Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: U9ae9jMJNBLJiKOBrtZTRY9re8lW9yYBA0spG4QYZs8=
Subject key identifier: 79:8F:EA:77:0D:47:14:BE:30:29:8A:F6:62:D0:07:74:5C:EC:F6:4B
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 01A0F230A320D1667289F7F776DDCBE6B45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1A56
Signing time: Wed 30 Sep 2026 12:01:08 +0000
Manifest this update: Wed 30 Sep 2026 12:01:08 +0000
Manifest next update: Thu 01 Oct 2026 12:01:08 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 6dMJ/jpZrVT78ExDFzw+AwiEyJD6uTffeUB/2m2PjGs=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:30:a3:20:d1:66:72:89:f7:f7:76:dd:cb:e6:b4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Sep 30 12:01:08 2026 GMT
Not After : Oct 1 12:01:08 2026 GMT
Subject: CN=798fea770d4714be30298af662d007745cecf64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:3b:83:3f:38:0d:95:f2:0c:1d:83:f8:91:
b3:5d:54:ac:b0:db:65:dc:c0:a9:e0:54:5f:49:74:
dd:63:82:e1:c5:2a:67:00:66:60:cb:70:ef:de:e2:
b3:88:cc:b0:d2:96:40:90:1a:40:38:c6:01:57:8a:
36:bf:69:3a:48:2e:dd:d1:df:ec:72:f3:d2:d0:68:
da:3f:61:7f:ee:4a:fa:9b:ac:ff:12:9a:a4:7c:2a:
d9:66:c5:0f:68:56:ab:d0:e1:77:b1:1f:27:fa:ae:
91:5d:41:f0:a0:32:f6:3d:77:54:11:6a:94:b0:a8:
d8:d2:e5:be:80:4d:fa:a0:d9:56:bc:08:ba:3f:18:
df:49:af:cb:cd:a6:0e:fe:da:6f:b4:37:3a:b8:d6:
d1:56:c3:c1:53:8b:7f:a3:6a:a6:dd:aa:01:93:3c:
e2:15:a8:7f:d1:e4:b5:3b:b0:40:f8:c0:50:3f:29:
e1:ab:d3:d2:aa:13:89:ff:56:a2:7e:89:ba:5b:f1:
e4:0c:4c:f6:58:91:1b:15:26:cf:bd:72:91:bb:8b:
46:14:04:8d:38:46:53:6a:92:44:2d:97:c5:fa:74:
6f:29:c0:cd:73:00:36:e0:d8:6b:42:e5:7b:a8:27:
c6:51:92:f6:2a:5e:78:27:a5:5d:13:32:55:c5:81:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:EA:77:0D:47:14:BE:30:29:8A:F6:62:D0:07:74:5C:EC:F6:4B
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cd:c2:b6:15:94:64:b8:80:31:7b:fe:86:17:3f:27:c2:7f:
70:ad:e8:e0:4e:fb:3a:33:a2:d6:34:a6:44:0e:ab:78:9b:5c:
1d:a6:20:40:02:fb:f4:bd:68:38:6c:4c:97:f0:1a:d4:53:0c:
70:e5:79:d3:87:47:c1:90:61:5e:d8:0d:18:7a:99:b5:4e:36:
70:3b:15:0b:d4:80:cd:a5:92:8a:d1:9b:11:57:3f:7c:7c:69:
91:18:6b:90:72:e4:49:df:73:93:86:31:50:3d:5f:b0:2b:35:
be:d6:24:80:28:ce:c9:6d:13:e3:d7:2b:32:69:29:10:d6:94:
b2:cc:32:f7:b2:91:35:1b:62:de:f0:a8:37:6d:e7:82:1e:db:
96:80:62:14:ae:5f:33:71:10:a8:e6:1e:5f:05:27:62:eb:ad:
42:92:ee:70:8a:b9:23:97:14:04:10:5f:01:af:50:26:e1:5c:
58:c3:31:97:ca:72:80:7a:dd:f0:a1:14:b1:05:3c:75:22:b2:
cc:09:13:2b:5d:a1:56:b4:52:4e:0a:e0:8f:2c:d6:d7:fb:21:
68:22:64:80:71:29:d7:bd:f2:2f:b3:0f:f5:1e:0c:d9:47:04:
8e:f7:ad:dc:b0:60:d2:c5:87:cf:99:40:82:77:6c:46:0f:de:
ed:35:ad:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDyMKMg0WZyiff3dt3L5rRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2
MGFjN2UwHhcNMjYwOTMwMTIwMTA4WhcNMjYxMDAxMTIwMTA4WjAzMTEwLwYDVQQD
Eyg3OThmZWE3NzBkNDcxNGJlMzAyOThhZjY2MmQwMDc3NDVjZWNmNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEM7gz84DZXyDB2D+JGzXVSssNtl
3MCp4FRfSXTdY4LhxSpnAGZgy3Dv3uKziMyw0pZAkBpAOMYBV4o2v2k6SC7d0d/s
cvPS0GjaP2F/7kr6m6z/EpqkfCrZZsUPaFar0OF3sR8n+q6RXUHwoDL2PXdUEWqU
sKjY0uW+gE36oNlWvAi6PxjfSa/LzaYO/tpvtDc6uNbRVsPBU4t/o2qm3aoBkzzi
Fah/0eS1O7BA+MBQPynhq9PSqhOJ/1aifom6W/HkDEz2WJEbFSbPvXKRu4tGFASN
OEZTapJELZfF+nRvKcDNcwA24NhrQuV7qCfGUZL2Kl54J6VdEzJVxYEFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmP6ncNRxS+MCmK9mLQB3Rc7PZLMB8GA1UdIwQY
MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct
MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm
LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc3CthWU
ZLiAMXv+hhc/J8J/cK3o4E77OjOi1jSmRA6reJtcHaYgQAL79L1oOGxMl/Aa1FMM
cOV504dHwZBhXtgNGHqZtU42cDsVC9SAzaWSitGbEVc/fHxpkRhrkHLkSd9zk4Yx
UD1fsCs1vtYkgCjOyW0T49crMmkpENaUsswy97KRNRti3vCoN23ngh7bloBiFK5f
M3EQqOYeXwUnYuutQpLucIq5I5cUBBBfAa9QJuFcWMMxl8pygHrd8KEUsQU8dSKy
zAkTK12hVrRSTgrgjyzW1/shaCJkgHEp173yL7MP9R4M2UcEjvet3LBg0sWHz5lA
gndsRg/e7TWtDg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:09:57 2026 by rpki-client