Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: LYzg2HAfwfelOu9EdAzJcHiKoFVcYZyhQttFdb/edVU=
Subject key identifier: 05:E4:CA:8B:0D:8D:94:9A:66:24:38:87:68:A3:15:AE:8D:7E:BC:5F
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 01A0D983B81EA81FEC8DF49434AE979A0C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 17:01:23 +0000
Manifest this update: Fri 25 Sep 2026 17:01:23 +0000
Manifest next update: Sat 26 Sep 2026 17:01:23 +0000
Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: DHLQCTA/2u6Owtq2BgeW4nkNCHnJzmV+fXXTElP5cuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:b8:1e:a8:1f:ec:8d:f4:94:34:ae:97:9a:0c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Sep 25 17:01:23 2026 GMT
Not After : Sep 26 17:01:23 2026 GMT
Subject: CN=05e4ca8b0d8d949a6624388768a315ae8d7ebc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:7d:e9:ea:03:47:0c:78:8a:4e:16:fa:f2:
c0:0c:79:d4:77:59:08:a5:c8:bc:9b:08:45:7b:e1:
cb:20:59:bf:4e:28:3d:df:a9:49:12:ed:88:f7:d6:
72:2d:81:98:a3:ed:42:eb:78:7f:94:da:c0:27:d7:
e9:9a:bd:6f:20:49:7b:99:fa:3a:9a:d3:b6:33:6f:
dc:2d:f1:da:d2:a6:33:bc:66:af:b3:7c:38:8c:1b:
d1:df:e9:8d:df:9b:4b:44:d0:c5:96:df:7c:00:30:
f6:66:47:65:68:d2:ac:07:52:6b:74:34:63:69:a8:
54:60:b8:37:4c:ee:bd:42:21:75:6c:ed:91:c8:24:
b4:96:0e:92:2e:de:eb:c0:4f:86:0e:ad:ee:1f:b0:
fc:cc:a5:c8:0a:36:8a:68:2d:50:f0:65:0d:bc:36:
98:69:f2:60:0a:e5:da:d3:5e:ad:9f:fd:7e:58:66:
eb:b5:e2:fc:2d:87:aa:79:66:1b:ba:bc:d2:23:8e:
ea:7c:1e:9c:9c:5d:34:58:82:06:c7:b7:8f:2b:d9:
e2:b7:3c:10:94:5b:fd:5b:ac:26:27:06:3b:29:41:
cf:40:d1:10:df:0a:3d:99:b5:64:40:d4:63:35:ec:
ac:f6:fb:e1:2a:3c:77:c2:05:5e:ff:15:e8:ae:3a:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:CA:8B:0D:8D:94:9A:66:24:38:87:68:A3:15:AE:8D:7E:BC:5F
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:6d:c2:94:ec:2c:84:5c:03:31:08:8f:b5:c0:88:8a:59:
3d:fe:8e:cc:e0:2d:d8:8b:0b:63:90:e7:72:c9:ae:e4:7c:cd:
e4:46:fc:c4:d8:11:1a:fc:06:60:73:19:5b:f1:58:ae:33:44:
16:bd:19:8c:6e:27:f0:2d:c5:aa:eb:8e:10:05:c7:6c:67:30:
51:fc:0a:d1:fa:db:c6:3a:27:de:e8:70:86:52:ae:81:80:80:
18:ce:bf:43:12:89:37:2d:c7:2e:d4:f0:fc:fc:93:0e:2b:40:
2a:4e:43:ab:cb:7a:5d:d5:a5:a9:9f:49:f4:7d:56:2a:b1:22:
ab:6f:d0:03:e8:75:bc:68:c2:cb:62:2c:26:63:d2:20:09:e1:
79:82:7a:e5:db:81:de:4f:8f:fb:51:63:0e:0f:a9:f9:24:7a:
4f:69:47:e3:0c:4f:de:7e:c3:63:bc:13:f5:19:0a:c9:49:48:
6a:f0:a5:e2:0c:61:78:5a:89:1e:df:ac:b8:05:54:17:0d:2c:
85:9c:da:ca:da:0c:1a:92:a3:c8:17:b7:f5:7c:f0:72:f7:0a:
d9:d0:59:51:43:20:89:27:4b:72:be:67:85:cf:92:66:d0:53:
c0:ac:b9:25:80:df:6b:a6:32:57:b1:f3:06:42:12:dd:d4:ef:
90:9c:c3:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg7geqB/sjfSUNK6XmgyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw
YWRjNGMwHhcNMjYwOTI1MTcwMTIzWhcNMjYwOTI2MTcwMTIzWjAzMTEwLwYDVQQD
EygwNWU0Y2E4YjBkOGQ5NDlhNjYyNDM4ODc2OGEzMTVhZThkN2ViYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/l96eoDRwx4ik4W+vLADHnUd1kI
pci8mwhFe+HLIFm/Tig936lJEu2I99ZyLYGYo+1C63h/lNrAJ9fpmr1vIEl7mfo6
mtO2M2/cLfHa0qYzvGavs3w4jBvR3+mN35tLRNDFlt98ADD2ZkdlaNKsB1JrdDRj
aahUYLg3TO69QiF1bO2RyCS0lg6SLt7rwE+GDq3uH7D8zKXICjaKaC1Q8GUNvDaY
afJgCuXa016tn/1+WGbrteL8LYeqeWYburzSI47qfB6cnF00WIIGx7ePK9nitzwQ
lFv9W6wmJwY7KUHPQNEQ3wo9mbVkQNRjNeys9vvhKjx3wgVe/xXorjrsXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXkyosNjZSaZiQ4h2ijFa6NfrxfMB8GA1UdIwQY
MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt
M2M3NzNhNmM0MmY5LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5
LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcltwpTs
LIRcAzEIj7XAiIpZPf6OzOAt2IsLY5Dncsmu5HzN5Eb8xNgRGvwGYHMZW/FYrjNE
Fr0ZjG4n8C3FquuOEAXHbGcwUfwK0frbxjon3uhwhlKugYCAGM6/QxKJNy3HLtTw
/PyTDitAKk5Dq8t6XdWlqZ9J9H1WKrEiq2/QA+h1vGjCy2IsJmPSIAnheYJ65duB
3k+P+1FjDg+p+SR6T2lH4wxP3n7DY7wT9RkKyUlIavCl4gxheFqJHt+suAVUFw0s
hZzaytoMGpKjyBe39XzwcvcK2dBZUUMgiSdLcr5nhc+SZtBTwKy5JYDfa6YyV7Hz
BkIS3dTvkJzD5A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:33:26 2026 by rpki-client