Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: Jf3heCRBvGw8fnc+kvx8ZKG4bG+t+aL9j289A+Fnylo=
Subject key identifier: DD:E5:C1:F3:A1:53:A8:B5:C7:C0:2B:AF:E8:1D:91:42:D0:72:06:71
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 01A0D8725B1970F1DAEA3CBA8F8A5185877B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 12:02:47 +0000
Manifest this update: Fri 25 Sep 2026 12:02:47 +0000
Manifest next update: Sat 26 Sep 2026 12:02:47 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: OJDh3FYpkYQGvcHlFANylJlONk4AMn5+06VI+z+8zzU=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:5b:19:70:f1:da:ea:3c:ba:8f:8a:51:85:87:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Sep 25 12:02:47 2026 GMT
Not After : Sep 26 12:02:47 2026 GMT
Subject: CN=dde5c1f3a153a8b5c7c02bafe81d9142d0720671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:98:6b:dc:a9:3a:23:41:10:0d:de:9f:cc:
44:05:34:06:ce:e5:7a:1e:1c:7d:4a:b9:49:e7:ec:
7a:58:72:6d:b6:5b:24:e8:06:08:28:c0:bd:68:d3:
c2:78:0f:2a:21:2f:cf:e0:ab:9d:14:69:2b:67:0a:
3b:ae:62:57:27:00:ef:80:72:d1:a8:1d:0e:10:f5:
4d:6e:a7:c8:ce:62:ef:bb:f0:91:6a:74:47:27:c9:
59:6f:03:d9:34:24:f2:05:3f:a0:b8:98:d8:7d:d0:
06:0c:e4:5d:e6:e1:7b:c5:14:d9:c0:82:cc:f3:63:
d5:de:e1:2c:dd:2f:94:eb:66:ef:64:16:1d:ca:30:
f2:d8:1d:c3:8d:4b:b7:68:cb:32:5d:b2:77:b1:70:
85:c0:87:e1:bf:74:2b:26:b6:27:de:fd:5c:88:a3:
69:c5:5f:33:46:fc:d0:d3:10:6e:1e:dc:c4:c5:c4:
7a:b0:11:06:32:76:9a:46:5b:67:0f:5b:e3:83:24:
c2:0f:47:0b:6d:3a:2a:18:fb:df:ab:9a:d3:86:7f:
9a:c2:d9:d6:3c:c9:a5:3a:77:ba:c0:14:8d:42:f9:
93:a5:85:e2:05:da:e7:fd:d5:eb:9e:0c:a6:8d:5e:
c2:df:ae:a1:ff:e1:16:a9:fe:af:2d:ac:5d:23:97:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:C1:F3:A1:53:A8:B5:C7:C0:2B:AF:E8:1D:91:42:D0:72:06:71
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f9:4d:22:a9:cc:ef:99:8b:17:77:ec:6c:c4:78:36:38:7a:
2b:8f:76:73:ea:3a:d2:2c:09:b2:ba:e0:ed:46:16:e1:38:2f:
45:db:ff:f4:42:d2:86:29:eb:3e:18:4f:d3:89:2f:d6:8d:14:
9f:a7:25:72:24:04:05:e1:02:a3:b5:f6:8f:18:9c:32:b4:16:
34:5e:24:18:2e:6e:59:b4:57:b3:27:85:dd:c1:18:6f:52:62:
92:ad:a6:76:56:70:c4:af:c6:1f:40:0b:21:04:c4:db:57:14:
72:ca:1c:d0:c1:d9:26:e8:da:77:8c:55:99:98:07:22:92:df:
88:f5:90:0e:a7:dc:1f:12:16:95:63:b1:4a:0d:38:16:23:f6:
f5:20:51:ba:85:4d:1a:99:40:b4:8c:4a:e1:13:0f:75:ad:84:
86:f3:83:26:9f:61:87:e1:4d:4a:01:c8:0c:2a:54:02:05:fc:
c8:be:09:a2:fa:ba:07:4a:5e:7c:d2:08:34:ba:0b:79:28:81:
eb:80:f1:35:dc:9a:d2:d5:7f:b2:dd:48:5b:e3:bd:1d:e9:43:
44:f1:30:76:4a:6d:5a:2c:eb:52:f0:4c:60:87:77:64:00:bb:
46:f1:88:6b:fe:6e:2d:e1:d9:5d:17:c6:8f:1b:a7:56:e7:99:
ec:12:77:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYclsZcPHa6jy6j4pRhYd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5
ZWMxNjkwHhcNMjYwOTI1MTIwMjQ3WhcNMjYwOTI2MTIwMjQ3WjAzMTEwLwYDVQQD
EyhkZGU1YzFmM2ExNTNhOGI1YzdjMDJiYWZlODFkOTE0MmQwNzIwNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i2Ya9ypOiNBEA3en8xEBTQGzuV6
Hhx9SrlJ5+x6WHJttlsk6AYIKMC9aNPCeA8qIS/P4KudFGkrZwo7rmJXJwDvgHLR
qB0OEPVNbqfIzmLvu/CRanRHJ8lZbwPZNCTyBT+guJjYfdAGDORd5uF7xRTZwILM
82PV3uEs3S+U62bvZBYdyjDy2B3DjUu3aMsyXbJ3sXCFwIfhv3QrJrYn3v1ciKNp
xV8zRvzQ0xBuHtzExcR6sBEGMnaaRltnD1vjgyTCD0cLbToqGPvfq5rThn+awtnW
PMmlOne6wBSNQvmTpYXiBdrn/dXrngymjV7C366h/+EWqf6vLaxdI5eNxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3lwfOhU6i1x8Arr+gdkULQcgZxMB8GA1UdIwQY
MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt
NWYxYjY5MDQ4ZmUyLzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy
LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPlNIqnM
75mLF3fsbMR4Njh6K492c+o60iwJsrrg7UYW4TgvRdv/9ELShinrPhhP04kv1o0U
n6clciQEBeECo7X2jxicMrQWNF4kGC5uWbRXsyeF3cEYb1Jikq2mdlZwxK/GH0AL
IQTE21cUcsoc0MHZJujad4xVmZgHIpLfiPWQDqfcHxIWlWOxSg04FiP29SBRuoVN
GplAtIxK4RMPda2EhvODJp9hh+FNSgHIDCpUAgX8yL4Jovq6B0pefNIINLoLeSiB
64DxNdya0tV/st1IW+O9HelDRPEwdkptWizrUvBMYId3ZAC7RvGIa/5uLeHZXRfG
jxunVueZ7BJ3Bg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:28:37 2026 by rpki-client