Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
File: qQhIeg1_TGIo0NzBKaKoMg242_E.mft (raw, json)
Hash identifier: 310675/YPH/GDoxDm6MJmX2Rz0EGyMkn5rb50PRpUvc=
Subject key identifier: 0D:9E:E9:49:B4:4D:43:C0:9B:5A:81:16:C7:89:63:A8:65:BD:78:52
Authority key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Certificate issuer: /CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Certificate serial: 01A0D048D8EB9F8EF973FE5606621D585534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
Manifest number: 2E
Signing time: Wed 23 Sep 2026 22:00:30 +0000
Manifest this update: Wed 23 Sep 2026 22:00:30 +0000
Manifest next update: Thu 24 Sep 2026 22:00:30 +0000
Files and hashes: 1: 1d-v5UPcBJhyCd2pyPy5E0gynEw.roa (hash: 0Ks7OWy4fQ6txceig4Bqr/8jiGLEXTtFfCjk7QRIjoA=)
2: dIMwJtrv09wJ_HCOoXJcE_rOxVo.asa (hash: paYNUqYIys6Nx3Xe4ebAhqNGHaC2aNSP1Rw6N+AbV08=)
3: qQhIeg1_TGIo0NzBKaKoMg242_E.crl (hash: bOIYQX84XhkU3SQtmdHaYm3syK+WVjU5BSMKpAbdedk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:d8:eb:9f:8e:f9:73:fe:56:06:62:1d:58:55:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Validity
Not Before: Sep 23 22:00:30 2026 GMT
Not After : Sep 24 22:00:30 2026 GMT
Subject: CN=0d9ee949b44d43c09b5a8116c78963a865bd7852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:84:c0:fd:40:ab:a8:fe:95:13:32:aa:94:
0a:9d:7f:da:9e:f5:0d:c7:da:5e:56:d4:5f:e2:d3:
6f:83:ec:38:02:f8:ba:f2:c9:8b:41:62:87:3e:13:
4f:fa:5b:59:f3:7e:ec:61:d4:83:94:ad:a7:14:04:
6a:9c:12:7a:76:09:fa:3a:82:b1:c1:49:8c:45:2d:
b3:fa:05:8f:84:97:8a:c6:a0:83:a4:3e:44:7a:5b:
db:77:eb:25:97:a9:f1:13:6f:6f:8d:17:3b:55:97:
03:6f:21:68:99:82:25:11:db:be:50:8b:4a:43:fa:
28:3c:b6:8d:04:17:19:25:68:7b:e8:22:e3:72:4f:
f8:01:35:94:f0:cf:10:62:41:16:05:c5:c2:3b:3b:
0b:c4:7e:72:1f:6f:27:2f:21:2e:b3:57:88:8e:1b:
ee:2e:2e:3d:67:48:e6:f7:75:7d:1d:fb:36:92:bc:
97:6d:ce:a3:11:73:bb:92:ad:96:16:8a:15:c2:8b:
0f:11:1c:6a:0c:ac:70:c2:9c:31:5f:c3:cd:6d:74:
4e:82:24:f6:1d:41:28:67:41:83:ac:41:82:1d:7f:
1c:21:f8:f8:26:d0:e1:c0:4c:bf:d8:d8:e1:ac:43:
72:e3:1e:1d:0f:38:60:73:44:b0:ba:d2:10:28:3a:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9E:E9:49:B4:4D:43:C0:9B:5A:81:16:C7:89:63:A8:65:BD:78:52
X509v3 Authority Key Identifier:
keyid:A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:6d:c4:bd:64:5f:c5:b7:64:06:97:fc:8b:59:65:26:ee:
7f:ed:e5:2f:84:4b:8e:83:75:84:f1:c6:4c:3e:a9:d9:84:c3:
eb:67:db:79:53:1f:1d:e0:4f:c6:ff:ca:d5:71:18:02:64:be:
28:b8:40:53:a8:42:1a:05:c1:2c:98:79:4a:83:3a:3d:0e:c4:
29:f6:fb:8b:bd:a8:cc:ab:b1:27:6c:fc:7f:81:87:f2:cc:7f:
80:75:56:e1:49:31:50:ca:1e:f3:1f:dd:a3:1b:43:80:e0:c7:
ac:5d:02:70:b3:e0:d5:5d:cb:9b:cf:7c:77:0b:5f:7b:99:ca:
8b:71:ad:1f:82:b9:79:fd:bf:26:61:b1:09:5a:ce:94:4d:71:
0f:fc:f0:a0:ac:ad:8c:53:73:b2:b6:c9:b5:2f:99:1f:ec:47:
86:a7:f5:41:8c:00:ae:1a:f7:3e:1f:37:7b:bd:89:5e:81:34:
37:23:fd:ed:c4:57:93:dc:f8:75:c8:f1:e0:63:0e:40:11:03:
42:98:d9:30:c2:70:c1:62:33:35:59:70:24:7d:30:84:f6:24:
ea:59:d0:96:00:61:2b:ca:ad:6a:63:a8:31:c9:48:5a:c5:01:
16:eb:b6:24:99:c3:11:39:a8:14:af:e0:f5:b7:eb:24:5f:6e:
a2:5d:f2:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSNjrn475c/5WBmIdWFU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDg0ODdhMGQ3ZjRjNjIyOGQwZGNjMTI5YTJhODMyMGRi
OGRiZjEwHhcNMjYwOTIzMjIwMDMwWhcNMjYwOTI0MjIwMDMwWjAzMTEwLwYDVQQD
EygwZDllZTk0OWI0NGQ0M2MwOWI1YTgxMTZjNzg5NjNhODY1YmQ3ODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTGEwP1Aq6j+lRMyqpQKnX/anvUN
x9peVtRf4tNvg+w4Avi68smLQWKHPhNP+ltZ837sYdSDlK2nFARqnBJ6dgn6OoKx
wUmMRS2z+gWPhJeKxqCDpD5Eelvbd+sll6nxE29vjRc7VZcDbyFomYIlEdu+UItK
Q/ooPLaNBBcZJWh76CLjck/4ATWU8M8QYkEWBcXCOzsLxH5yH28nLyEus1eIjhvu
Li49Z0jm93V9Hfs2kryXbc6jEXO7kq2WFooVwosPERxqDKxwwpwxX8PNbXROgiT2
HUEoZ0GDrEGCHX8cIfj4JtDhwEy/2NjhrENy4x4dDzhgc0SwutIQKDrLQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2e6Um0TUPAm1qBFseJY6hlvXhSMB8GA1UdIwQY
MBaAFKkISHoNf0xiKNDcwSmiqDINuNvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFoSWVnMV9UR0lvME56QkthS29NZzI0Ml9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZGJkYzctZjdkYi00NmEzLWE4ZTMt
ZTU4MDAwYTkzYjIxLzEvcVFoSWVnMV9UR0lvME56QkthS29NZzI0Ml9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lZGJkYzctZjdkYi00NmEzLWE4ZTMtZTU4MDAwYTkzYjIx
LzEvcVFoSWVnMV9UR0lvME56QkthS29NZzI0Ml9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlhtxL1k
X8W3ZAaX/ItZZSbuf+3lL4RLjoN1hPHGTD6p2YTD62fbeVMfHeBPxv/K1XEYAmS+
KLhAU6hCGgXBLJh5SoM6PQ7EKfb7i72ozKuxJ2z8f4GH8sx/gHVW4UkxUMoe8x/d
oxtDgODHrF0CcLPg1V3Lm898dwtfe5nKi3GtH4K5ef2/JmGxCVrOlE1xD/zwoKyt
jFNzsrbJtS+ZH+xHhqf1QYwArhr3Ph83e72JXoE0NyP97cRXk9z4dcjx4GMOQBED
QpjZMMJwwWIzNVlwJH0whPYk6lnQlgBhK8qtamOoMclIWsUBFuu2JJnDETmoFK/g
9bfrJF9uol3yaQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:45:41 2026 by rpki-client