Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: odJTlQlOAQVht2kB1dw3N/hzs5ZsPGEHWYZ4fmDzmIE=
Subject key identifier: F2:FE:5B:8A:76:46:FD:74:42:D1:75:9A:8C:3C:F8:8B:82:B1:20:40
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01A117F3DF8AA0A930743C39109A1DA284DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1A94
Signing time: Wed 07 Oct 2026 20:00:20 +0000
Manifest this update: Wed 07 Oct 2026 20:00:20 +0000
Manifest next update: Thu 08 Oct 2026 20:00:20 +0000
Files and hashes: 1: e9ATf5sPxhIIrZkXrfrTWItTCA8.roa (hash: 9bYZXPWqJ0NbEhPnRTTZ2nAWZSD7VDe4KmSotczV1Og=)
2: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (hash: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss=)
3: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: sHH4eXl9kkpBo9IuR4M9EuaF0PPr7BWq7NnKxJuwlkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f3:df:8a:a0:a9:30:74:3c:39:10:9a:1d:a2:84:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Oct 7 20:00:20 2026 GMT
Not After : Oct 8 20:00:20 2026 GMT
Subject: CN=f2fe5b8a7646fd7442d1759a8c3cf88b82b12040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:68:ac:8f:1a:35:a2:72:0d:f7:ce:60:45:
5d:2a:d0:fa:80:74:a2:9e:d4:75:b5:af:8b:1d:6b:
5e:c3:d4:5c:2a:a9:34:02:af:45:e2:7d:e8:5f:7e:
e9:64:5b:15:93:a8:af:f7:d2:b5:c0:91:d6:68:64:
ce:af:72:ae:d3:d3:22:4b:26:d0:a4:c8:0e:a2:6f:
aa:ec:c1:50:73:34:9d:60:86:79:d7:7a:c9:45:80:
75:db:83:60:b4:20:b7:72:13:53:21:93:68:45:ce:
98:c7:b1:80:6e:c0:d7:d2:a2:8a:72:8e:14:f4:e5:
17:1a:ab:ea:09:68:d9:50:45:f0:7b:5a:44:e4:84:
6c:7d:a1:fd:cb:3d:bc:36:96:ea:5f:80:66:b1:d2:
12:80:83:3f:ea:fb:5b:61:23:53:a9:fd:8f:e9:99:
33:43:63:85:f9:16:6a:f5:39:24:c1:f9:9d:7f:43:
cb:43:eb:28:29:21:76:a5:d0:dd:9a:29:2f:c9:51:
77:67:f6:f1:06:17:15:a8:a2:d4:0c:58:9c:4b:c2:
47:7c:70:3e:ee:83:2d:73:39:71:09:70:7b:75:10:
01:ec:26:09:69:34:d2:53:6f:06:9f:82:8a:70:09:
b0:20:06:e5:56:fa:b8:e1:82:48:92:60:d9:32:f6:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:5B:8A:76:46:FD:74:42:D1:75:9A:8C:3C:F8:8B:82:B1:20:40
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:22:2d:5a:2b:0e:06:09:c0:57:a2:12:e2:5a:6f:b9:98:
f1:1a:df:f4:79:5f:e0:cd:15:e5:e1:22:05:d6:ae:10:73:07:
9a:e1:55:22:3b:78:58:0e:1d:af:7b:7f:5c:3c:c6:50:c2:2c:
57:8c:c8:98:0f:dc:e4:56:28:65:d8:9a:12:46:ee:e9:16:92:
bb:86:52:31:73:ad:6a:4f:91:ec:fa:d7:87:95:db:f1:46:97:
af:68:cf:17:13:d4:c2:bb:2f:77:dc:b7:32:e6:42:36:ba:c3:
28:6d:96:3c:55:49:a7:1c:14:b4:61:d9:d3:b4:26:ff:62:de:
37:bd:d9:25:a2:15:3c:42:54:a4:54:a4:18:ed:b0:69:53:b4:
5a:6c:66:2a:f9:e6:68:90:42:02:ff:a6:37:b1:7a:d9:37:27:
37:5f:84:6a:5d:9d:6b:0a:4f:c2:62:e4:54:ab:0d:b6:d4:75:
4c:93:a3:61:54:00:26:87:a2:5e:0b:43:e3:e6:6a:01:53:bd:
d4:60:24:33:b1:f6:53:d2:e9:ce:9b:80:92:5d:34:b1:08:2f:
53:fb:4f:8d:87:7b:7c:8e:a3:d8:1d:87:ab:92:a6:0d:20:93:
08:44:3b:ab:34:48:98:99:77:a6:24:5d:44:b6:23:73:68:65:
9d:92:65:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEX89+KoKkwdDw5EJodooTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy
MjI3YTMwHhcNMjYxMDA3MjAwMDIwWhcNMjYxMDA4MjAwMDIwWjAzMTEwLwYDVQQD
EyhmMmZlNWI4YTc2NDZmZDc0NDJkMTc1OWE4YzNjZjg4YjgyYjEyMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y1orI8aNaJyDffOYEVdKtD6gHSi
ntR1ta+LHWtew9RcKqk0Aq9F4n3oX37pZFsVk6iv99K1wJHWaGTOr3Ku09MiSybQ
pMgOom+q7MFQczSdYIZ513rJRYB124NgtCC3chNTIZNoRc6Yx7GAbsDX0qKKco4U
9OUXGqvqCWjZUEXwe1pE5IRsfaH9yz28NpbqX4BmsdISgIM/6vtbYSNTqf2P6Zkz
Q2OF+RZq9Tkkwfmdf0PLQ+soKSF2pdDdmikvyVF3Z/bxBhcVqKLUDFicS8JHfHA+
7oMtczlxCXB7dRAB7CYJaTTSU28Gn4KKcAmwIAblVvq44YJIkmDZMvYEwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL+W4p2Rv10QtF1mow8+IuCsSBAMB8GA1UdIwQY
MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt
OWFhN2NkNjUwNWU1LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1
LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr8iLVor
DgYJwFeiEuJab7mY8Rrf9Hlf4M0V5eEiBdauEHMHmuFVIjt4WA4dr3t/XDzGUMIs
V4zImA/c5FYoZdiaEkbu6RaSu4ZSMXOtak+R7PrXh5Xb8UaXr2jPFxPUwrsvd9y3
MuZCNrrDKG2WPFVJpxwUtGHZ07Qm/2LeN73ZJaIVPEJUpFSkGO2waVO0WmxmKvnm
aJBCAv+mN7F62TcnN1+Eal2dawpPwmLkVKsNttR1TJOjYVQAJoeiXgtD4+ZqAVO9
1GAkM7H2U9LpzpuAkl00sQgvU/tPjYd7fI6j2B2Hq5KmDSCTCEQ7qzRImJl3piRd
RLYjc2hlnZJlwg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:26:19 2026 by rpki-client