
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File: qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier: saIrfMaw1N7Yw9ahWU0v5UKrHp2KVKZUnBxurCkhG3I=
Subject key identifier: 2A:58:18:83:1E:19:1D:99:0A:34:46:6B:4B:FE:E2:AE:34:88:3A:0B
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 01A0EB8A1AE04E37C42B4246995918D34CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number: 1AAB
Signing time: Tue 29 Sep 2026 05:01:31 +0000
Manifest this update: Tue 29 Sep 2026 05:01:31 +0000
Manifest next update: Wed 30 Sep 2026 05:01:31 +0000
Files and hashes: 1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: qKX8CAbLBc94HDJVnEx+h6zD4GrbEngnTbBdGsytMCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:1a:e0:4e:37:c4:2b:42:46:99:59:18:d3:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Sep 29 05:01:31 2026 GMT
Not After : Sep 30 05:01:31 2026 GMT
Subject: CN=2a5818831e191d990a34466b4bfee2ae34883a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:a6:46:16:24:de:9c:03:9b:f8:ba:8b:bd:
a4:6d:51:9c:6b:40:2b:15:b9:39:74:8c:63:96:f9:
aa:5c:04:41:1e:5f:e6:a7:3d:4f:58:c1:0e:bb:0c:
15:10:17:ed:5d:d7:61:73:b5:10:e0:1b:22:0a:7c:
ac:57:9e:37:8e:14:17:b6:6e:1a:4c:dd:38:c7:7e:
7f:25:e7:fd:e6:54:e4:06:f0:5e:9c:22:19:60:8e:
af:13:29:31:d0:c7:2c:76:a6:3c:d2:81:d5:fd:0e:
8f:ec:ae:69:5a:10:0f:96:d1:6e:c6:e6:f2:ea:99:
7c:63:df:1c:f2:d9:04:b9:3e:5b:1a:48:cd:37:8f:
20:14:91:8c:c0:07:bc:fa:38:b2:d2:d7:4c:66:bb:
4d:7d:24:6f:51:91:f4:5c:f1:ec:e8:43:2e:bb:26:
82:3c:9f:b4:08:09:ac:86:0e:fd:1f:fe:19:f9:33:
d6:8e:9c:3d:a7:4c:a0:c0:e7:f6:fb:c6:e7:ad:e0:
d2:f8:3c:a4:4a:b3:01:d5:b1:d0:68:55:b7:d6:05:
08:14:45:19:2e:68:0f:1a:6a:3e:72:90:a1:5c:e3:
ff:cd:a1:30:3e:14:05:0c:1c:ac:20:ac:5b:c7:90:
4b:21:07:7f:cb:5d:fd:3a:d1:87:77:2e:bf:7d:53:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:18:83:1E:19:1D:99:0A:34:46:6B:4B:FE:E2:AE:34:88:3A:0B
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:83:da:f1:ed:97:0e:d5:e1:b3:25:4e:1e:6d:0a:e7:da:
77:1b:a7:50:5a:f7:a3:57:ab:aa:32:de:17:60:8e:6e:67:8f:
73:db:62:0d:74:70:b5:a4:dc:4c:ef:e8:92:63:e0:97:c0:ff:
a7:39:9f:ff:74:c3:e5:99:94:29:2c:9b:6e:24:b1:bd:a0:8b:
09:05:58:d0:21:75:8b:6f:08:14:0b:07:a6:45:06:8e:54:3f:
a4:ac:60:36:9e:b1:7b:63:1f:3b:53:f5:1f:3c:24:de:9b:e2:
fc:ff:e4:f5:2a:a4:fa:0f:f5:63:fb:1f:75:a3:aa:c6:b2:d2:
46:92:b5:df:be:bd:96:63:06:6e:97:16:b9:e7:e2:de:c2:e1:
73:ec:f3:ec:d7:72:54:3b:e6:9b:1f:70:ac:6b:79:c9:32:c5:
04:ba:c0:e4:c6:27:fd:47:6f:ce:fd:20:d1:9b:ee:1d:ca:87:
6d:3b:d3:a5:ec:c6:3e:27:13:23:06:9e:c8:8c:aa:e3:59:50:
e8:66:70:be:c4:bf:c2:3e:74:c1:81:26:64:85:5d:e5:66:66:
d6:b1:62:52:cf:28:34:72:24:67:98:14:4a:00:9b:d2:77:65:
04:51:ee:ec:6e:f8:48:f3:13:e1:98:65:b5:a2:9e:0f:e4:4d:
2b:74:7d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrihrgTjfEK0JGmVkY00zIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjYwOTI5MDUwMTMxWhcNMjYwOTMwMDUwMTMxWjAzMTEwLwYDVQQD
EygyYTU4MTg4MzFlMTkxZDk5MGEzNDQ2NmI0YmZlZTJhZTM0ODgzYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyymRhYk3pwDm/i6i72kbVGca0Ar
Fbk5dIxjlvmqXARBHl/mpz1PWMEOuwwVEBftXddhc7UQ4BsiCnysV543jhQXtm4a
TN04x35/Jef95lTkBvBenCIZYI6vEykx0McsdqY80oHV/Q6P7K5pWhAPltFuxuby
6pl8Y98c8tkEuT5bGkjNN48gFJGMwAe8+jiy0tdMZrtNfSRvUZH0XPHs6EMuuyaC
PJ+0CAmshg79H/4Z+TPWjpw9p0ygwOf2+8bnreDS+DykSrMB1bHQaFW31gUIFEUZ
LmgPGmo+cpChXOP/zaEwPhQFDBysIKxbx5BLIQd/y139OtGHdy6/fVOiPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpYGIMeGR2ZCjRGa0v+4q40iDoLMB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXyD2vHt
lw7V4bMlTh5tCufadxunUFr3o1erqjLeF2CObmePc9tiDXRwtaTcTO/okmPgl8D/
pzmf/3TD5ZmUKSybbiSxvaCLCQVY0CF1i28IFAsHpkUGjlQ/pKxgNp6xe2MfO1P1
Hzwk3pvi/P/k9Sqk+g/1Y/sfdaOqxrLSRpK13769lmMGbpcWuefi3sLhc+zz7Ndy
VDvmmx9wrGt5yTLFBLrA5MYn/Udvzv0g0ZvuHcqHbTvTpezGPicTIwaeyIyq41lQ
6GZwvsS/wj50wYEmZIVd5WZm1rFiUs8oNHIkZ5gUSgCb0ndlBFHu7G74SPMT4Zhl
taKeD+RNK3R9jA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:50 2026 by rpki-client