTczNWIwHhcNMjYxMTE1MTAwMTA1WhcNMjYxMTE2MTAwMTA1WjAzMTEwLwYDVQQD
EyhhNzg5NmJlMDVjYjYzNTk4OTRjNmUzMWVhMzI1ZjdlYzNmNmRlMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8+vBHjJYqEFiBNHBjqtX+FPSE6v
ceSybNGoVpOnBpMvPQmCrie2zrZfs/MyluXaVBVCzEJ2skWzlOsLS/d/u54RE8XC
9E9P1tVucc1dcrEO/UDtbEPhX9N10K6n49xWHL4Ercnt+zGw9y4DFCFpbOCJ/IU3
efVVRdRBzKH2kyKcNccQF07ZNWplj43szHPiCcGTQOHE1uIpSNj80kPR30Ma1PeH
oduElNimwS32/1ccJJp0LfKB0uIrpseQ1Thg+Qw8hEo6hzBVxQFdW5oHA9NPflea
2/uNk05+Dubsp4XSFu4rC9zGqqNFS5SEARrsOXRnO8CzKBmOXFnQzQXpbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeJa+BctjWYlMbjHqMl9+w/beFuMB8GA1UdIwQY
MBaAFKjG/bZrXZi6ANTip4HDUUxlLnNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kODY1Y2ItYzY3NS00Nzg2LTkyNGQt
NDM4Mjg0NWQ1ZDBlLzEvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kODY1Y2ItYzY3NS00Nzg2LTkyNGQtNDM4Mjg0NWQ1ZDBl
LzEvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwnLCht4
DVUCaMfEYsny4537VSj+J3qq7/CEsvxZpw4zLN6z7txuijfQ1e0JbANHp8h7FRYF
wdbu9RGga8HV38p3Dqr5rzmNI9+/ovt6RHmsboVVxg2g6EQnqFDbw0jostOqppmw
3jsb4yalId2zWocCQFq3tydTW3Lci1IwK/7V7UMyY5UIz84QCuox9X5u0Xqubi09
dNFTlnVxfk8XwvfJ/m09icFMZ/9AbdA+YFUHVQLpyR9EtyAzjSVx5OzTGKLqSuVi
vu8kw6ie2beMUSB4MLV3VMFBd7dljE4hEyc1IdTbYvqMzv7V8kAwJ/bRjgCQH3So
G2C+PdKCINBwEw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:10:42 2026 by rpki-client