Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: YvLWAmcePUf9eClyrKQ6zDWTSUfd3aODUXd/MEsfi4c=
Subject key identifier: F8:58:10:D8:DA:95:5F:53:D4:43:1F:76:7C:67:74:2D:6D:DD:D2:58
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 01A0DD9765CDA814622110DC8ABDA4F3DADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 0426
Signing time: Sat 26 Sep 2026 12:01:21 +0000
Manifest this update: Sat 26 Sep 2026 12:01:21 +0000
Manifest next update: Sun 27 Sep 2026 12:01:21 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: DmME/ZUq4kc9ma2lsQbyjS81pGGZUe2B1yZwqpxuNrI=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:65:cd:a8:14:62:21:10:dc:8a:bd:a4:f3:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Sep 26 12:01:21 2026 GMT
Not After : Sep 27 12:01:21 2026 GMT
Subject: CN=f85810d8da955f53d4431f767c67742d6dddd258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:95:73:33:c9:bc:84:b2:72:20:d8:c5:97:
c9:c3:53:20:23:90:d0:85:d4:71:e7:4f:a7:e8:2a:
34:0b:b3:fd:cb:27:16:9e:bb:62:3e:fa:f8:84:dc:
7e:39:8b:4d:5c:cc:1c:11:b1:01:b2:01:e1:47:c1:
68:36:18:f1:8e:93:1c:40:cd:c0:c4:9a:03:00:80:
20:88:92:61:ac:3e:b8:11:f7:e0:ee:45:da:45:7e:
4e:7c:9e:18:02:15:c0:ec:9e:91:cd:b5:7e:52:d9:
ed:d1:ba:74:55:3e:28:d1:47:f1:14:cb:64:95:2d:
5e:11:19:f0:cf:ee:26:3f:a4:7d:b0:ab:8a:16:ba:
41:86:9b:3b:32:91:5c:c8:4a:9c:3a:5c:cc:88:bd:
04:75:5a:4e:49:00:f4:8f:ff:5e:77:7b:0f:3b:5a:
e5:85:c0:cc:80:14:13:a6:2c:bc:5a:38:a2:c4:d0:
9c:4d:62:76:07:ef:16:51:dc:05:19:13:8c:02:cf:
7e:08:93:44:19:0e:f0:e8:75:3e:57:9d:f3:72:e4:
56:d9:ae:29:d1:19:d8:1b:62:4d:c2:c0:40:60:36:
9d:cf:52:ce:5d:21:a4:1f:91:8a:87:15:88:60:ac:
e6:b9:33:05:a9:de:f9:52:c2:3b:cb:04:96:d0:76:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:58:10:D8:DA:95:5F:53:D4:43:1F:76:7C:67:74:2D:6D:DD:D2:58
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cf:a1:da:ed:e7:ef:ea:5a:86:e2:cd:f8:28:8e:02:dc:ba:
33:3c:9d:8e:cc:7a:55:ba:b5:c8:46:82:e5:0f:34:1f:55:93:
a8:46:5f:3d:64:7b:6d:3f:36:28:12:9e:9a:87:88:2d:8e:2d:
00:7a:71:31:59:75:54:4c:44:92:8a:08:2e:1b:90:eb:b3:22:
bb:3e:82:79:52:a0:81:e2:2e:76:c6:01:84:69:e1:a4:41:72:
d6:00:b7:0a:a7:25:62:79:95:51:ff:80:51:ec:19:84:fe:c7:
3d:29:00:29:ea:a3:a1:71:21:c1:2e:b5:96:8f:54:d4:d4:92:
d5:b6:a0:8b:e1:ec:d9:2c:ae:88:3c:5e:b2:0f:4d:e9:ad:fe:
e4:d1:1c:c1:98:77:18:30:78:d1:db:01:bf:4e:ba:bc:ce:de:
ce:4f:5a:e5:aa:e8:fc:e8:2f:f2:68:2b:50:6c:a5:b6:96:aa:
36:49:c4:16:91:33:96:94:b5:49:fe:07:4b:fd:b9:2a:d3:c5:
89:1a:b7:46:f2:7d:5e:18:f7:2c:27:b2:e9:11:e1:dc:ed:e7:
b5:1d:2f:28:d3:1e:b2:ca:c2:59:03:10:ad:a0:ea:ed:f2:35:
45:90:8b:a3:6b:2a:8b:cf:a4:66:93:eb:2c:e7:ac:70:08:be:
09:cf:e5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl2XNqBRiIRDcir2k89rcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzNiMDgwMWQ0MGQwNTg0OTA3MmUyZmM4MTIxM2IwMjVk
MmEyYmMwHhcNMjYwOTI2MTIwMTIxWhcNMjYwOTI3MTIwMTIxWjAzMTEwLwYDVQQD
EyhmODU4MTBkOGRhOTU1ZjUzZDQ0MzFmNzY3YzY3NzQyZDZkZGRkMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z+VczPJvISyciDYxZfJw1MgI5DQ
hdRx50+n6Co0C7P9yycWnrtiPvr4hNx+OYtNXMwcEbEBsgHhR8FoNhjxjpMcQM3A
xJoDAIAgiJJhrD64Effg7kXaRX5OfJ4YAhXA7J6RzbV+Utnt0bp0VT4o0UfxFMtk
lS1eERnwz+4mP6R9sKuKFrpBhps7MpFcyEqcOlzMiL0EdVpOSQD0j/9ed3sPO1rl
hcDMgBQTpiy8WjiixNCcTWJ2B+8WUdwFGROMAs9+CJNEGQ7w6HU+V53zcuRW2a4p
0RnYG2JNwsBAYDadz1LOXSGkH5GKhxWIYKzmuTMFqd75UsI7ywSW0HYYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhYENjalV9T1EMfdnxndC1t3dJYMB8GA1UdIwQY
MBaAFKgzsIAdQNBYSQcuL8gSE7Al0qK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjkt
MTdiZjA2NmRhNGM1LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjktMTdiZjA2NmRhNGM1
LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc+h2u3n
7+pahuLN+CiOAty6Mzydjsx6Vbq1yEaC5Q80H1WTqEZfPWR7bT82KBKemoeILY4t
AHpxMVl1VExEkooILhuQ67Miuz6CeVKggeIudsYBhGnhpEFy1gC3CqclYnmVUf+A
UewZhP7HPSkAKeqjoXEhwS61lo9U1NSS1bagi+Hs2SyuiDxesg9N6a3+5NEcwZh3
GDB40dsBv066vM7ezk9a5aro/Ogv8mgrUGyltpaqNknEFpEzlpS1Sf4HS/25KtPF
iRq3RvJ9Xhj3LCey6RHh3O3ntR0vKNMessrCWQMQraDq7fI1RZCLo2sqi8+kZpPr
LOescAi+Cc/lrQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:13:02 2026 by rpki-client