Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: f5n3ECwctRQ04cFPVnE7MgwkUQJIfJCQtDP9dlQCPBw=
Subject key identifier: 6D:53:47:BD:F3:97:14:D4:C9:36:60:6A:91:06:99:F5:0F:15:1F:4E
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 01A0D983FD357A48FD47655124B61AE7FA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 0201
Signing time: Fri 25 Sep 2026 17:01:40 +0000
Manifest this update: Fri 25 Sep 2026 17:01:40 +0000
Manifest next update: Sat 26 Sep 2026 17:01:40 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: /HNH5gCiHs/zGDqeHRxyb82Oj6UepClxddXK0WykOf8=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:fd:35:7a:48:fd:47:65:51:24:b6:1a:e7:fa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Sep 25 17:01:40 2026 GMT
Not After : Sep 26 17:01:40 2026 GMT
Subject: CN=6d5347bdf39714d4c936606a910699f50f151f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:72:18:ba:14:08:36:04:20:45:bd:ca:27:
8d:17:09:37:bc:0f:76:54:a0:09:7f:8d:1a:c1:2d:
27:03:b6:8e:39:81:96:5a:78:d6:06:0f:72:aa:f6:
a0:99:5e:e2:3a:83:7c:52:7e:e6:45:df:39:c0:84:
d3:5b:f6:97:40:57:4a:d2:45:10:ad:56:9d:e7:68:
fc:86:fc:cf:3c:ad:91:c2:41:db:ea:e0:63:03:12:
14:e5:2a:28:e5:13:4d:4d:18:bf:14:02:3e:db:ad:
15:ee:8e:cc:95:fa:0d:a0:59:ac:d4:3a:1e:86:df:
1c:2b:90:90:de:06:92:80:8f:04:78:d0:16:17:76:
b9:f5:82:4c:c4:54:8d:9c:aa:03:d7:27:a8:f5:dd:
ab:a0:fb:8f:70:18:5a:b4:a7:b3:d6:36:db:ff:dc:
45:76:83:36:14:10:9a:06:d9:99:1a:9f:4a:91:a3:
99:89:be:06:25:4a:4b:9f:55:5b:b7:2f:3d:d7:e6:
11:85:36:32:f0:ef:9e:9a:a6:49:99:51:57:6c:3f:
72:29:c4:15:6b:16:1c:5c:47:8c:d5:1d:76:c7:65:
16:e5:51:34:2f:1f:c4:0b:08:85:5e:10:36:e2:19:
18:b1:fb:18:6c:9b:88:71:8a:63:64:63:f6:db:59:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:47:BD:F3:97:14:D4:C9:36:60:6A:91:06:99:F5:0F:15:1F:4E
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:7e:3a:ad:fe:77:27:2d:5a:18:06:13:27:f1:f6:c7:85:
7e:ac:a8:89:40:94:c4:b0:92:e9:3a:92:de:0a:92:ca:c5:ca:
c5:04:49:c9:25:cd:83:b9:24:88:a0:f9:f5:3f:99:74:c2:a8:
68:e0:bc:2a:43:8b:f8:13:7e:fe:cc:ec:51:8d:37:f8:fd:33:
e9:38:8d:b3:55:e7:f5:2b:a9:10:e4:8b:78:d4:0a:53:39:fb:
64:40:14:e6:6d:12:e5:75:29:04:ab:10:7b:38:4e:92:33:2f:
24:e3:8b:5f:31:54:5e:6e:7e:af:d2:04:26:65:a8:85:aa:96:
6a:ac:6d:8f:fd:7f:3d:8c:3c:ba:78:92:e5:57:cc:5f:d9:d7:
26:c0:90:e6:92:91:a5:09:db:7b:58:95:23:de:5e:26:92:c9:
6c:9c:12:cd:fb:15:2f:b8:f9:24:da:83:76:e7:0c:f3:e6:d1:
ef:c4:01:8b:a3:67:ff:b9:76:cb:ac:d9:c3:4a:f6:0b:5a:9b:
9f:39:73:a5:4c:6b:1b:f2:89:0d:37:e1:5f:84:29:60:43:c7:
56:9e:b0:8e:a4:1b:76:92:e7:d0:7b:40:e9:7c:ed:c4:36:a6:
f6:31:96:b8:63:79:f5:e4:48:5e:60:9f:9c:14:29:73:98:97:
96:37:7d:76
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDZg/01ekj9R2VRJLYa5/oKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MDU4OGNhMjI4OTdjNjlhMTAyOTQ5YTY4MmY5ZjFhMzU4
MzViYWIwHhcNMjYwOTI1MTcwMTQwWhcNMjYwOTI2MTcwMTQwWjAzMTEwLwYDVQQD
Eyg2ZDUzNDdiZGYzOTcxNGQ0YzkzNjYwNmE5MTA2OTlmNTBmMTUxZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZhyGLoUCDYEIEW9yieNFwk3vA92
VKAJf40awS0nA7aOOYGWWnjWBg9yqvagmV7iOoN8Un7mRd85wITTW/aXQFdK0kUQ
rVad52j8hvzPPK2RwkHb6uBjAxIU5Soo5RNNTRi/FAI+260V7o7MlfoNoFms1Doe
ht8cK5CQ3gaSgI8EeNAWF3a59YJMxFSNnKoD1yeo9d2roPuPcBhatKez1jbb/9xF
doM2FBCaBtmZGp9KkaOZib4GJUpLn1Vbty891+YRhTYy8O+emqZJmVFXbD9yKcQV
axYcXEeM1R12x2UW5VE0Lx/ECwiFXhA24hkYsfsYbJuIcYpjZGP221kfPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG1TR73zlxTUyTZgapEGmfUPFR9OMB8GA1UdIwQY
MBaAFPkFiMoiiXxpoQKUmmgvnxo1g1urMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1RV0l5aUtKZkdtaEFwU2FhQy1mR2pXRFc2cy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNDI1ZjJiLTBlYzAtNDY1Ny1hMDUw
LTU2OWYxZGQwYzAxZi8xLzEtUVdJeWlLSmZHbWhBcFNhYUMtZkdqV0RXNnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VmLzQyNWYyYi0wZWMwLTQ2NTctYTA1MC01NjlmMWRkMGMw
MWYvMS8xLVFXSXlpS0pmR21oQXBTYWFDLWZHaldEVzZzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1l+
Oq3+dyctWhgGEyfx9seFfqyoiUCUxLCS6TqS3gqSysXKxQRJySXNg7kkiKD59T+Z
dMKoaOC8KkOL+BN+/szsUY03+P0z6TiNs1Xn9SupEOSLeNQKUzn7ZEAU5m0S5XUp
BKsQezhOkjMvJOOLXzFUXm5+r9IEJmWohaqWaqxtj/1/PYw8uniS5VfMX9nXJsCQ
5pKRpQnbe1iVI95eJpLJbJwSzfsVL7j5JNqDducM8+bR78QBi6Nn/7l2y6zZw0r2
C1qbnzlzpUxrG/KJDTfhX4QpYEPHVp6wjqQbdpLn0HtA6XztxDam9jGWuGN59eRI
XmCfnBQpc5iXljd9dg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:11:37 2026 by rpki-client