Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
File: qZqHY_p1CetPmwhGtYXUhz6xHDk.mft (raw, json)
Hash identifier: wzzVUB0xWkSOwuNhcU6da2SkGQQr3cxguxe5GUlg1QU=
Subject key identifier: 61:7C:1F:6F:44:7C:37:6F:F3:68:04:AE:08:77:DC:CF:2A:D0:0C:25
Authority key identifier: A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
Certificate issuer: /CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Certificate serial: 01A1242FC6DEF6BFD8305631A37C858F0177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
Manifest number: B1
Signing time: Sat 10 Oct 2026 05:01:13 +0000
Manifest this update: Sat 10 Oct 2026 05:01:13 +0000
Manifest next update: Sun 11 Oct 2026 05:01:13 +0000
Files and hashes: 1: 07HgvTpzt_I3I4EOcFJZcLyN3gk.roa (hash: 2KLYAgLwlLD1ziStycUNwOuuTXGCU8iVgQkazsIAxM8=)
2: qZqHY_p1CetPmwhGtYXUhz6xHDk.crl (hash: IF2jI3qDIRXN+q2vS22PLM2a3dIb5S+iKS5Q72goMV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:c6:de:f6:bf:d8:30:56:31:a3:7c:85:8f:01:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Validity
Not Before: Oct 10 05:01:13 2026 GMT
Not After : Oct 11 05:01:13 2026 GMT
Subject: CN=617c1f6f447c376ff36804ae0877dccf2ad00c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:7f:11:a1:c5:80:a7:60:75:b2:84:a9:48:
87:6a:e3:47:40:33:9a:ae:c9:e4:8f:0b:8b:ca:fe:
77:0d:ba:bf:91:41:58:f1:16:82:d0:23:52:2d:59:
72:e1:e2:15:f6:f9:08:11:9b:33:d1:e4:a5:e6:8b:
29:fc:99:f1:5e:68:ca:2e:42:d3:33:f5:6b:b9:c6:
ee:19:d4:ef:51:6c:d0:f3:a5:c1:40:a3:99:98:d6:
7c:c0:04:32:23:e3:ff:93:4c:53:ed:97:95:0d:4c:
95:a4:dc:a4:34:ae:1d:1c:b2:47:56:b8:84:fd:7e:
13:8b:c2:52:8b:b7:92:d6:41:ed:04:c7:67:1f:dc:
7b:bc:18:63:25:3f:c2:4f:31:9b:de:fd:93:6b:0c:
29:74:bc:1e:26:e6:58:6f:4f:f9:e8:f9:63:2f:a3:
8c:7d:2f:cc:bc:b5:31:04:46:a9:6c:6c:7a:74:f4:
02:06:83:9f:aa:7d:41:08:3e:23:44:bc:56:cf:df:
43:73:fa:3f:a1:1a:42:bd:f5:f6:0d:9d:a5:f6:99:
59:ef:e6:aa:7d:23:bd:82:4b:95:20:83:bd:ca:67:
a3:05:4a:8c:ea:71:b8:ac:0f:5c:d1:3a:ad:e9:3e:
9f:84:75:78:aa:af:ee:4a:73:dd:70:4f:f0:47:3e:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7C:1F:6F:44:7C:37:6F:F3:68:04:AE:08:77:DC:CF:2A:D0:0C:25
X509v3 Authority Key Identifier:
keyid:A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2b:bd:a1:f7:c1:e8:af:c7:da:1a:52:79:2a:44:1c:c4:71:
c4:1b:1e:14:0f:88:48:20:b8:2f:63:ef:4e:9e:12:b8:ab:ed:
8b:e3:1b:9e:fc:fd:9d:83:38:69:e3:53:0a:da:fe:50:ab:c3:
cf:92:65:94:fb:72:7c:4d:fa:3c:99:e6:f0:0f:9c:80:0c:41:
0a:b9:34:48:29:1b:d2:79:f2:49:59:85:c6:90:ad:38:9a:77:
12:b0:c0:a4:8e:59:c4:07:56:0a:4f:a5:ee:ae:a7:49:c9:fa:
4a:e2:5f:be:4e:5c:19:40:a2:8a:05:2c:f0:aa:5b:7b:d6:42:
4e:3d:85:25:54:ba:d7:32:45:ff:35:e1:ed:10:f5:06:df:3e:
89:d5:e1:19:de:40:1a:a9:8b:a4:12:a6:b2:b2:3c:d5:e2:b7:
3f:4e:46:50:fb:e5:30:9a:42:a8:e9:26:2c:26:9d:91:a7:a6:
04:1e:3c:7a:d9:2a:61:01:3f:e8:b2:45:17:36:00:10:ab:4e:
43:79:e2:9e:a6:39:c8:7b:94:8c:25:f6:92:1e:79:3a:bf:35:
be:8d:56:90:12:d7:b3:0e:90:62:70:a4:21:f2:bd:60:90:86:
e2:2b:75:7a:91:31:7a:e4:01:e0:ad:58:5e:b4:1c:7a:eb:2d:
48:b6:1b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEkL8be9r/YMFYxo3yFjwF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OWE4NzYzZmE3NTA5ZWI0ZjliMDg0NmI1ODVkNDg3M2Vi
MTFjMzkwHhcNMjYxMDEwMDUwMTEzWhcNMjYxMDExMDUwMTEzWjAzMTEwLwYDVQQD
Eyg2MTdjMWY2ZjQ0N2MzNzZmZjM2ODA0YWUwODc3ZGNjZjJhZDAwYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lB/EaHFgKdgdbKEqUiHauNHQDOa
rsnkjwuLyv53Dbq/kUFY8RaC0CNSLVly4eIV9vkIEZsz0eSl5osp/JnxXmjKLkLT
M/VrucbuGdTvUWzQ86XBQKOZmNZ8wAQyI+P/k0xT7ZeVDUyVpNykNK4dHLJHVriE
/X4Ti8JSi7eS1kHtBMdnH9x7vBhjJT/CTzGb3v2TawwpdLweJuZYb0/56PljL6OM
fS/MvLUxBEapbGx6dPQCBoOfqn1BCD4jRLxWz99Dc/o/oRpCvfX2DZ2l9plZ7+aq
fSO9gkuVIIO9ymejBUqM6nG4rA9c0Tqt6T6fhHV4qq/uSnPdcE/wRz6GOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF8H29EfDdv82gErgh33M8q0AwlMB8GA1UdIwQY
MBaAFKmah2P6dQnrT5sIRrWF1Ic+sRw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVpxSFlfcDFDZXRQbXdoR3RZWFVoejZ4SERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85YTVkZDYtZWM3Zi00ZWQwLTk3ODAt
M2IwODQ0Mzg5NjlkLzEvcVpxSFlfcDFDZXRQbXdoR3RZWFVoejZ4SERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85YTVkZDYtZWM3Zi00ZWQwLTk3ODAtM2IwODQ0Mzg5Njlk
LzEvcVpxSFlfcDFDZXRQbXdoR3RZWFVoejZ4SERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESu9offB
6K/H2hpSeSpEHMRxxBseFA+ISCC4L2PvTp4SuKvti+Mbnvz9nYM4aeNTCtr+UKvD
z5JllPtyfE36PJnm8A+cgAxBCrk0SCkb0nnySVmFxpCtOJp3ErDApI5ZxAdWCk+l
7q6nScn6SuJfvk5cGUCiigUs8Kpbe9ZCTj2FJVS61zJF/zXh7RD1Bt8+idXhGd5A
GqmLpBKmsrI81eK3P05GUPvlMJpCqOkmLCadkaemBB48etkqYQE/6LJFFzYAEKtO
Q3ninqY5yHuUjCX2kh55Or81vo1WkBLXsw6QYnCkIfK9YJCG4it1epExeuQB4K1Y
XrQceustSLYblA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:07:48 2026 by rpki-client