Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: ++YA6Jxv17TGlyVv4zEEkqeNFP2+NK/Jqkah0JpQERY=
Subject key identifier: 98:FB:0A:28:CC:95:18:35:C2:9D:AB:5D:4C:96:35:72:00:C5:CD:77
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01A1DB38447B753F4CFAF9125B8B09F13D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 060A
Signing time: Sat 14 Nov 2026 18:01:00 +0000
Manifest this update: Sat 14 Nov 2026 18:01:00 +0000
Manifest next update: Sun 15 Nov 2026 18:01:00 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: DJR7r6YZ45xzVKQ+yYtC8C3yrjP+auUl0YSKCY+MOq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:44:7b:75:3f:4c:fa:f9:12:5b:8b:09:f1:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Nov 14 18:01:00 2026 GMT
Not After : Nov 15 18:01:00 2026 GMT
Subject: CN=98fb0a28cc951835c29dab5d4c96357200c5cd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:2b:e2:3c:b3:54:53:53:4b:c9:75:33:f2:
9e:3f:3f:97:82:1c:44:c8:6d:3c:9a:86:a5:9d:d7:
ae:9e:89:53:43:79:91:c9:20:54:cc:87:3c:e7:8e:
cd:44:17:da:2e:32:51:a4:40:79:5f:e4:46:92:a4:
82:3f:ad:c8:47:f3:8e:18:ec:85:6a:1f:57:a4:77:
23:ab:49:2a:a2:ae:df:ff:88:ed:f6:ef:b5:ac:12:
8f:f2:9e:93:ac:6f:48:05:6d:a2:16:06:d0:ab:ae:
dc:c2:03:97:d7:07:c3:0e:b2:21:17:df:9e:1a:0d:
2b:7f:a0:e5:81:13:43:71:08:41:3f:15:ef:d9:cd:
cf:35:5f:53:83:13:4b:4f:fc:35:06:d7:bc:16:1a:
d3:29:16:c2:4d:0d:53:b6:38:f3:b2:27:d7:83:68:
be:be:75:60:b2:b6:97:4d:03:49:f5:e8:83:b5:47:
1d:2a:73:d8:b1:00:97:2e:9e:68:21:60:fe:98:ba:
b4:7d:d1:2b:1f:84:76:42:d6:e3:13:4e:9d:c2:40:
ba:10:e3:32:a7:aa:ab:6c:b0:e5:99:34:c7:af:f0:
6d:ef:41:5e:e2:d2:e8:62:23:e9:81:c3:3d:6f:bb:
90:11:19:fa:90:4f:2d:95:ac:dc:bc:3a:64:08:e1:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:0A:28:CC:95:18:35:C2:9D:AB:5D:4C:96:35:72:00:C5:CD:77
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:8e:b5:37:35:27:46:a2:59:29:5c:95:64:0a:ae:fd:2f:
41:9d:8b:7d:d6:f8:5b:a6:3d:2d:a8:7f:43:21:43:6b:28:5a:
5f:28:fc:de:28:a0:af:a1:20:2c:c6:a7:c9:ee:21:2d:62:d4:
59:d8:8d:47:aa:06:71:2c:9a:13:92:48:93:95:32:01:86:b1:
b1:24:68:c6:db:e9:e0:39:91:a0:30:e8:df:90:fc:4d:9a:4e:
a0:c2:03:a2:cd:d0:98:e4:c5:9e:df:47:4e:7d:ab:31:db:56:
5b:33:b2:aa:1b:c7:f6:8f:98:d1:70:90:71:56:15:ed:90:50:
0b:29:33:3e:d0:99:29:1a:3b:75:54:13:69:ae:ec:6b:15:40:
e0:fa:07:1b:37:3b:9f:a8:87:c9:9a:f6:6d:d7:fb:fa:4b:24:
23:49:64:bd:9b:92:ad:0f:a4:25:07:8e:9a:d7:26:39:32:44:
57:fa:65:f9:a1:7b:4e:34:b9:20:42:80:b4:b0:11:24:cc:a5:
93:b9:44:74:92:ec:49:15:8d:ad:8a:ec:ba:5d:78:e3:47:79:
91:29:de:fe:66:b8:8c:b1:22:c0:7c:13:9a:d4:f9:33:a6:f3:
f5:a4:e6:eb:57:82:bc:47:31:8e:c9:e7:f7:e5:82:07:ac:46:
d1:90:68:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbOER7dT9M+vkSW4sJ8T0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0
MmM3ZDEwHhcNMjYxMTE0MTgwMTAwWhcNMjYxMTE1MTgwMTAwWjAzMTEwLwYDVQQD
Eyg5OGZiMGEyOGNjOTUxODM1YzI5ZGFiNWQ0Yzk2MzU3MjAwYzVjZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLMr4jyzVFNTS8l1M/KePz+XghxE
yG08moalndeunolTQ3mRySBUzIc8547NRBfaLjJRpEB5X+RGkqSCP63IR/OOGOyF
ah9XpHcjq0kqoq7f/4jt9u+1rBKP8p6TrG9IBW2iFgbQq67cwgOX1wfDDrIhF9+e
Gg0rf6DlgRNDcQhBPxXv2c3PNV9TgxNLT/w1Bte8FhrTKRbCTQ1TtjjzsifXg2i+
vnVgsraXTQNJ9eiDtUcdKnPYsQCXLp5oIWD+mLq0fdErH4R2QtbjE06dwkC6EOMy
p6qrbLDlmTTHr/Bt70Fe4tLoYiPpgcM9b7uQERn6kE8tlazcvDpkCOH5hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj7CijMlRg1wp2rXUyWNXIAxc13MB8GA1UdIwQY
MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt
ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl
LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFmOtTc1
J0aiWSlclWQKrv0vQZ2Lfdb4W6Y9Lah/QyFDayhaXyj83iigr6EgLManye4hLWLU
WdiNR6oGcSyaE5JIk5UyAYaxsSRoxtvp4DmRoDDo35D8TZpOoMIDos3QmOTFnt9H
Tn2rMdtWWzOyqhvH9o+Y0XCQcVYV7ZBQCykzPtCZKRo7dVQTaa7saxVA4PoHGzc7
n6iHyZr2bdf7+kskI0lkvZuSrQ+kJQeOmtcmOTJEV/pl+aF7TjS5IEKAtLARJMyl
k7lEdJLsSRWNrYrsul1440d5kSne/ma4jLEiwHwTmtT5M6bz9aTm61eCvEcxjsnn
9+WCB6xG0ZBoqA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 02:39:17 2026 by rpki-client