Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: r5HRgCrQmarJmN1Y8c6ZJa6N6Mm/YEXxb763aNeDT9U=
Subject key identifier: F6:F2:7F:E4:0B:36:ED:1E:2D:E8:7F:26:EC:45:9C:E5:7F:8D:E2:ED
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 01A0FAFCC949D02F6A9D16B0CC13A9189AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 17CD
Signing time: Fri 02 Oct 2026 05:01:05 +0000
Manifest this update: Fri 02 Oct 2026 05:01:05 +0000
Manifest next update: Sat 03 Oct 2026 05:01:05 +0000
Files and hashes: 1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: P1g7yF4+MeHtK9ttXOisuAK88WQx5Mwc/Bu7UcVA+dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fc:c9:49:d0:2f:6a:9d:16:b0:cc:13:a9:18:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Oct 2 05:01:05 2026 GMT
Not After : Oct 3 05:01:05 2026 GMT
Subject: CN=f6f27fe40b36ed1e2de87f26ec459ce57f8de2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:96:db:64:db:95:cf:88:ce:74:34:5b:19:
32:4b:20:36:4c:27:1f:34:5c:ba:9b:4d:c7:85:26:
91:fd:0f:ab:79:4a:34:b5:3d:ff:48:60:23:83:00:
02:50:90:03:cf:b0:e9:1b:ca:d8:ac:62:0b:e1:1c:
c4:e7:65:88:f3:5d:5f:fc:ec:29:43:49:e7:b2:8a:
1e:cb:43:58:70:f3:f1:43:06:c4:8c:b8:31:db:a8:
5a:3c:94:e9:5d:fb:82:71:27:1a:74:7d:07:c3:c1:
86:5e:5f:98:9a:ab:42:28:78:78:14:9e:98:8e:6f:
45:3d:e2:cc:2a:aa:4a:e3:2b:69:1a:2c:2e:ce:30:
43:3e:58:b7:06:16:21:0c:f5:33:39:3d:f2:50:82:
35:6c:2d:1d:28:ce:77:4b:62:fd:35:29:e7:fb:65:
4f:15:18:3a:60:5b:91:46:05:0d:aa:99:4c:52:00:
13:59:2c:b4:51:c5:ec:12:05:8c:af:e9:eb:c3:62:
58:2c:bf:b3:6b:83:27:e5:ae:02:b4:d8:fe:22:7c:
c9:f6:b7:48:bb:c4:46:ca:d0:46:5c:3c:e5:20:14:
17:6d:51:8e:c0:16:03:ee:10:0c:fc:65:da:3c:8e:
10:52:87:de:4d:6f:97:9a:bb:63:db:e5:33:69:8e:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:7F:E4:0B:36:ED:1E:2D:E8:7F:26:EC:45:9C:E5:7F:8D:E2:ED
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:fe:c7:ad:d5:38:5e:ce:5b:60:00:dc:1e:26:60:ab:d9:
92:40:4a:7e:c3:aa:29:3e:12:26:3b:79:5a:fe:df:b9:6e:36:
19:6b:fc:d9:3a:11:4c:06:eb:16:76:b9:10:55:f2:94:8c:e8:
6f:6c:67:19:00:e9:d2:a9:e9:5c:e3:12:aa:9d:2b:90:a9:b9:
be:f3:c8:1a:f1:dc:74:12:2f:c7:d6:92:4d:b4:88:26:ec:55:
1d:d5:8f:11:57:d2:db:d2:20:dc:cf:84:bd:2b:f0:ea:b2:e8:
9d:6b:ed:db:de:eb:fa:7d:b2:c8:88:a2:86:f8:90:2e:03:27:
d7:29:c9:19:94:9f:fc:c2:c8:49:99:e7:32:a9:8f:e3:b8:00:
f0:f8:1e:e1:c0:b4:c6:b0:4c:96:45:27:cc:6b:85:d1:4b:b2:
5d:b8:a9:a6:e3:77:c7:0f:cc:e3:e8:68:e5:14:ac:bb:81:4e:
fb:c9:b3:be:b0:4a:eb:94:02:9c:b4:d7:b8:42:bd:88:4b:df:
80:81:69:9c:f2:81:14:82:dd:fe:e9:1b:80:75:a0:08:66:aa:
be:2c:31:1b:e4:ca:15:77:ad:85:65:13:a6:e7:30:62:ae:3d:
27:aa:57:65:44:7a:2a:74:36:45:8c:fc:8b:eb:ba:b3:a3:3d:
84:b5:4e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD6/MlJ0C9qnRawzBOpGJqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1
YmQyNDkwHhcNMjYxMDAyMDUwMTA1WhcNMjYxMDAzMDUwMTA1WjAzMTEwLwYDVQQD
EyhmNmYyN2ZlNDBiMzZlZDFlMmRlODdmMjZlYzQ1OWNlNTdmOGRlMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3aW22Tblc+IznQ0WxkySyA2TCcf
NFy6m03HhSaR/Q+reUo0tT3/SGAjgwACUJADz7DpG8rYrGIL4RzE52WI811f/Owp
Q0nnsooey0NYcPPxQwbEjLgx26haPJTpXfuCcScadH0Hw8GGXl+YmqtCKHh4FJ6Y
jm9FPeLMKqpK4ytpGiwuzjBDPli3BhYhDPUzOT3yUII1bC0dKM53S2L9NSnn+2VP
FRg6YFuRRgUNqplMUgATWSy0UcXsEgWMr+nrw2JYLL+za4Mn5a4CtNj+InzJ9rdI
u8RGytBGXDzlIBQXbVGOwBYD7hAM/GXaPI4QUofeTW+Xmrtj2+UzaY4j8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbyf+QLNu0eLeh/JuxFnOV/jeLtMB8GA1UdIwQY
MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt
YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw
LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZD+x63V
OF7OW2AA3B4mYKvZkkBKfsOqKT4SJjt5Wv7fuW42GWv82ToRTAbrFna5EFXylIzo
b2xnGQDp0qnpXOMSqp0rkKm5vvPIGvHcdBIvx9aSTbSIJuxVHdWPEVfS29Ig3M+E
vSvw6rLonWvt297r+n2yyIiihviQLgMn1ynJGZSf/MLISZnnMqmP47gA8Pge4cC0
xrBMlkUnzGuF0UuyXbippuN3xw/M4+ho5RSsu4FO+8mzvrBK65QCnLTXuEK9iEvf
gIFpnPKBFILd/ukbgHWgCGaqviwxG+TKFXethWUTpucwYq49J6pXZUR6KnQ2RYz8
i+u6s6M9hLVOTA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 16:34:11 2026 by rpki-client