Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: NGYWdu2kPK5mCKJSD6scXuWB/qjxw67kma0nvFxhmbU=
Subject key identifier: 4F:2A:45:CF:68:F3:81:BA:B4:CE:22:9B:0E:13:8C:66:43:A4:C5:29
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 01A1DFBA3A8316B12E72F24AABC81F9547C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 1062
Signing time: Sun 15 Nov 2026 15:01:26 +0000
Manifest this update: Sun 15 Nov 2026 15:01:26 +0000
Manifest next update: Mon 16 Nov 2026 15:01:26 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (hash: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=)
4: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: Dh8vaK3MfDO5lPSxyW70h4uTgG0mDfmlWM/BoGApguo=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:3a:83:16:b1:2e:72:f2:4a:ab:c8:1f:95:47:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Nov 15 15:01:26 2026 GMT
Not After : Nov 16 15:01:26 2026 GMT
Subject: CN=4f2a45cf68f381bab4ce229b0e138c6643a4c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:51:78:2f:c5:5f:d4:62:6c:8c:44:a2:7d:9d:
0d:52:14:7a:e9:e5:1d:69:5a:7a:82:45:ba:0c:10:
d4:33:cb:7e:a8:90:8d:0e:20:08:26:7d:b5:e2:d3:
79:f3:26:c1:22:33:fe:58:71:2d:68:20:e2:ce:56:
c4:29:a4:d5:d4:e4:eb:48:5f:66:bd:50:51:6b:ad:
00:de:6b:a5:c0:b6:ef:73:28:87:22:fb:c7:69:2b:
73:6c:ee:2c:bd:a2:3e:e3:cf:cd:b5:11:78:72:5f:
0e:bf:cf:b6:a2:5e:41:54:75:f9:cf:c3:8e:83:f0:
be:44:0a:90:fc:c5:84:c9:d8:24:fb:9d:e5:1e:d0:
7d:4a:e1:9f:39:79:1c:d8:5f:ca:04:7c:d4:32:04:
73:a7:d8:c8:f0:f2:96:0f:48:bd:21:82:95:a7:15:
db:dd:6c:95:05:07:96:a6:a1:10:29:62:5a:b3:0c:
6a:90:11:31:7e:34:4d:32:88:11:30:65:67:e0:03:
be:78:1c:fa:22:1b:b3:bf:01:65:10:f0:6c:14:13:
37:50:5f:c5:08:a4:2f:cc:e5:87:38:06:00:b5:9f:
e8:22:92:85:5a:7b:6a:2a:eb:5c:f7:a6:c6:37:14:
9b:e4:0e:ee:70:79:c3:a2:23:70:1b:e8:68:43:85:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:45:CF:68:F3:81:BA:B4:CE:22:9B:0E:13:8C:66:43:A4:C5:29
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6f:1e:67:4e:d0:77:93:91:48:15:fe:73:79:b2:d0:f0:0a:
d0:94:36:43:a8:e9:ef:76:0c:06:5a:fd:09:d8:31:69:a6:a0:
22:2e:10:25:e0:89:b3:33:80:f5:62:ff:31:ed:9e:a2:48:52:
a3:cd:83:14:93:57:5f:33:44:5f:cc:4c:3c:1c:ae:5c:a0:70:
ae:b8:c4:bf:20:7e:59:7f:c1:49:e3:21:3e:d0:d3:81:f9:d8:
71:9e:9c:8a:b3:66:86:e5:6e:cb:56:3d:aa:e2:2b:1b:70:d8:
d5:86:ce:3d:ca:78:5c:58:c8:42:90:14:fa:ac:91:b4:68:e0:
17:1d:0c:b5:75:af:48:fa:9e:4b:9c:6f:97:0e:83:e9:97:ba:
c2:12:14:42:ee:c4:86:99:cc:23:df:10:3b:fd:17:49:e8:87:
7d:b2:d9:11:ba:ff:67:38:33:47:24:fd:bf:5f:3f:19:41:02:
07:dc:ed:c0:4c:07:89:3f:62:66:82:ce:3d:c7:c2:8e:be:4c:
91:db:5d:6a:ce:6b:0d:9a:37:a3:18:d1:c9:7b:25:fa:2e:07:
a7:e5:76:87:cf:cb:b5:ac:5b:af:2a:42:d4:b9:6d:03:cd:50:
a4:e2:e7:33:f3:7e:ee:c2:e5:22:14:bd:50:7c:7b:1e:51:35:
db:6c:1d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:08:59 2026 by rpki-client