Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: e6bzkdWNu7kliDmxCBv2dittfV6g1kwsb5ZnvivPFkU=
Subject key identifier: 6F:5B:CA:9C:1F:45:E3:8B:6A:D3:E3:77:69:02:35:29:FC:B6:71:6F
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 01A0E218D6845CD42E42F441F5AD4A7552E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0CD6
Signing time: Sun 27 Sep 2026 09:01:13 +0000
Manifest this update: Sun 27 Sep 2026 09:01:13 +0000
Manifest next update: Mon 28 Sep 2026 09:01:13 +0000
Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: +ungwtgOOz8z/a3oTBytUjUUJ6IW/Tp/Zu+8lzTsCV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:d6:84:5c:d4:2e:42:f4:41:f5:ad:4a:75:52:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Sep 27 09:01:13 2026 GMT
Not After : Sep 28 09:01:13 2026 GMT
Subject: CN=6f5bca9c1f45e38b6ad3e37769023529fcb6716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:e1:c6:cb:71:2a:21:72:91:8a:48:98:d7:
da:02:af:7f:bb:2e:03:b8:76:f2:8d:49:17:ce:b8:
52:fa:a4:98:c2:da:72:f6:7d:5a:21:5d:df:69:d9:
6b:10:c8:1c:67:02:fd:57:8e:ae:21:75:d0:dc:2c:
c3:b6:d5:07:71:dc:30:dc:9d:97:c8:4b:78:54:9f:
70:70:4b:03:53:27:22:09:24:ee:70:50:0c:13:26:
3e:98:8d:b4:e6:78:0c:94:cd:9a:67:a3:6f:75:46:
48:4b:e3:15:55:17:d4:3a:a0:f1:3d:32:6e:32:b1:
03:04:c6:52:43:d6:aa:28:97:1a:40:50:28:da:14:
1e:aa:5e:6f:04:40:3e:79:d8:e8:7b:26:58:6c:26:
fc:bf:ef:02:b4:b3:d0:f2:a6:36:4d:65:5f:9c:eb:
3e:54:0e:01:5f:84:3c:45:38:fe:de:a8:1e:9c:62:
be:c3:2a:0c:47:12:95:24:c1:d7:d7:46:ad:a6:24:
7d:92:e2:b4:73:98:f4:33:b7:b1:eb:db:8f:b0:9f:
df:52:ad:d6:94:8a:f5:8a:b6:44:7c:6e:d5:b7:b2:
45:e3:a5:0a:e6:3c:78:5e:8d:e8:f2:ae:a5:b2:54:
77:ad:60:ae:c0:05:62:0c:ce:3d:e4:e2:e1:c1:1f:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:CA:9C:1F:45:E3:8B:6A:D3:E3:77:69:02:35:29:FC:B6:71:6F
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:9a:53:6a:bb:56:4d:d5:f9:b2:43:9b:db:a9:bb:af:51:
d2:71:09:ba:cc:90:e8:09:bc:10:15:de:4c:bc:e7:72:26:0e:
b5:ed:a7:99:50:d3:ec:8f:b9:e2:85:65:d2:e4:d4:17:82:d5:
1f:0f:ff:c4:29:0b:4d:df:bc:cc:a4:36:16:49:7c:55:38:bb:
f5:dd:75:1c:38:99:2a:96:2d:1c:2a:b0:df:90:ed:ee:b2:69:
a7:7c:3d:33:90:49:be:c1:e0:54:25:cc:58:64:c2:36:b5:fe:
c6:c2:2c:99:67:42:37:32:ff:7b:df:88:29:74:b9:e3:c4:6e:
8c:25:25:8c:2f:48:81:47:81:2f:44:83:74:cd:ee:18:00:b5:
3c:30:c3:b2:da:e9:41:e2:d8:4b:ef:a3:67:3c:a1:17:b1:fd:
6c:8f:b5:8b:47:3f:ec:d2:bb:07:a6:d6:86:0f:c1:15:d0:ef:
59:6f:61:51:5c:7c:3e:7c:a5:f5:b7:f9:b8:0e:3e:21:a7:26:
66:dc:3b:17:80:22:4f:02:a6:ae:6e:57:53:d4:76:44:f4:65:
15:22:12:04:63:a9:8c:f1:e0:ab:1c:48:ee:e3:e9:57:9a:80:
c9:1a:12:b0:23:db:81:bc:7d:6d:59:d8:a8:68:5f:86:b1:5e:
e0:8d:6e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiGNaEXNQuQvRB9a1KdVLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmRiOWI4MGRmYjljOTU2NzhiMDdlZjJjOTUzZDYzMTA3
ZjVmNjIwHhcNMjYwOTI3MDkwMTEzWhcNMjYwOTI4MDkwMTEzWjAzMTEwLwYDVQQD
Eyg2ZjViY2E5YzFmNDVlMzhiNmFkM2UzNzc2OTAyMzUyOWZjYjY3MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2bhxstxKiFykYpImNfaAq9/uy4D
uHbyjUkXzrhS+qSYwtpy9n1aIV3fadlrEMgcZwL9V46uIXXQ3CzDttUHcdww3J2X
yEt4VJ9wcEsDUyciCSTucFAMEyY+mI205ngMlM2aZ6NvdUZIS+MVVRfUOqDxPTJu
MrEDBMZSQ9aqKJcaQFAo2hQeql5vBEA+edjoeyZYbCb8v+8CtLPQ8qY2TWVfnOs+
VA4BX4Q8RTj+3qgenGK+wyoMRxKVJMHX10atpiR9kuK0c5j0M7ex69uPsJ/fUq3W
lIr1irZEfG7Vt7JF46UK5jx4Xo3o8q6lslR3rWCuwAViDM495OLhwR9gmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9bypwfReOLatPjd2kCNSn8tnFvMB8GA1UdIwQY
MBaAFKktubgN+5yVZ4sH7yyVPWMQf19iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDIt
Y2I3YTVmZDFhYzQ3LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDItY2I3YTVmZDFhYzQ3
LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuWaU2q7
Vk3V+bJDm9upu69R0nEJusyQ6Am8EBXeTLznciYOte2nmVDT7I+54oVl0uTUF4LV
Hw//xCkLTd+8zKQ2Fkl8VTi79d11HDiZKpYtHCqw35Dt7rJpp3w9M5BJvsHgVCXM
WGTCNrX+xsIsmWdCNzL/e9+IKXS548RujCUljC9IgUeBL0SDdM3uGAC1PDDDstrp
QeLYS++jZzyhF7H9bI+1i0c/7NK7B6bWhg/BFdDvWW9hUVx8Pnyl9bf5uA4+Iacm
Ztw7F4AiTwKmrm5XU9R2RPRlFSISBGOpjPHgqxxI7uPpV5qAyRoSsCPbgbx9bVnY
qGhfhrFe4I1ukw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:08:52 2026 by rpki-client