Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: nWFK76lsyFF3QBqZ8EoG1AH5t2l9F5+jQjv0aGS2HLU=
Subject key identifier: DC:3A:5D:25:5C:B3:17:C0:6F:50:7B:5E:5A:F5:B6:F3:AA:F9:A5:A7
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 01A13522F128D25C9D3613265273A0735AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 12:00:44 +0000
Manifest this update: Tue 13 Oct 2026 12:00:44 +0000
Manifest next update: Wed 14 Oct 2026 12:00:44 +0000
Files and hashes: 1: NMKwSUUrM8k8eQKWjQoXhVr67Q0.roa (hash: CYXCafl1+25dso4rJFuju+aK/xutXRo5p4nK7eGdbTw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: 9GnPEYyzf1sKo4XjbVSfGMIFvu6bqSDYNWHH+bdbZ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:22:f1:28:d2:5c:9d:36:13:26:52:73:a0:73:5a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Oct 13 12:00:44 2026 GMT
Not After : Oct 14 12:00:44 2026 GMT
Subject: CN=dc3a5d255cb317c06f507b5e5af5b6f3aaf9a5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:42:bd:72:c0:b7:4d:20:9a:26:5b:41:63:
46:2a:be:04:fc:ff:5e:6c:3d:10:a7:c9:8d:aa:48:
62:5d:7d:9d:cd:75:45:d0:c7:28:18:00:c5:88:a7:
f3:7b:fb:38:10:c0:45:d0:32:0b:96:eb:ee:e9:a0:
58:2d:7b:74:35:0b:db:ed:d4:76:b4:6b:88:10:38:
4a:85:0e:4c:06:ce:a2:30:d5:b0:28:3d:f7:9b:38:
ac:22:92:06:dd:a6:b0:22:e4:d4:c8:50:35:a6:9e:
d0:ba:e1:17:3d:e2:76:56:3b:48:ea:43:ee:b6:ac:
71:75:91:de:f8:44:c0:af:cb:d2:51:e2:fc:e2:13:
09:6c:35:54:88:09:6d:7d:0f:04:c6:00:da:e9:89:
99:2b:28:52:be:bd:7f:7a:d7:50:0c:d2:bb:26:55:
1f:ac:6f:63:86:12:1f:95:c1:48:88:f6:1a:af:37:
13:5a:10:a0:ba:cb:66:40:b8:66:68:af:65:eb:2a:
e6:67:5e:93:b6:2f:af:a5:a0:d5:84:07:ad:fa:ea:
88:76:92:a8:da:03:bb:5c:3c:c1:47:f2:97:94:ab:
2f:fe:75:c8:d5:52:2c:dc:af:76:c3:96:95:e8:68:
29:63:4c:54:55:26:dd:4c:ff:c5:cf:d3:1b:7d:3c:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:5D:25:5C:B3:17:C0:6F:50:7B:5E:5A:F5:B6:F3:AA:F9:A5:A7
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:df:a4:c9:02:cd:9f:72:a8:c6:79:32:ad:0e:89:8f:2f:e2:
5b:a7:66:38:9c:2a:e5:b9:59:78:0e:aa:fd:3b:4e:b3:cc:86:
07:73:4c:c9:8f:5a:1c:04:31:29:93:3d:ad:0e:98:d3:25:2c:
65:9c:d7:69:ca:6b:de:83:0f:1d:15:0d:97:7c:b9:06:0b:9c:
2c:ca:ef:90:a4:15:68:04:f2:5a:0e:18:55:41:4b:9f:e3:e6:
c2:8c:58:be:3f:fa:4f:29:e7:45:01:c1:ad:f4:64:6a:44:dd:
d7:79:3f:5a:74:92:4e:95:ec:c0:63:b2:3a:2c:6a:76:76:62:
07:da:c0:b1:9a:ab:9a:1a:89:83:d3:b1:4b:a9:f2:06:19:14:
36:a7:b6:08:b3:11:f7:ae:eb:17:fb:65:00:db:a3:63:1b:b3:
5d:2f:47:d7:07:11:bc:10:f4:fe:b9:98:4e:23:78:ff:af:87:
d4:3d:3f:b9:2f:b3:43:8c:b8:3b:05:9c:56:20:d9:f2:55:04:
f7:5a:d6:37:47:96:8b:e1:14:1f:72:b4:8d:9a:db:5c:90:f5:
35:3c:10:74:a2:a8:50:3c:4f:97:41:c2:ab:3a:4a:3d:76:23:
23:2a:f4:cf:48:b5:06:3e:a2:5a:b9:9c:e9:00:87:b6:c5:17:
c0:75:47:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1IvEo0lydNhMmUnOgc1qoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGZkMWEzYTAyNThkY2NhNjdmYzlkZGRiZjRlMzYxNTdl
NmE3MTYwHhcNMjYxMDEzMTIwMDQ0WhcNMjYxMDE0MTIwMDQ0WjAzMTEwLwYDVQQD
EyhkYzNhNWQyNTVjYjMxN2MwNmY1MDdiNWU1YWY1YjZmM2FhZjlhNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cRCvXLAt00gmiZbQWNGKr4E/P9e
bD0Qp8mNqkhiXX2dzXVF0McoGADFiKfze/s4EMBF0DILluvu6aBYLXt0NQvb7dR2
tGuIEDhKhQ5MBs6iMNWwKD33mzisIpIG3aawIuTUyFA1pp7QuuEXPeJ2VjtI6kPu
tqxxdZHe+ETAr8vSUeL84hMJbDVUiAltfQ8ExgDa6YmZKyhSvr1/etdQDNK7JlUf
rG9jhhIflcFIiPYarzcTWhCgustmQLhmaK9l6yrmZ16Tti+vpaDVhAet+uqIdpKo
2gO7XDzBR/KXlKsv/nXI1VIs3K92w5aV6GgpY0xUVSbdTP/Fz9MbfTybSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw6XSVcsxfAb1B7Xlr1tvOq+aWnMB8GA1UdIwQY
MBaAFEJP0aOgJY3Mpn/J3dv042FX5qcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2Njct
NzQ3YjBlNTdhYjVlLzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85MTM3NTItYjhkYy00ZGZmLTg2NjctNzQ3YjBlNTdhYjVl
LzEvUWtfUm82QWxqY3ltZjhuZDJfVGpZVmZtcHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet+kyQLN
n3KoxnkyrQ6Jjy/iW6dmOJwq5blZeA6q/TtOs8yGB3NMyY9aHAQxKZM9rQ6Y0yUs
ZZzXacpr3oMPHRUNl3y5BgucLMrvkKQVaATyWg4YVUFLn+PmwoxYvj/6TynnRQHB
rfRkakTd13k/WnSSTpXswGOyOixqdnZiB9rAsZqrmhqJg9OxS6nyBhkUNqe2CLMR
967rF/tlANujYxuzXS9H1wcRvBD0/rmYTiN4/6+H1D0/uS+zQ4y4OwWcViDZ8lUE
91rWN0eWi+EUH3K0jZrbXJD1NTwQdKKoUDxPl0HCqzpKPXYjIyr0z0i1Bj6iWrmc
6QCHtsUXwHVHjw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 15:09:17 2026 by rpki-client