Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: lTHOCcxY3lKPn8oco3F6eWyGDMGtGrEgOC7RI2F0wEo=
Subject key identifier: DB:A5:27:2C:CE:B4:53:FC:DE:00:02:AD:CD:0E:18:EA:82:47:09:84
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 01A0F83267B72027EB177A6D8DA13EF0D119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0E45
Signing time: Thu 01 Oct 2026 16:00:47 +0000
Manifest this update: Thu 01 Oct 2026 16:00:47 +0000
Manifest next update: Fri 02 Oct 2026 16:00:47 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: Kb/fa9C7ULHvBQa+4W0bFUWtmBpQmw+bBTLVNz1xDmk=)
2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:32:67:b7:20:27:eb:17:7a:6d:8d:a1:3e:f0:d1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Oct 1 16:00:47 2026 GMT
Not After : Oct 2 16:00:47 2026 GMT
Subject: CN=dba5272cceb453fcde0002adcd0e18ea82470984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:b4:3f:9f:f9:2f:3b:9a:63:5d:8a:3c:a2:
f7:4e:e6:ae:45:1b:de:96:28:ff:80:a2:0c:51:71:
2c:5a:87:d8:5f:16:73:4a:d8:1b:57:ac:48:f6:7d:
89:b4:e2:23:43:25:1a:b4:d1:7f:c3:48:2c:73:ff:
ae:50:33:e2:7e:9f:02:47:99:43:48:56:ec:80:0f:
a3:71:19:e0:f5:88:8d:94:28:f4:dc:b1:f7:b1:15:
fa:00:78:e0:b1:ec:fc:b3:4a:70:f7:32:0e:48:aa:
d5:99:87:1a:6d:a9:81:64:67:b8:f3:32:1b:f4:56:
98:a4:ca:a1:c1:1c:95:5e:74:e1:b3:04:95:af:5e:
2f:d7:ee:7a:43:fb:37:71:7c:40:36:19:01:20:59:
a6:84:da:d8:9b:eb:47:25:be:0f:e9:8f:3e:6c:1e:
a6:e0:ba:76:25:d5:5c:b6:55:5a:62:ea:b2:ca:b3:
31:ea:dd:3e:f9:52:09:6e:64:1c:e0:0e:40:6c:05:
7f:cc:58:36:20:cc:70:92:d1:88:78:27:2a:bc:6a:
8d:6a:ff:7a:c0:77:f3:60:9c:27:05:6e:03:94:5f:
11:1e:79:9d:e8:06:a9:83:97:60:b0:9c:b4:f1:46:
c1:83:5d:38:5d:97:0a:dc:ce:e7:ec:0d:40:1b:f8:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:27:2C:CE:B4:53:FC:DE:00:02:AD:CD:0E:18:EA:82:47:09:84
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:21:f6:f0:49:05:b1:e1:9c:2b:30:ec:d1:3c:3f:9d:dc:71:
52:9a:ea:4a:aa:34:7f:3c:eb:6b:76:d2:e6:55:af:4d:94:08:
d9:cb:63:14:6c:de:ef:94:28:cf:e8:db:0f:1f:80:a6:dd:bb:
6a:85:07:21:6a:26:57:1b:10:c5:26:a8:0f:32:36:27:a7:71:
a6:46:63:40:c2:0d:73:4d:67:85:81:33:32:73:8d:66:90:e7:
58:50:68:73:14:64:6d:a6:9b:a1:a5:80:74:64:f6:c8:d8:66:
a4:bd:8b:d6:99:26:48:e8:17:5b:ce:04:ca:0e:b7:b6:99:af:
ed:28:34:55:a1:4c:e0:31:12:1e:9a:42:6a:d8:27:90:ff:e3:
7b:3b:d4:7f:2b:a1:5d:6a:31:4b:7d:6a:a6:62:f6:15:e3:63:
85:f4:72:ad:6c:5b:ca:45:54:8b:55:3e:73:95:90:09:3a:5c:
08:15:15:7a:2c:6e:c6:54:83:18:2c:9f:7f:c1:69:18:96:3a:
28:44:67:6c:ba:bc:53:21:a6:71:e7:b2:5b:cf:98:52:de:51:
ed:d3:05:6f:57:20:d5:c3:31:be:95:c6:88:86:e5:d7:3d:01:
d9:92:09:42:ec:4e:94:2c:8b:55:14:ab:24:c2:d1:d9:15:74:
07:7d:8b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4Mme3ICfrF3ptjaE+8NEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz
MDg3N2EwHhcNMjYxMDAxMTYwMDQ3WhcNMjYxMDAyMTYwMDQ3WjAzMTEwLwYDVQQD
EyhkYmE1MjcyY2NlYjQ1M2ZjZGUwMDAyYWRjZDBlMThlYTgyNDcwOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsa0P5/5LzuaY12KPKL3TuauRRve
lij/gKIMUXEsWofYXxZzStgbV6xI9n2JtOIjQyUatNF/w0gsc/+uUDPifp8CR5lD
SFbsgA+jcRng9YiNlCj03LH3sRX6AHjgsez8s0pw9zIOSKrVmYcabamBZGe48zIb
9FaYpMqhwRyVXnThswSVr14v1+56Q/s3cXxANhkBIFmmhNrYm+tHJb4P6Y8+bB6m
4Lp2JdVctlVaYuqyyrMx6t0++VIJbmQc4A5AbAV/zFg2IMxwktGIeCcqvGqNav96
wHfzYJwnBW4DlF8RHnmd6Aapg5dgsJy08UbBg104XZcK3M7n7A1AG/gtlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNulJyzOtFP83gACrc0OGOqCRwmEMB8GA1UdIwQY
MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt
NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux
LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0SH28EkF
seGcKzDs0Tw/ndxxUprqSqo0fzzra3bS5lWvTZQI2ctjFGze75Qoz+jbDx+Apt27
aoUHIWomVxsQxSaoDzI2J6dxpkZjQMINc01nhYEzMnONZpDnWFBocxRkbaaboaWA
dGT2yNhmpL2L1pkmSOgXW84Eyg63tpmv7Sg0VaFM4DESHppCatgnkP/jezvUfyuh
XWoxS31qpmL2FeNjhfRyrWxbykVUi1U+c5WQCTpcCBUVeixuxlSDGCyff8FpGJY6
KERnbLq8UyGmceeyW8+YUt5R7dMFb1cg1cMxvpXGiIbl1z0B2ZIJQuxOlCyLVRSr
JMLR2RV0B32LUg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 23:27:50 2026 by rpki-client