Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: 86C8OSvytNG+Nf3ZaEz8wdmjwqCX8JGzyQXRN5oApBc=
Subject key identifier: F2:2C:EF:CF:AB:F1:50:BB:37:3C:D3:5B:13:3D:9E:83:8B:94:FE:80
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019F94DC6385AE50566B02558EB7A03C2F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 1143
Signing time: Fri 24 Jul 2026 16:01:38 +0000
Manifest this update: Fri 24 Jul 2026 16:01:38 +0000
Manifest next update: Sat 25 Jul 2026 16:01:38 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: rrZ/myxJ8GeqXK9YuZF8c/nWJnmYDunSkx1Wc+Bo0gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:63:85:ae:50:56:6b:02:55:8e:b7:a0:3c:2f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Jul 24 16:01:38 2026 GMT
Not After : Jul 25 16:01:38 2026 GMT
Subject: CN=f22cefcfabf150bb373cd35b133d9e838b94fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:f3:8d:d9:bf:9a:d1:e3:be:33:70:74:d2:
cb:bc:9c:6e:ea:05:a8:22:bf:cc:8e:64:a6:59:16:
81:c7:cc:d0:b7:00:b6:d5:f7:bc:99:22:11:16:fc:
30:7b:b9:7f:b7:3c:81:6c:76:be:d9:a9:9b:a5:9f:
56:29:0c:bd:b5:be:58:53:75:b4:6b:4b:39:93:54:
fc:bb:29:a4:45:14:f1:ec:eb:85:23:8a:4e:ca:e4:
29:f1:b6:f2:a6:cf:77:92:45:1e:76:ab:6f:fa:22:
7d:75:7c:32:ea:a9:8a:b3:ab:dd:07:6a:27:d3:e1:
8d:fa:05:b4:a2:b2:0b:05:cb:7c:a4:9c:72:b3:33:
9c:fb:e9:53:e9:86:c4:48:1e:eb:04:b4:a5:f1:49:
ed:08:4c:f0:74:a9:a0:c3:67:fb:e4:c4:53:df:e0:
a8:04:74:c2:41:b2:30:28:2b:61:22:64:9e:5e:bd:
78:32:04:9d:e5:5c:b1:d6:1f:0c:a1:e7:50:5e:97:
f0:d0:83:4f:99:a4:1c:e5:38:6d:19:ae:df:23:fa:
e6:8d:a1:36:d4:16:8b:82:a9:7a:a0:57:d4:64:a1:
8f:a4:44:1d:7d:46:a4:b9:e1:f5:3e:f4:cd:57:78:
55:1d:6d:71:46:27:d0:ed:0b:85:b3:7d:c8:ba:09:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:EF:CF:AB:F1:50:BB:37:3C:D3:5B:13:3D:9E:83:8B:94:FE:80
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:5d:30:24:e5:a9:19:a7:b4:e6:d0:c5:f7:e5:6e:d1:29:cc:
b1:33:6c:06:66:e3:25:fb:68:8f:b6:9b:a4:c7:7b:85:ca:e8:
3e:8d:a9:4d:9c:4d:ad:25:ad:78:72:08:d2:a6:4d:99:6f:27:
49:46:21:66:38:7f:78:a6:01:d2:fa:07:98:92:dc:b8:6e:88:
fc:af:4b:7d:55:1c:39:85:55:89:c7:ac:03:49:1e:df:66:e2:
38:77:62:b1:b5:d6:e5:47:c4:c4:ba:59:25:cf:17:d4:7c:85:
9c:0f:e6:34:1b:75:e7:ef:ab:87:a1:4f:d0:99:7c:02:a8:88:
22:44:d0:e8:d1:87:e6:ef:74:32:03:14:58:87:69:cb:96:40:
1f:8b:de:54:e7:1b:f3:60:e7:63:44:28:98:de:2c:b7:bd:87:
72:4d:11:76:3e:4f:e4:18:f8:19:b0:dd:4b:7c:b0:aa:50:2b:
41:58:b2:35:1f:09:8d:30:b3:d0:bd:ff:e6:1f:79:df:40:18:
5f:47:5a:e1:2e:c5:78:81:89:f3:32:1c:ac:eb:79:6c:e4:75:
c4:53:78:1b:94:1e:20:92:f0:24:70:c1:63:8d:98:c1:6d:95:
7e:87:87:ba:cf:4f:7d:ad:53:96:3a:6d:e4:9a:02:3e:8d:35:
6d:36:59:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3GOFrlBWawJVjregPC8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4
NThhNGMwHhcNMjYwNzI0MTYwMTM4WhcNMjYwNzI1MTYwMTM4WjAzMTEwLwYDVQQD
EyhmMjJjZWZjZmFiZjE1MGJiMzczY2QzNWIxMzNkOWU4MzhiOTRmZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lbzjdm/mtHjvjNwdNLLvJxu6gWo
Ir/MjmSmWRaBx8zQtwC21fe8mSIRFvwwe7l/tzyBbHa+2ambpZ9WKQy9tb5YU3W0
a0s5k1T8uymkRRTx7OuFI4pOyuQp8bbyps93kkUedqtv+iJ9dXwy6qmKs6vdB2on
0+GN+gW0orILBct8pJxyszOc++lT6YbESB7rBLSl8UntCEzwdKmgw2f75MRT3+Co
BHTCQbIwKCthImSeXr14MgSd5Vyx1h8MoedQXpfw0INPmaQc5ThtGa7fI/rmjaE2
1BaLgql6oFfUZKGPpEQdfUakueH1PvTNV3hVHW1xRifQ7QuFs33IugmTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIs78+r8VC7NzzTWxM9noOLlP6AMB8GA1UdIwQY
MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt
MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0
LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1F0wJOWp
Gae05tDF9+Vu0SnMsTNsBmbjJftoj7abpMd7hcroPo2pTZxNrSWteHII0qZNmW8n
SUYhZjh/eKYB0voHmJLcuG6I/K9LfVUcOYVVicesA0ke32biOHdisbXW5UfExLpZ
Jc8X1HyFnA/mNBt15++rh6FP0Jl8AqiIIkTQ6NGH5u90MgMUWIdpy5ZAH4veVOcb
82DnY0QomN4st72Hck0Rdj5P5Bj4GbDdS3ywqlArQViyNR8JjTCz0L3/5h9530AY
X0da4S7FeIGJ8zIcrOt5bOR1xFN4G5QeIJLwJHDBY42YwW2VfoeHus9Pfa1Tljpt
5JoCPo01bTZZ5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:17 2026 by rpki-client