Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: HQHuPIVZMY/xv9jfDQ8WiGS+rc7P56TS5Ah/PrHUBeE=
Subject key identifier: 28:F1:AA:8E:A1:B1:43:32:A6:93:B1:C3:22:26:C8:87:AF:D3:D4:3D
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 01A0E1066D31F6AF51034FD51532D86A9258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0D1B
Signing time: Sun 27 Sep 2026 04:01:29 +0000
Manifest this update: Sun 27 Sep 2026 04:01:29 +0000
Manifest next update: Mon 28 Sep 2026 04:01:29 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: dA702AUFWncLCVmswqyYkJceUYbhpt7YyfZeR0+U3fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:6d:31:f6:af:51:03:4f:d5:15:32:d8:6a:92:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Sep 27 04:01:29 2026 GMT
Not After : Sep 28 04:01:29 2026 GMT
Subject: CN=28f1aa8ea1b14332a693b1c32226c887afd3d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:8b:d6:56:77:4d:ac:2d:18:ef:07:49:78:
1f:1e:97:00:7a:62:bb:e6:e7:1d:f8:e9:11:bf:24:
1e:1d:a8:4f:4c:2f:a3:6e:29:26:3a:30:d5:d6:5f:
21:ed:59:15:49:1e:f2:64:6b:ed:66:9d:14:11:26:
df:10:90:05:e9:51:92:15:57:02:f8:1b:53:7d:a6:
ca:8b:96:07:54:58:cb:42:ec:de:a0:7b:3f:e2:03:
c9:b2:e3:27:9d:38:fe:06:0c:a2:7e:19:04:42:d1:
71:6d:95:6e:cc:30:90:75:a6:1b:e7:15:28:58:62:
aa:4d:f0:5a:83:24:df:63:b6:76:8f:18:86:6f:98:
31:e8:77:01:c9:06:66:95:fa:33:52:79:69:f2:48:
a4:dd:80:a9:06:13:88:75:ca:a1:7c:6a:48:ae:70:
ef:6f:38:7c:42:f4:2d:68:1d:d5:da:d3:ae:35:23:
e8:8d:18:53:e5:cd:52:7c:9e:03:f3:e5:db:03:83:
cc:c3:35:13:f8:16:31:80:ec:44:be:27:92:98:39:
14:fd:f7:85:2f:50:ba:dd:2a:2f:e8:2b:95:1a:63:
0b:5e:e2:24:ce:a0:ba:2b:c2:43:32:47:6d:33:ee:
14:af:77:b8:8a:3c:c0:be:18:63:05:ee:88:9a:ce:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F1:AA:8E:A1:B1:43:32:A6:93:B1:C3:22:26:C8:87:AF:D3:D4:3D
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:14:18:d4:a6:49:16:ab:e8:c7:18:99:e0:61:0d:fd:20:52:
52:9e:61:ad:da:2c:5f:3d:11:f6:d4:ca:45:75:b1:21:4a:26:
be:b5:7e:92:bd:84:9c:98:67:94:96:96:b0:2e:2b:40:1f:53:
e6:9b:7d:70:de:b9:27:6f:37:c7:4c:88:b9:ef:d8:30:ee:ae:
56:c0:37:04:03:db:20:25:d7:d9:14:c0:80:ff:3a:e8:12:16:
f1:a7:2a:f6:ad:3a:8b:9e:65:85:21:58:91:a4:99:97:a3:2b:
53:98:f4:cf:db:89:7d:6e:54:b9:16:8a:9b:ac:fc:09:e7:2c:
de:70:9d:c4:1f:f1:9d:3e:15:38:54:ba:fc:ff:7f:d7:3a:be:
3c:67:52:46:2d:20:6f:33:b7:b3:90:61:c9:79:71:88:43:8d:
92:7a:ea:3c:61:4b:e1:ec:1c:64:d7:3f:2f:19:49:7d:ae:56:
f9:2b:25:20:12:b9:d4:38:8d:c0:a0:7f:10:9e:79:d8:de:79:
f2:af:01:22:8a:ad:86:f1:97:f6:76:93:d2:c7:da:45:37:1f:
5b:5b:71:0c:06:38:38:58:79:b5:6d:da:c1:99:c8:b6:76:46:
1a:2e:e4:95:0b:73:68:de:a8:39:cf:48:c5:e9:cc:81:b6:47:
b6:98:7f:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhBm0x9q9RA0/VFTLYapJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMmI3OTQyNjg5MmVkMWRhN2IyZTYxODY3NzBjZmIwNGFl
NjAzY2QwHhcNMjYwOTI3MDQwMTI5WhcNMjYwOTI4MDQwMTI5WjAzMTEwLwYDVQQD
EygyOGYxYWE4ZWExYjE0MzMyYTY5M2IxYzMyMjI2Yzg4N2FmZDNkNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBSL1lZ3TawtGO8HSXgfHpcAemK7
5ucd+OkRvyQeHahPTC+jbikmOjDV1l8h7VkVSR7yZGvtZp0UESbfEJAF6VGSFVcC
+BtTfabKi5YHVFjLQuzeoHs/4gPJsuMnnTj+BgyifhkEQtFxbZVuzDCQdaYb5xUo
WGKqTfBagyTfY7Z2jxiGb5gx6HcByQZmlfozUnlp8kik3YCpBhOIdcqhfGpIrnDv
bzh8QvQtaB3V2tOuNSPojRhT5c1SfJ4D8+XbA4PMwzUT+BYxgOxEvieSmDkU/feF
L1C63Sov6CuVGmMLXuIkzqC6K8JDMkdtM+4Ur3e4ijzAvhhjBe6Ims52JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjxqo6hsUMyppOxwyImyIev09Q9MB8GA1UdIwQY
MBaAFKsreUJoku0dp7LmGGdwz7BK5gPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hMjYwNTAtNDllYy00OTU1LTk4MTAt
ZTU0NTM3MDdhNThlLzEvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hMjYwNTAtNDllYy00OTU1LTk4MTAtZTU0NTM3MDdhNThl
LzEvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBQY1KZJ
FqvoxxiZ4GEN/SBSUp5hrdosXz0R9tTKRXWxIUomvrV+kr2EnJhnlJaWsC4rQB9T
5pt9cN65J283x0yIue/YMO6uVsA3BAPbICXX2RTAgP866BIW8acq9q06i55lhSFY
kaSZl6MrU5j0z9uJfW5UuRaKm6z8Cecs3nCdxB/xnT4VOFS6/P9/1zq+PGdSRi0g
bzO3s5BhyXlxiEONknrqPGFL4ewcZNc/LxlJfa5W+SslIBK51DiNwKB/EJ552N55
8q8BIoqthvGX9naT0sfaRTcfW1txDAY4OFh5tW3awZnItnZGGi7klQtzaN6oOc9I
xenMgbZHtph/TA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:06 2026 by rpki-client