Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
File: qwGK2gxETq14L6SLw3_Q-I__pXY.mft (raw, json)
Hash identifier: ZAkM8vSsNY8PnzL1fk7Yc4M00ucNoMsxFFHqDsSKv+c=
Subject key identifier: 39:0F:8E:27:E8:23:EF:42:9A:F3:14:CD:0D:CB:BC:BF:F0:35:2B:59
Authority key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Certificate issuer: /CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Certificate serial: 01A1AA4C9DF84F4ADE7754AB32EADD9361EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
Manifest number: 0146
Signing time: Thu 05 Nov 2026 06:01:50 +0000
Manifest this update: Thu 05 Nov 2026 06:01:50 +0000
Manifest next update: Fri 06 Nov 2026 06:01:50 +0000
Files and hashes: 1: HbP-7QLw7QBmNNFKl1-VjRoKQYQ.roa (hash: HNxpWcVsRSYnzq6dU7camseM1P/zhpgAzT0swheRdUc=)
2: jfC085keId6PPgSN100bJz3yx4g.asa (hash: D12cwI3Gjb7k60jjJhIM7YbS9niQbydMpfO41Z+Y6mg=)
3: qwGK2gxETq14L6SLw3_Q-I__pXY.crl (hash: 3KPgGijjxdJmSNIjPlqJmtiDBh5YTWyRNiLj9CKMcVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:9d:f8:4f:4a:de:77:54:ab:32:ea:dd:93:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Validity
Not Before: Nov 5 06:01:50 2026 GMT
Not After : Nov 6 06:01:50 2026 GMT
Subject: CN=390f8e27e823ef429af314cd0dcbbcbff0352b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:c9:17:22:d5:a6:96:27:92:79:3e:52:dc:
2d:21:55:76:8a:a0:81:d1:a4:3a:4d:71:70:53:e1:
69:dd:ef:da:d8:41:cc:28:da:be:25:56:25:f4:60:
69:2e:79:5e:bd:9d:5b:f3:3e:ab:37:74:a1:75:f0:
cc:7b:69:a1:c8:ba:63:11:74:00:52:e3:ec:38:9f:
4f:d9:7b:a0:d8:19:96:43:3b:d3:f3:9b:70:2f:2d:
c3:c8:22:46:1c:e7:4e:d3:a8:b3:96:46:39:20:45:
7d:81:6c:32:ae:82:8b:99:7c:b4:2e:e0:b8:84:21:
ba:c7:a0:90:c8:c5:c8:2b:59:5f:27:f5:cb:e5:83:
49:7b:60:b7:aa:a1:de:39:48:df:cb:5b:d7:4f:09:
ea:72:ae:25:20:4c:0a:6c:5e:fb:6d:af:3b:4d:71:
9f:d5:80:5e:28:c6:22:bf:20:e7:6e:1c:1f:23:17:
04:11:47:4c:8b:14:a3:e6:ad:72:21:13:9b:04:ae:
a0:bc:04:03:23:3e:10:96:1c:b3:a9:85:9d:ed:74:
01:12:87:c3:a9:9b:ec:73:20:26:ef:d7:35:c6:65:
f9:fc:b9:51:0c:34:a9:6d:2d:40:f2:a8:ca:7c:ec:
b7:9e:a6:6d:f9:df:b8:39:c3:63:be:a5:3d:bf:a9:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:8E:27:E8:23:EF:42:9A:F3:14:CD:0D:CB:BC:BF:F0:35:2B:59
X509v3 Authority Key Identifier:
keyid:AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ad:04:93:17:89:3c:8c:f7:7d:6a:ec:a7:8f:fa:78:9e:f3:
c0:b9:ba:6d:c6:40:fe:58:ff:c9:eb:51:90:d9:f2:fe:3f:80:
25:a4:73:ac:27:13:85:52:b2:ae:4e:46:a1:8a:ee:27:69:34:
6e:17:12:34:f9:3b:9d:c1:51:c4:a6:4f:2a:0c:38:69:c4:ba:
0a:a9:fb:c4:1a:31:ef:df:6d:52:08:17:77:f8:41:14:1f:47:
25:f3:3e:fb:30:23:b9:47:b8:62:45:ab:a9:38:d9:29:c2:ab:
af:9e:8a:b4:e8:26:91:18:0c:60:23:fa:ea:2f:4f:86:4e:f0:
10:eb:98:3a:40:e1:cf:3a:2a:0f:a6:a2:a0:8b:2a:5d:0a:fd:
d0:d3:bf:e0:3e:67:59:33:83:fc:5e:21:a8:3d:eb:78:cc:69:
22:df:10:96:99:64:81:76:d2:a0:cb:5e:2d:3b:18:1a:70:47:
5e:d0:68:74:ea:94:6b:a9:db:26:18:0a:ea:7a:a0:0d:d7:b7:
b4:07:27:5a:41:8f:67:cb:c7:55:40:f5:31:a8:62:09:ce:f3:
6d:ed:d6:7b:39:72:61:27:06:bc:cb:f3:eb:a2:cd:9e:c0:52:
3a:78:b9:69:e5:b7:d3:22:44:23:ed:0d:a1:06:c9:65:95:a8:
86:d7:4e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqTJ34T0red1SrMurdk2HvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDE4YWRhMGM0NDRlYWQ3ODJmYTQ4YmMzN2ZkMGY4OGZm
ZmE1NzYwHhcNMjYxMTA1MDYwMTUwWhcNMjYxMTA2MDYwMTUwWjAzMTEwLwYDVQQD
EygzOTBmOGUyN2U4MjNlZjQyOWFmMzE0Y2QwZGNiYmNiZmYwMzUyYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWjJFyLVppYnknk+UtwtIVV2iqCB
0aQ6TXFwU+Fp3e/a2EHMKNq+JVYl9GBpLnlevZ1b8z6rN3ShdfDMe2mhyLpjEXQA
UuPsOJ9P2Xug2BmWQzvT85twLy3DyCJGHOdO06izlkY5IEV9gWwyroKLmXy0LuC4
hCG6x6CQyMXIK1lfJ/XL5YNJe2C3qqHeOUjfy1vXTwnqcq4lIEwKbF77ba87TXGf
1YBeKMYivyDnbhwfIxcEEUdMixSj5q1yIRObBK6gvAQDIz4QlhyzqYWd7XQBEofD
qZvscyAm79c1xmX5/LlRDDSpbS1A8qjKfOy3nqZt+d+4OcNjvqU9v6lnEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkPjifoI+9CmvMUzQ3LvL/wNStZMB8GA1UdIwQY
MBaAFKsBitoMRE6teC+ki8N/0PiP/6V2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdHSzJneEVUcTE0TDZTTHczX1EtSV9fcFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzkwMzMtNWI3NC00OGIxLThkN2Yt
Y2MxNTM0NjhlMTk4LzEvcXdHSzJneEVUcTE0TDZTTHczX1EtSV9fcFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzkwMzMtNWI3NC00OGIxLThkN2YtY2MxNTM0NjhlMTk4
LzEvcXdHSzJneEVUcTE0TDZTTHczX1EtSV9fcFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK0EkxeJ
PIz3fWrsp4/6eJ7zwLm6bcZA/lj/yetRkNny/j+AJaRzrCcThVKyrk5GoYruJ2k0
bhcSNPk7ncFRxKZPKgw4acS6Cqn7xBox799tUggXd/hBFB9HJfM++zAjuUe4YkWr
qTjZKcKrr56KtOgmkRgMYCP66i9Phk7wEOuYOkDhzzoqD6aioIsqXQr90NO/4D5n
WTOD/F4hqD3reMxpIt8QlplkgXbSoMteLTsYGnBHXtBodOqUa6nbJhgK6nqgDde3
tAcnWkGPZ8vHVUD1MahiCc7zbe3WezlyYScGvMvz66LNnsBSOni5aeW30yJEI+0N
oQbJZZWohtdOhw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:11:07 2026 by rpki-client