Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: 6l5rpeZhIy5EAS6/9thlYf/FMlIJUbfB0ZehoIo79a4=
Subject key identifier: 00:2A:23:99:F7:2B:1E:11:EB:BE:12:6D:BF:EC:13:D6:9B:17:ED:D3
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 01A1AABA13B2332F9702CE9856F2817D88A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1AE1
Signing time: Thu 05 Nov 2026 08:01:23 +0000
Manifest this update: Thu 05 Nov 2026 08:01:23 +0000
Manifest next update: Fri 06 Nov 2026 08:01:23 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: yb7tWlCLc9uqk9YyKSvwyqbjEa/zhiEs+7Ulq5JBgEo=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:13:b2:33:2f:97:02:ce:98:56:f2:81:7d:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Nov 5 08:01:23 2026 GMT
Not After : Nov 6 08:01:23 2026 GMT
Subject: CN=002a2399f72b1e11ebbe126dbfec13d69b17edd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:4a:7b:e5:3e:d3:98:f6:cb:e8:b1:12:db:
e7:8c:a9:cb:c1:10:ba:fd:83:78:75:32:6b:56:c1:
2d:54:98:99:13:af:d4:72:dd:91:c7:ae:a3:8d:ff:
45:0c:f6:ce:7d:77:cb:29:ea:63:8c:01:d5:31:da:
78:1e:d5:17:bb:27:67:70:c4:18:f3:cd:09:2a:d6:
3f:1b:07:38:73:1d:a9:9c:c5:3d:b7:b3:b8:6a:70:
1f:8e:99:3c:48:f6:40:29:39:14:bd:af:b9:7f:d9:
74:c7:c8:5e:ba:9a:4c:38:7b:9d:12:bb:ca:a8:27:
8c:d5:e7:f0:7c:f4:9d:f8:ef:b4:07:1b:cc:df:b6:
ac:0c:f3:f2:0c:50:ff:b4:0a:06:ac:6a:2b:5c:33:
d7:e9:07:71:6f:1c:cb:e6:f2:74:61:04:69:ed:fb:
49:a4:d1:67:31:04:eb:49:f9:8c:aa:d1:70:75:98:
81:32:7a:89:bf:9c:5f:2f:30:a6:bb:fe:4e:bb:30:
68:aa:ff:7e:23:0b:d1:f1:bd:53:6c:3c:5d:fc:98:
82:99:b8:eb:ec:3d:e4:24:75:47:ce:4b:53:29:e5:
ac:2e:31:47:72:42:da:bb:70:f3:34:db:36:8c:d1:
20:62:87:6a:d7:c7:f2:74:d5:80:3b:36:55:fc:45:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:23:99:F7:2B:1E:11:EB:BE:12:6D:BF:EC:13:D6:9B:17:ED:D3
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bd:0e:12:b4:bb:60:29:28:e9:fc:56:f7:30:3e:6f:fc:b4:
e1:de:eb:ee:62:26:b5:07:ec:bb:22:fe:cc:6c:ab:47:7f:06:
00:45:bf:7f:14:13:92:80:30:dc:d8:01:ee:f7:a5:22:c3:e8:
61:dd:3e:34:53:e1:60:6b:71:a3:ca:06:03:ab:47:4e:b0:56:
4f:46:a2:74:b6:12:1d:05:9a:cd:a7:30:05:d7:01:36:6c:4e:
98:82:63:ed:cb:10:b3:ae:e1:92:53:68:05:0c:e7:39:7b:95:
34:17:a7:72:2f:59:29:2b:c0:11:a1:0d:bd:54:f7:2a:b7:14:
17:43:4b:85:7e:88:e0:98:80:cd:b1:d7:f2:7a:1c:6c:a0:e8:
67:b2:6c:05:70:e2:a4:99:70:bc:1d:6f:bb:51:d6:7d:b3:c5:
b1:13:5c:5d:6c:f4:58:30:95:a5:a4:aa:31:7e:3d:32:56:31:
ba:64:61:03:44:59:c5:b0:dd:d4:a1:c7:ce:b6:0f:08:2f:31:
ad:30:84:6e:e4:34:ab:6d:eb:fd:b6:25:e7:53:10:b9:78:e2:
4d:fb:42:7d:a4:99:97:12:3a:ed:01:b8:d4:f7:0a:82:3b:bc:
5f:4b:2e:4e:dd:a0:d7:00:46:44:1d:75:81:63:ee:e8:27:aa:
97:e6:d7:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGquhOyMy+XAs6YVvKBfYioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWEyYTk0MDViZGExNjcxYzEwNzc2ZjQ0MjYyNzNjOTA0
ZTRhZDAwHhcNMjYxMTA1MDgwMTIzWhcNMjYxMTA2MDgwMTIzWjAzMTEwLwYDVQQD
EygwMDJhMjM5OWY3MmIxZTExZWJiZTEyNmRiZmVjMTNkNjliMTdlZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LVKe+U+05j2y+ixEtvnjKnLwRC6
/YN4dTJrVsEtVJiZE6/Uct2Rx66jjf9FDPbOfXfLKepjjAHVMdp4HtUXuydncMQY
880JKtY/Gwc4cx2pnMU9t7O4anAfjpk8SPZAKTkUva+5f9l0x8heuppMOHudErvK
qCeM1efwfPSd+O+0BxvM37asDPPyDFD/tAoGrGorXDPX6QdxbxzL5vJ0YQRp7ftJ
pNFnMQTrSfmMqtFwdZiBMnqJv5xfLzCmu/5OuzBoqv9+IwvR8b1TbDxd/JiCmbjr
7D3kJHVHzktTKeWsLjFHckLau3DzNNs2jNEgYodq18fydNWAOzZV/EXR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAqI5n3Kx4R674Sbb/sE9abF+3TMB8GA1UdIwQY
MBaAFEEaKpQFvaFnHBB3b0QmJzyQTkrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQt
OGM1MmU2NjZhOGEyLzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQtOGM1MmU2NjZhOGEy
LzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQr0OErS7
YCko6fxW9zA+b/y04d7r7mImtQfsuyL+zGyrR38GAEW/fxQTkoAw3NgB7velIsPo
Yd0+NFPhYGtxo8oGA6tHTrBWT0aidLYSHQWazacwBdcBNmxOmIJj7csQs67hklNo
BQznOXuVNBenci9ZKSvAEaENvVT3KrcUF0NLhX6I4JiAzbHX8nocbKDoZ7JsBXDi
pJlwvB1vu1HWfbPFsRNcXWz0WDCVpaSqMX49MlYxumRhA0RZxbDd1KHHzrYPCC8x
rTCEbuQ0q23r/bYl51MQuXjiTftCfaSZlxI67QG41PcKgju8X0suTt2g1wBGRB11
gWPu6Ceql+bX7w==
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:51:36 2026 by rpki-client