Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: XXUmerNCm2rDFvtZatgtqbpP99he/NipH6siPeupPx4=
Subject key identifier: 2D:F2:7B:02:51:98:D6:9F:CB:39:00:AE:C5:3A:89:01:66:13:97:12
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 01A12C574817C965C521DC21C3459197C14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 1216
Signing time: Sun 11 Oct 2026 19:01:19 +0000
Manifest this update: Sun 11 Oct 2026 19:01:19 +0000
Manifest next update: Mon 12 Oct 2026 19:01:19 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: ysgUp/XNN81JzUpFo00p7L/bCmoDMbhx47OVUlRIXTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:48:17:c9:65:c5:21:dc:21:c3:45:91:97:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Oct 11 19:01:19 2026 GMT
Not After : Oct 12 19:01:19 2026 GMT
Subject: CN=2df27b025198d69fcb3900aec53a890166139712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:03:a4:79:20:66:4c:86:ed:31:34:1b:23:
23:30:c1:02:10:8a:a3:d3:b4:e6:cc:87:08:9e:a1:
7a:be:65:23:49:f8:fb:a0:13:7e:f2:59:b9:6f:14:
e7:86:93:90:97:e8:1c:2b:ca:b3:b2:dd:79:1d:5f:
f5:0f:9f:ae:27:18:6e:e8:f6:de:9d:71:c8:92:ab:
f1:72:02:a8:1c:ef:b1:e5:b8:61:fc:7f:b7:1d:21:
cb:c6:b6:3f:ea:80:ce:9a:8a:9d:8c:ff:5e:cb:e6:
38:c8:cb:e2:85:33:9d:75:a1:57:e6:3d:28:c8:83:
24:31:32:81:aa:fe:f0:38:48:24:45:81:8f:2e:23:
75:d7:25:9f:cf:df:ac:2c:10:50:eb:f0:71:6a:3f:
ff:5a:8e:31:44:fb:67:85:3b:f4:26:63:a9:44:94:
a3:85:e1:32:de:07:c1:71:7a:63:e2:b5:bd:ca:e4:
a8:b5:1e:f3:c9:52:f3:2b:00:fc:35:f2:93:ac:dd:
a7:83:39:f9:e6:e0:d3:2f:16:a9:aa:ca:1e:0e:42:
cc:2d:34:12:9a:c6:f6:e7:41:c8:70:5f:1f:4a:f2:
12:d1:32:0b:7e:ce:16:0c:7a:fe:92:9e:18:36:ad:
88:46:64:c9:33:c8:bb:d1:bf:16:42:b3:7c:3e:33:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F2:7B:02:51:98:D6:9F:CB:39:00:AE:C5:3A:89:01:66:13:97:12
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:12:09:01:52:00:26:29:4d:7d:41:44:49:4e:8f:54:7f:bb:
f0:89:b3:4d:b3:ad:01:d2:9e:29:5c:e8:63:bd:c4:90:20:d6:
22:2e:9b:06:db:23:ca:ee:df:32:83:06:4a:4b:65:21:7c:69:
c2:b5:a5:db:46:6c:7e:49:db:19:65:8b:c6:f5:77:77:27:e2:
ec:4b:1a:da:80:4e:26:e0:89:ef:38:fa:27:be:d4:85:16:44:
e2:d4:7c:2f:6e:78:08:81:ce:1b:02:0a:e7:ca:c5:8b:67:a4:
18:94:1f:dc:1c:43:b9:d4:de:82:35:7d:c4:88:77:56:f0:12:
8a:30:3f:b3:44:94:98:e8:f7:43:96:1c:c0:a8:27:c6:07:37:
a5:5f:1c:05:5c:9c:95:ec:e7:f7:ec:75:3e:22:12:14:84:3e:
83:18:45:78:52:24:bb:c7:3c:9a:90:2e:cd:34:4e:0f:31:84:
1d:62:13:a8:e8:bb:8c:d5:fc:6e:95:3f:95:a4:d7:0f:22:07:
b4:b5:37:6d:6e:c3:23:85:c1:35:48:ac:03:39:7e:9b:4f:e5:
fb:c1:51:04:fc:68:b6:bf:4d:99:57:e8:2a:1b:f0:fb:46:45:
90:6b:e5:ce:46:f8:80:9c:86:e0:be:6f:43:95:fb:f5:17:13:
26:51:7b:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsV0gXyWXFIdwhw0WRl8FNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4
NThhNGMwHhcNMjYxMDExMTkwMTE5WhcNMjYxMDEyMTkwMTE5WjAzMTEwLwYDVQQD
EygyZGYyN2IwMjUxOThkNjlmY2IzOTAwYWVjNTNhODkwMTY2MTM5NzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyysDpHkgZkyG7TE0GyMjMMECEIqj
07TmzIcInqF6vmUjSfj7oBN+8lm5bxTnhpOQl+gcK8qzst15HV/1D5+uJxhu6Pbe
nXHIkqvxcgKoHO+x5bhh/H+3HSHLxrY/6oDOmoqdjP9ey+Y4yMvihTOddaFX5j0o
yIMkMTKBqv7wOEgkRYGPLiN11yWfz9+sLBBQ6/Bxaj//Wo4xRPtnhTv0JmOpRJSj
heEy3gfBcXpj4rW9yuSotR7zyVLzKwD8NfKTrN2ngzn55uDTLxapqsoeDkLMLTQS
msb250HIcF8fSvIS0TILfs4WDHr+kp4YNq2IRmTJM8i70b8WQrN8PjNeCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3yewJRmNafyzkArsU6iQFmE5cSMB8GA1UdIwQY
MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt
MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0
LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2RIJAVIA
JilNfUFESU6PVH+78ImzTbOtAdKeKVzoY73EkCDWIi6bBtsjyu7fMoMGSktlIXxp
wrWl20ZsfknbGWWLxvV3dyfi7Esa2oBOJuCJ7zj6J77UhRZE4tR8L254CIHOGwIK
58rFi2ekGJQf3BxDudTegjV9xIh3VvASijA/s0SUmOj3Q5YcwKgnxgc3pV8cBVyc
lezn9+x1PiISFIQ+gxhFeFIku8c8mpAuzTRODzGEHWITqOi7jNX8bpU/laTXDyIH
tLU3bW7DI4XBNUisAzl+m0/l+8FRBPxotr9NmVfoKhvw+0ZFkGvlzkb4gJyG4L5v
Q5X79RcTJlF7dA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:18:41 2026 by rpki-client