Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: l1ZeN15RxGyLAiTECYCXpqk+rZPTVFZ7CA/mhNRUppc=
Subject key identifier: 27:43:AA:4C:5B:B1:D7:52:0A:2D:39:8E:93:D7:0B:10:AF:5A:C4:09
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 01A0D5DEB20E8E7968A34698CC175C51790E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 1262
Signing time: Fri 25 Sep 2026 00:02:16 +0000
Manifest this update: Fri 25 Sep 2026 00:02:16 +0000
Manifest next update: Sat 26 Sep 2026 00:02:16 +0000
Files and hashes: 1: eutBwstQCFRzhm35XTnNphMWByQ.roa (hash: RdOW4ekiWsJoF7BZmUsggiXem+HWt5D8Hbfh8/B+px8=)
2: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: dz2R9g8TTFW5fQFY5p3NsfoYkFCiNk2zW/34nc+sZhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:b2:0e:8e:79:68:a3:46:98:cc:17:5c:51:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Sep 25 00:02:16 2026 GMT
Not After : Sep 26 00:02:16 2026 GMT
Subject: CN=2743aa4c5bb1d7520a2d398e93d70b10af5ac409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:90:61:67:27:b7:a8:7c:17:33:7c:e5:10:
19:47:16:53:bf:ae:de:09:8a:9f:84:24:f0:53:96:
0d:fd:5e:af:fc:2f:97:dd:a8:66:a2:35:78:49:9a:
98:f3:3f:3d:1e:8f:dd:29:8f:a3:b3:2e:88:ac:f3:
21:ba:1c:07:c4:a9:b4:19:53:42:78:58:79:99:f6:
61:5e:2c:c5:e7:28:0b:1e:18:76:96:a8:29:02:91:
0d:4e:26:a4:24:b4:57:1b:15:f3:8b:c0:57:fa:07:
2a:f7:e0:c4:94:fc:6a:92:15:fe:17:9d:74:ad:7f:
64:40:52:e8:76:24:79:bb:2a:a4:3f:3d:1f:cd:64:
69:75:18:42:90:9a:a5:cb:bc:04:3b:ff:3f:c6:58:
e4:db:d5:d0:a4:97:37:bf:e5:b4:70:3e:00:a4:d8:
11:e7:3e:91:a6:f6:8a:c2:dc:67:80:74:89:5b:c2:
68:04:46:94:81:f1:09:81:8d:99:be:87:6e:6c:56:
96:04:72:a2:fa:8d:b8:7f:81:fd:6a:27:38:fa:11:
86:22:9e:38:25:e8:e0:3d:b2:27:ce:b5:e7:2e:e1:
5b:21:1c:2d:d6:c0:58:86:de:17:45:d3:a1:86:aa:
92:a0:e3:1b:12:88:3a:36:a2:15:c4:ac:1c:54:bc:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:AA:4C:5B:B1:D7:52:0A:2D:39:8E:93:D7:0B:10:AF:5A:C4:09
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ae:75:be:19:99:19:d1:7c:0b:8c:b7:f3:39:2e:9f:d7:06:
67:c2:95:e5:10:13:55:0a:42:60:a7:94:a7:49:0e:80:7f:69:
e5:e0:cc:61:c1:4c:2e:ac:04:d6:65:ee:dc:38:b5:ae:51:3a:
16:ca:41:4a:9a:1c:d8:ef:83:38:81:36:6f:55:f8:df:08:01:
f7:26:ed:be:18:6d:f6:a4:82:89:97:a4:a0:55:4a:16:60:d2:
79:b5:e9:55:76:16:f1:2a:c1:0b:88:3c:c0:c8:41:d7:7b:72:
c8:6f:5f:11:fb:ec:5b:c1:ca:b9:0a:b7:46:21:44:fe:1f:e9:
b0:e7:73:c6:a7:5e:00:ec:3b:30:85:af:42:38:5d:c2:2a:66:
26:6d:81:1d:7d:a5:c6:d7:8f:2d:db:96:a2:9b:eb:be:36:37:
fe:43:95:7d:4f:56:f6:ae:e1:36:16:3d:62:6c:b6:70:23:c1:
52:ae:e9:c8:51:24:32:b5:93:1b:7f:38:09:3e:36:c2:a0:41:
70:eb:ff:ff:e1:bf:cd:a2:1f:0e:16:c9:a3:22:64:09:a3:39:
a1:6c:cb:63:3e:8b:99:2a:ac:e9:18:5c:63:91:60:60:a0:8e:
8f:c1:b6:0e:1a:78:a3:0e:d0:e5:db:69:37:d4:73:88:34:f0:
34:a9:6c:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3rIOjnloo0aYzBdcUXkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNjg0ZTUwZTMzZjNhMDAxNWM4Zjg5OWM4OGJjYjEzN2Jj
ZmI1ZjkwHhcNMjYwOTI1MDAwMjE2WhcNMjYwOTI2MDAwMjE2WjAzMTEwLwYDVQQD
EygyNzQzYWE0YzViYjFkNzUyMGEyZDM5OGU5M2Q3MGIxMGFmNWFjNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA566QYWcnt6h8FzN85RAZRxZTv67e
CYqfhCTwU5YN/V6v/C+X3ahmojV4SZqY8z89Ho/dKY+jsy6IrPMhuhwHxKm0GVNC
eFh5mfZhXizF5ygLHhh2lqgpApENTiakJLRXGxXzi8BX+gcq9+DElPxqkhX+F510
rX9kQFLodiR5uyqkPz0fzWRpdRhCkJqly7wEO/8/xljk29XQpJc3v+W0cD4ApNgR
5z6RpvaKwtxngHSJW8JoBEaUgfEJgY2ZvodubFaWBHKi+o24f4H9aic4+hGGIp44
JejgPbInzrXnLuFbIRwt1sBYht4XRdOhhqqSoOMbEog6NqIVxKwcVLybwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdDqkxbsddSCi05jpPXCxCvWsQJMB8GA1UdIwQY
MBaAFKtoTlDjPzoAFcj4mciLyxN7z7X5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjIt
ODBlNWQ1M2VkYjQxLzEvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjItODBlNWQ1M2VkYjQx
LzEvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK51vhmZ
GdF8C4y38zkun9cGZ8KV5RATVQpCYKeUp0kOgH9p5eDMYcFMLqwE1mXu3Di1rlE6
FspBSpoc2O+DOIE2b1X43wgB9ybtvhht9qSCiZekoFVKFmDSebXpVXYW8SrBC4g8
wMhB13tyyG9fEfvsW8HKuQq3RiFE/h/psOdzxqdeAOw7MIWvQjhdwipmJm2BHX2l
xtePLduWopvrvjY3/kOVfU9W9q7hNhY9Ymy2cCPBUq7pyFEkMrWTG384CT42wqBB
cOv//+G/zaIfDhbJoyJkCaM5oWzLYz6LmSqs6RhcY5FgYKCOj8G2Dhp4ow7Q5dtp
N9RziDTwNKlsMw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:20:02 2026 by rpki-client