Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: j6hAz07/erYEsaf7N8ceRjjM45+kF0ZWS6tfugpYMOc=
Subject key identifier: FC:90:1B:DF:2D:55:1D:0F:F6:B3:A5:13:B0:34:D7:48:EA:70:E0:1F
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 01A12A6933B82C5F72BE778657D3D929C83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 1215
Signing time: Sun 11 Oct 2026 10:01:39 +0000
Manifest this update: Sun 11 Oct 2026 10:01:39 +0000
Manifest next update: Mon 12 Oct 2026 10:01:39 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: j+qqsnFEw8wr+RFKDbrbPX5mnzj3GMKy7aQsrR2W1wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:69:33:b8:2c:5f:72:be:77:86:57:d3:d9:29:c8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Oct 11 10:01:39 2026 GMT
Not After : Oct 12 10:01:39 2026 GMT
Subject: CN=fc901bdf2d551d0ff6b3a513b034d748ea70e01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:b1:6b:a9:b3:75:f6:c3:a2:04:e7:61:6b:
e2:01:6d:a5:89:66:24:a8:b1:a4:66:35:73:4f:57:
74:5c:c2:3d:07:18:6d:e6:b5:60:48:e9:12:33:ba:
03:9b:b2:cd:7b:d7:0e:4a:60:ee:54:15:d2:68:7f:
3d:d5:e1:75:43:fc:f6:e8:67:27:0f:0c:a6:c2:5f:
78:33:91:30:57:cc:95:6e:b1:c0:75:d9:4d:4e:18:
bd:52:f4:c0:ee:26:13:fa:30:f5:35:a2:ae:8d:7d:
e3:89:3c:9e:72:31:96:77:00:cd:63:4f:5d:52:f8:
09:44:77:09:6e:b4:83:3f:b6:03:93:59:fe:81:70:
16:04:5c:7b:86:fd:f3:99:24:59:dc:1f:ba:be:82:
d0:84:87:56:35:13:b4:d9:67:ef:16:59:ad:54:9d:
69:79:82:26:55:cf:df:38:08:7a:41:ae:0f:14:eb:
8b:64:45:6e:4d:b3:91:20:fa:ef:ef:16:7d:c0:14:
8d:a6:39:d7:60:f2:55:10:93:5a:5d:70:3f:4d:84:
19:32:95:42:1a:d7:7f:f1:fb:9f:6c:b8:75:98:c3:
1c:ff:ff:16:13:75:83:02:3e:39:89:93:71:bd:e7:
b5:19:72:75:a5:1e:b8:87:e3:3f:b2:05:85:c6:60:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:1B:DF:2D:55:1D:0F:F6:B3:A5:13:B0:34:D7:48:EA:70:E0:1F
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:70:3f:69:4c:20:bd:79:2a:eb:d1:2a:8a:7f:86:b5:f5:ad:
59:cf:45:29:07:8b:7e:99:4c:fd:e1:aa:ed:6b:23:f6:40:8b:
65:5a:51:20:d2:76:1a:a3:49:c5:7c:21:14:9f:dd:29:e4:50:
62:ee:cb:c6:19:11:41:19:23:6c:6b:8f:a6:0c:88:e0:d3:4c:
00:96:7d:65:2f:ca:c2:4b:a8:fc:62:c4:f3:86:49:fb:19:ea:
9e:d1:ca:16:0d:92:bc:96:58:ea:d0:ed:ef:d6:07:1a:45:59:
ae:26:d6:6d:44:01:d4:f3:cf:d7:38:62:8c:9c:9e:ad:66:c3:
6f:63:78:b4:49:f7:28:60:26:5a:28:6a:6c:cc:71:19:e8:db:
aa:4d:25:c7:28:9e:e4:8d:63:a6:42:ec:ed:b8:88:a8:95:36:
e7:7c:c0:86:0c:45:7c:b7:e6:83:e1:7a:ca:c1:b6:31:4d:35:
d3:1e:df:74:4e:51:2e:54:67:a0:40:b9:ee:dc:e5:98:72:16:
e4:58:44:74:66:ec:a9:f4:62:44:aa:f1:57:fa:be:66:1a:04:
ee:5f:2e:93:99:07:96:84:ce:7f:d4:e9:76:1a:35:c5:15:64:
91:22:2a:f9:30:6c:0d:7d:d9:2c:b8:04:01:f3:3a:e4:b0:ba:
45:21:0a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqaTO4LF9yvneGV9PZKcg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4
NThhNGMwHhcNMjYxMDExMTAwMTM5WhcNMjYxMDEyMTAwMTM5WjAzMTEwLwYDVQQD
EyhmYzkwMWJkZjJkNTUxZDBmZjZiM2E1MTNiMDM0ZDc0OGVhNzBlMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxuxa6mzdfbDogTnYWviAW2liWYk
qLGkZjVzT1d0XMI9Bxht5rVgSOkSM7oDm7LNe9cOSmDuVBXSaH891eF1Q/z26Gcn
Dwymwl94M5EwV8yVbrHAddlNThi9UvTA7iYT+jD1NaKujX3jiTyecjGWdwDNY09d
UvgJRHcJbrSDP7YDk1n+gXAWBFx7hv3zmSRZ3B+6voLQhIdWNRO02WfvFlmtVJ1p
eYImVc/fOAh6Qa4PFOuLZEVuTbORIPrv7xZ9wBSNpjnXYPJVEJNaXXA/TYQZMpVC
Gtd/8fufbLh1mMMc//8WE3WDAj45iZNxvee1GXJ1pR64h+M/sgWFxmCesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyQG98tVR0P9rOlE7A010jqcOAfMB8GA1UdIwQY
MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt
MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0
LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2HA/aUwg
vXkq69Eqin+GtfWtWc9FKQeLfplM/eGq7Wsj9kCLZVpRINJ2GqNJxXwhFJ/dKeRQ
Yu7LxhkRQRkjbGuPpgyI4NNMAJZ9ZS/Kwkuo/GLE84ZJ+xnqntHKFg2SvJZY6tDt
79YHGkVZribWbUQB1PPP1zhijJyerWbDb2N4tEn3KGAmWihqbMxxGejbqk0lxyie
5I1jpkLs7biIqJU253zAhgxFfLfmg+F6ysG2MU010x7fdE5RLlRnoEC57tzlmHIW
5FhEdGbsqfRiRKrxV/q+ZhoE7l8uk5kHloTOf9Tpdho1xRVkkSIq+TBsDX3ZLLgE
AfM65LC6RSEK/w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:14:55 2026 by rpki-client