Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: o89sR3z7fJu6MINV8iIpCUVwAMcMGLSbYG7ngSX6q9k=
Subject key identifier: 8F:67:73:03:9D:48:2A:62:09:92:4B:19:0E:D4:FF:B4:55:F1:12:6E
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 01A0DD2A24BEF92172264A78EE0D84C736A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 10:02:01 +0000
Manifest this update: Sat 26 Sep 2026 10:02:01 +0000
Manifest next update: Sun 27 Sep 2026 10:02:01 +0000
Files and hashes: 1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: dORbPamN6/PU8ql0Xs0HiSFLaSp0ZDD5cMsmYoLnm14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:24:be:f9:21:72:26:4a:78:ee:0d:84:c7:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Sep 26 10:02:01 2026 GMT
Not After : Sep 27 10:02:01 2026 GMT
Subject: CN=8f6773039d482a6209924b190ed4ffb455f1126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:ff:f9:a7:f7:76:02:00:c5:84:43:c4:12:
be:ca:c7:17:d2:33:55:17:d1:4f:39:56:89:50:45:
32:fc:54:19:b9:b9:d6:c4:66:b1:3a:f8:4e:d2:02:
a7:c4:54:94:68:a6:68:16:0a:ab:aa:4b:6c:c3:3a:
b2:e9:38:a0:48:aa:a7:2f:92:00:0e:05:92:f1:2b:
9f:31:10:a7:ec:25:b4:2e:a3:4f:53:f2:1d:b4:7c:
36:78:19:5d:b1:04:7c:26:7f:c7:d7:09:3e:47:b3:
50:be:5a:e8:e9:40:00:39:87:57:e9:43:c5:4d:6b:
1e:c3:6c:95:36:2c:8e:f8:0a:bf:f3:36:08:b8:c9:
57:5c:a7:16:e1:73:97:b8:c5:6b:d4:4b:98:83:e1:
be:1a:b4:25:1a:e1:34:2a:cf:19:12:10:6c:6e:04:
56:0a:f2:b9:7b:83:62:b7:77:bb:fd:19:5e:7b:ef:
96:ba:a6:44:56:9c:5b:56:38:06:91:fb:28:0f:8c:
ab:7f:e5:af:f0:1d:ee:c5:ce:fa:64:2c:e9:8f:96:
0a:2c:1b:5e:1d:9f:a8:63:31:c2:ae:88:ed:36:cb:
1c:91:2b:9a:bc:59:d3:41:f7:21:8d:52:94:78:41:
d2:bf:7f:70:7a:02:86:0e:06:51:25:4e:83:e3:fd:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:73:03:9D:48:2A:62:09:92:4B:19:0E:D4:FF:B4:55:F1:12:6E
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b7:b5:44:cf:88:a3:77:59:77:44:8b:bb:a6:09:f5:0c:13:
04:44:dd:85:ab:b1:80:3e:1b:6c:da:61:5d:48:16:12:ef:fa:
9e:55:72:91:7c:eb:45:17:01:90:c7:34:9e:e7:54:0e:3f:72:
d1:d4:de:09:92:4e:e4:d9:0b:a6:f7:11:0f:f0:f1:4a:2b:c4:
7e:ca:36:36:14:3e:a3:86:4b:9b:ba:75:06:c3:a2:18:ed:23:
0e:9d:6f:02:6f:80:a8:66:50:31:f6:a4:24:97:fd:1d:68:19:
c2:9a:5a:80:c4:f3:6c:f3:03:2a:0c:9f:9e:19:cb:14:b6:2f:
e4:0e:4d:59:6e:9a:38:5c:d3:5a:9e:87:26:e5:ad:c8:c8:31:
5a:c5:3a:57:90:9d:80:11:58:ea:58:59:f2:7c:60:0c:7e:c2:
0f:83:14:4c:51:7c:74:93:a3:0f:dc:7b:78:af:2b:52:b4:9c:
06:2c:24:50:9d:78:67:71:35:5d:2a:b2:93:27:1f:96:1d:cb:
c6:d5:2b:d0:aa:8e:86:f1:b8:b7:e6:5a:10:b8:11:47:ac:c0:
6c:7b:29:d5:1e:b5:f0:94:2f:bc:34:e7:74:3a:8d:60:db:09:
48:78:4c:e4:aa:7a:85:69:9c:61:2e:b7:cb:8a:02:88:74:cd:
2c:14:d2:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKiS++SFyJkp47g2ExzamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3
YmZkNTQwHhcNMjYwOTI2MTAwMjAxWhcNMjYwOTI3MTAwMjAxWjAzMTEwLwYDVQQD
Eyg4ZjY3NzMwMzlkNDgyYTYyMDk5MjRiMTkwZWQ0ZmZiNDU1ZjExMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB3/+af3dgIAxYRDxBK+yscX0jNV
F9FPOVaJUEUy/FQZubnWxGaxOvhO0gKnxFSUaKZoFgqrqktswzqy6TigSKqnL5IA
DgWS8SufMRCn7CW0LqNPU/IdtHw2eBldsQR8Jn/H1wk+R7NQvlro6UAAOYdX6UPF
TWsew2yVNiyO+Aq/8zYIuMlXXKcW4XOXuMVr1EuYg+G+GrQlGuE0Ks8ZEhBsbgRW
CvK5e4Nit3e7/Rlee++WuqZEVpxbVjgGkfsoD4yrf+Wv8B3uxc76ZCzpj5YKLBte
HZ+oYzHCrojtNssckSuavFnTQfchjVKUeEHSv39wegKGDgZRJU6D4/26NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9ncwOdSCpiCZJLGQ7U/7RV8RJuMB8GA1UdIwQY
MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt
OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy
LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLe1RM+I
o3dZd0SLu6YJ9QwTBETdhauxgD4bbNphXUgWEu/6nlVykXzrRRcBkMc0nudUDj9y
0dTeCZJO5NkLpvcRD/DxSivEfso2NhQ+o4ZLm7p1BsOiGO0jDp1vAm+AqGZQMfak
JJf9HWgZwppagMTzbPMDKgyfnhnLFLYv5A5NWW6aOFzTWp6HJuWtyMgxWsU6V5Cd
gBFY6lhZ8nxgDH7CD4MUTFF8dJOjD9x7eK8rUrScBiwkUJ14Z3E1XSqykycflh3L
xtUr0KqOhvG4t+ZaELgRR6zAbHsp1R618JQvvDTndDqNYNsJSHhM5Kp6hWmcYS63
y4oCiHTNLBTSiw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:02:29 2026 by rpki-client