Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: i6+n14e+G8rblLbmeqm41l8GScZHmyFJLFG4kznBk/w=
Subject key identifier: C6:38:36:78:26:B0:F5:18:12:AE:22:B1:47:7F:C2:F6:72:9D:F1:ED
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01A1DD26D26A731B4EBEBFB29BB4FD22BA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 118C
Signing time: Sun 15 Nov 2026 03:01:11 +0000
Manifest this update: Sun 15 Nov 2026 03:01:11 +0000
Manifest next update: Mon 16 Nov 2026 03:01:11 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: cjaOeED4yeCoHCas0hK2w90lWm5e6SY9TnW0bH9yfxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:d2:6a:73:1b:4e:be:bf:b2:9b:b4:fd:22:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Nov 15 03:01:11 2026 GMT
Not After : Nov 16 03:01:11 2026 GMT
Subject: CN=c638367826b0f51812ae22b1477fc2f6729df1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:34:f0:4c:2e:4c:1c:af:67:f4:ec:0b:de:
8e:63:96:c4:0e:c4:e9:8a:48:8c:9b:b4:ea:f1:82:
db:51:17:36:59:a5:6d:86:3d:57:d5:22:98:76:97:
ef:42:38:47:0c:39:a8:05:a2:07:ca:db:50:22:17:
a6:a4:0c:10:c4:88:c5:de:62:8b:bb:3d:b0:b4:0f:
d7:63:ea:5d:ea:ae:55:26:ad:a5:af:b9:dd:14:e6:
bd:4c:80:a7:04:e7:93:3e:35:19:d4:1a:e3:5d:0b:
e4:64:e1:25:26:8d:8f:72:c0:9c:8b:81:11:1f:1b:
ca:86:48:a5:28:c4:c5:c4:7b:3d:93:47:a7:ad:b0:
e2:46:93:17:39:7a:7d:c1:18:d3:aa:8d:13:26:5a:
c8:91:a2:af:ec:46:0b:8c:62:de:b9:14:43:eb:d8:
4d:1e:53:70:29:70:e9:60:10:14:6b:13:c7:61:3a:
62:2a:42:9d:2d:ec:b2:49:be:6b:47:f9:0a:fe:e7:
ad:00:9d:b3:e6:12:6c:52:b5:65:01:89:60:fd:35:
03:33:68:30:c8:9d:19:f6:7f:70:d7:8e:14:ec:ab:
25:fa:18:01:de:dc:c7:aa:a2:75:fc:15:c5:e2:3c:
91:e3:b5:c8:a2:95:da:e6:6b:d4:9e:5c:4c:c8:f5:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:36:78:26:B0:F5:18:12:AE:22:B1:47:7F:C2:F6:72:9D:F1:ED
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:31:f6:ba:d4:40:f7:94:16:a4:bf:b6:36:1f:0d:a8:f9:96:
61:66:0b:20:67:0e:64:cf:45:c1:ba:2a:36:c8:70:21:64:08:
c7:37:17:fe:a5:a4:a6:83:d6:6f:5f:6e:19:2d:72:70:d7:ac:
9c:1e:08:19:35:95:6e:8b:97:32:25:37:3e:b8:73:0d:90:70:
db:09:09:76:88:d6:5c:d9:7c:d3:09:fa:23:4e:87:4d:9c:47:
4e:7e:55:e8:23:da:46:18:2a:7d:b5:d1:0c:f5:a8:22:ec:78:
90:3c:aa:ea:fa:5d:6b:b7:b0:ff:f1:fa:3e:01:9c:68:a8:80:
55:9d:1b:5a:cc:a6:76:5f:1e:37:8e:e3:d8:54:3a:0a:79:25:
e1:f0:df:cd:9e:19:6b:8e:b7:ef:c1:56:9e:5d:f3:73:af:fb:
f5:5c:83:55:ff:d1:f6:a3:95:17:59:f7:59:af:63:db:08:19:
1f:c1:88:33:83:2e:12:8a:8f:c6:aa:78:63:ee:b9:cc:16:de:
ee:19:39:94:05:33:50:43:84:e8:a2:3c:02:63:78:7c:37:17:
60:98:1e:da:a8:8d:6d:b1:a8:56:46:eb:64:b2:ed:2a:b0:2b:
27:56:09:b1:1a:a1:42:b1:d1:90:43:a0:13:3b:ad:ad:d2:6e:
5c:c3:dd:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdJtJqcxtOvr+ym7T9IrpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2
MTljY2QwHhcNMjYxMTE1MDMwMTExWhcNMjYxMTE2MDMwMTExWjAzMTEwLwYDVQQD
EyhjNjM4MzY3ODI2YjBmNTE4MTJhZTIyYjE0NzdmYzJmNjcyOWRmMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yM08EwuTByvZ/TsC96OY5bEDsTp
ikiMm7Tq8YLbURc2WaVthj1X1SKYdpfvQjhHDDmoBaIHyttQIhempAwQxIjF3mKL
uz2wtA/XY+pd6q5VJq2lr7ndFOa9TICnBOeTPjUZ1BrjXQvkZOElJo2PcsCci4ER
HxvKhkilKMTFxHs9k0enrbDiRpMXOXp9wRjTqo0TJlrIkaKv7EYLjGLeuRRD69hN
HlNwKXDpYBAUaxPHYTpiKkKdLeyySb5rR/kK/uetAJ2z5hJsUrVlAYlg/TUDM2gw
yJ0Z9n9w144U7Ksl+hgB3tzHqqJ1/BXF4jyR47XIopXa5mvUnlxMyPWfjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY4NngmsPUYEq4isUd/wvZynfHtMB8GA1UdIwQY
MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt
ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw
LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDH2utRA
95QWpL+2Nh8NqPmWYWYLIGcOZM9FwboqNshwIWQIxzcX/qWkpoPWb19uGS1ycNes
nB4IGTWVbouXMiU3PrhzDZBw2wkJdojWXNl80wn6I06HTZxHTn5V6CPaRhgqfbXR
DPWoIux4kDyq6vpda7ew//H6PgGcaKiAVZ0bWsymdl8eN47j2FQ6Cnkl4fDfzZ4Z
a46378FWnl3zc6/79VyDVf/R9qOVF1n3Wa9j2wgZH8GIM4MuEoqPxqp4Y+65zBbe
7hk5lAUzUEOE6KI8AmN4fDcXYJge2qiNbbGoVkbrZLLtKrArJ1YJsRqhQrHRkEOg
EzutrdJuXMPd5g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:39:10 2026 by rpki-client