Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: 6D//TLlX9tKmhJWL1qhRzFDR6SVmuqD5ZKCog/v5GnU=
Subject key identifier: 02:75:C4:8B:60:D6:03:00:B7:FA:94:38:2D:63:8E:2E:83:27:AE:21
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 01A0E173C084EDEC58C5BEADF5BCAA6A712C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 0346
Signing time: Sun 27 Sep 2026 06:00:54 +0000
Manifest this update: Sun 27 Sep 2026 06:00:54 +0000
Manifest next update: Mon 28 Sep 2026 06:00:54 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: F03Ts4nx5amerGOKADFKBPBg6IgCKBH0EfKSDGmvadw=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: yMSdih1BEkH3pQ4fKRRG34haBVs.roa (hash: zQcIZwJ6Pu/eO5hnk91XHasGs0yD2RAKEuFEjFFSfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:c0:84:ed:ec:58:c5:be:ad:f5:bc:aa:6a:71:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Sep 27 06:00:54 2026 GMT
Not After : Sep 28 06:00:54 2026 GMT
Subject: CN=0275c48b60d60300b7fa94382d638e2e8327ae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:d5:e1:de:c7:96:fd:cb:58:99:a4:34:fa:
d9:cf:4d:97:b5:4c:e6:b3:ce:67:3b:ba:7c:c3:b8:
68:56:1c:bc:0b:ed:d6:05:1e:52:f8:11:d3:c2:00:
2d:ae:1c:6e:05:d8:a3:a8:e5:69:11:84:91:bd:ac:
62:0e:70:fe:d5:dd:ee:a2:74:eb:89:87:3e:01:78:
3b:e2:5c:49:ac:25:c8:8d:6f:7d:30:fb:4d:40:94:
1b:4d:e1:76:b1:6c:7d:83:ce:07:5f:a2:f7:63:46:
3d:07:ae:8f:3a:3e:13:24:57:8f:dc:2c:d4:a0:29:
7b:44:9f:77:4e:b3:c8:8f:20:45:bd:8f:5a:5f:1f:
45:ac:03:16:d6:07:25:8b:08:67:e9:e5:59:ec:10:
b8:9f:b3:b2:54:b8:44:6a:d0:76:0f:27:36:b1:04:
6a:27:77:ea:e7:2d:c4:64:fb:35:40:0e:92:0f:45:
02:ea:38:be:8f:a8:bc:06:6d:c3:e0:99:a0:a3:a0:
e2:08:a4:1e:e9:b3:51:73:80:17:ea:6a:11:72:03:
9d:8f:03:3a:5b:b8:57:e8:74:d0:74:54:c5:bc:a5:
06:37:27:e1:3d:9e:84:dc:d9:27:0e:fe:ad:1c:fe:
47:ca:4f:e0:b0:62:f7:39:7f:5e:70:5d:71:db:a9:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:75:C4:8B:60:D6:03:00:B7:FA:94:38:2D:63:8E:2E:83:27:AE:21
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:b8:9e:d0:29:d2:90:5d:a2:e6:fd:5e:59:cf:fe:6d:73:
21:6b:05:0a:31:c2:74:9a:29:b9:f8:72:9f:ba:0c:21:b6:70:
41:d1:5f:ee:59:78:1b:dd:22:b3:02:90:52:23:c6:50:81:70:
87:c0:c2:8f:49:9a:78:89:de:de:48:86:52:ce:50:83:35:ec:
f5:95:22:3e:4a:44:63:74:59:57:71:17:63:79:62:c7:bc:5a:
63:b3:53:a2:45:9e:bb:cd:c6:86:0d:02:c2:2d:ca:d1:6d:be:
03:ea:0d:d7:83:f7:75:22:25:d7:40:74:a1:e8:0d:74:e7:23:
03:94:0f:b9:80:4d:54:0d:7e:5f:be:b4:c0:de:ac:cd:aa:ef:
60:86:9d:ac:f0:74:12:ef:cb:e2:5d:3e:3e:bb:43:f1:f2:7b:
e4:6d:95:69:58:34:2f:63:57:e2:cb:51:67:57:97:c3:2b:d3:
e0:1f:cc:07:f6:b1:1b:90:67:43:a6:51:47:4c:58:d8:19:92:
38:a5:fb:b6:c7:97:2f:d0:4a:de:76:db:a2:b4:16:d6:04:bc:
a8:3f:b4:bb:9c:4e:6a:c3:6e:50:ac:fa:29:c6:9d:39:69:54:
e0:ff:5c:4f:93:94:cb:3a:13:96:3c:48:4c:0f:17:c9:a9:4d:
fe:38:dc:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhc8CE7exYxb6t9byqanEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YTU1MzYxMmQ5NGIwOTFiMzY1OWIyMTIwYmM4ZWZiMjYw
ZTdkMzAwHhcNMjYwOTI3MDYwMDU0WhcNMjYwOTI4MDYwMDU0WjAzMTEwLwYDVQQD
EygwMjc1YzQ4YjYwZDYwMzAwYjdmYTk0MzgyZDYzOGUyZTgzMjdhZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskjV4d7Hlv3LWJmkNPrZz02XtUzm
s85nO7p8w7hoVhy8C+3WBR5S+BHTwgAtrhxuBdijqOVpEYSRvaxiDnD+1d3uonTr
iYc+AXg74lxJrCXIjW99MPtNQJQbTeF2sWx9g84HX6L3Y0Y9B66POj4TJFeP3CzU
oCl7RJ93TrPIjyBFvY9aXx9FrAMW1gcliwhn6eVZ7BC4n7OyVLhEatB2Dyc2sQRq
J3fq5y3EZPs1QA6SD0UC6ji+j6i8Bm3D4Jmgo6DiCKQe6bNRc4AX6moRcgOdjwM6
W7hX6HTQdFTFvKUGNyfhPZ6E3NknDv6tHP5Hyk/gsGL3OX9ecF1x26lgAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ1xItg1gMAt/qUOC1jji6DJ64hMB8GA1UdIwQY
MBaAFNalU2EtlLCRs2WbISC8jvsmDn0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQt
ZTA1OTA2Y2I2OTQ4LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQtZTA1OTA2Y2I2OTQ4
LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZy4ntAp
0pBdoub9XlnP/m1zIWsFCjHCdJopufhyn7oMIbZwQdFf7ll4G90iswKQUiPGUIFw
h8DCj0maeIne3kiGUs5QgzXs9ZUiPkpEY3RZV3EXY3lix7xaY7NTokWeu83Ghg0C
wi3K0W2+A+oN14P3dSIl10B0oegNdOcjA5QPuYBNVA1+X760wN6szarvYIadrPB0
Eu/L4l0+PrtD8fJ75G2VaVg0L2NX4stRZ1eXwyvT4B/MB/axG5BnQ6ZRR0xY2BmS
OKX7tseXL9BK3nbborQW1gS8qD+0u5xOasNuUKz6KcadOWlU4P9cT5OUyzoTljxI
TA8XyalN/jjcvQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:52:24 2026 by rpki-client